This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json) Hash identifier: 1SoKfcav+i/TkgO+ESHpXf0Ub5B+Ry++B14fVwdOPrI= Subject key identifier: A1:A7:17:5A:37:34:E7:B1:9B:2E:19:40:81:BA:A0:66:52:F0:60:81 Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft Manifest number: 02EE Signing time: Tue 23 Dec 2025 00:15:17 +0000 Manifest this update: Tue 23 Dec 2025 00:15:16 +0000 Manifest next update: Tue 30 Dec 2025 00:15:16 +0000 Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: 2RxEl85edGlyQ0kum9YwYe0s16E4Wsqapr5+wjvwzAo=) 2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: Th4mKp6+0pNQJZ74KauM9+0p7vkvxGV4bsaH8ldZHTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Validity Not Before: Dec 23 00:15:16 2025 GMT Not After : Dec 30 00:15:16 2025 GMT Subject: CN=6949df15-d516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d6:24:7d:a5:ea:96:62:3d:fe:f5:50:ee:f0: b1:8d:ce:15:a3:0d:79:6f:49:3b:4e:4a:a0:1e:fe: 18:3c:aa:98:15:3c:4a:36:d9:41:48:06:bd:42:46: 01:30:c3:6b:a1:68:23:54:9f:db:35:d4:b4:f7:d0: ca:48:4a:a6:f7:aa:4b:61:6b:d5:df:04:39:b2:49: 36:29:0a:5e:da:43:cc:71:f4:15:2a:80:d0:d4:ff: 1b:a6:55:af:06:b9:d7:c2:67:ee:2a:f1:ab:dd:d2: 70:aa:30:5c:52:77:ad:34:5b:a2:86:fd:58:17:5b: 44:bf:1c:a3:07:6c:46:0f:06:df:8c:34:64:9c:3f: cb:1c:54:37:0e:f1:4e:39:91:2f:17:c1:e6:b9:30: 7a:81:29:8c:9c:e6:86:60:54:4b:94:65:1a:85:e2: e5:99:50:cf:eb:82:65:ad:64:35:6b:e1:07:bd:d5: 26:6a:66:47:b6:59:90:c8:cf:fd:79:dc:da:50:ef: 2a:05:8a:23:af:83:d3:f8:24:50:3b:2f:54:fd:ac: 18:a1:a7:72:4e:b1:6e:a1:07:d8:bc:28:50:99:be: d1:44:04:17:b8:fc:a5:68:3b:f2:a6:26:15:cf:6b: 26:05:9f:74:eb:70:6f:bd:73:2b:cb:60:38:f6:8c: 9a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A7:17:5A:37:34:E7:B1:9B:2E:19:40:81:BA:A0:66:52:F0:60:81 X509v3 Authority Key Identifier: keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:8a:f5:9e:fe:7a:09:6b:fa:98:22:87:fe:4d:17:84:e9:4f: e3:af:01:fc:cf:a0:62:a8:62:46:15:50:09:5e:44:62:90:b4: e9:24:90:50:67:d0:96:55:ba:01:6c:7c:ab:34:e9:08:c5:7d: a0:bf:86:68:b1:bf:69:84:5a:b8:53:15:70:fd:01:fb:cf:fa: 2d:5f:c4:0c:82:1c:80:c4:d8:a2:3e:16:55:ed:71:e0:eb:03: 89:7a:68:3d:7a:d6:2c:d4:bf:7d:cb:82:03:ac:2b:f0:51:50: d6:e6:d1:32:a2:88:1a:8f:1f:8c:2d:c4:23:93:95:72:c6:a6: 4c:12:62:a7:ea:8e:50:8b:bb:f5:9e:8e:73:26:bb:fb:67:6d: 3f:86:f4:1f:a2:40:ac:78:aa:7a:dd:96:e6:fc:dc:af:f5:58: 7e:17:ab:ae:45:8c:95:15:6d:f4:ac:98:b5:a9:85:4b:a6:05: 0e:8e:3a:b5:29:f8:55:76:5a:e2:01:df:e2:06:88:aa:c3:cb: 96:97:5b:8f:33:52:5d:5b:1c:1e:bf:39:7f:b6:40:61:e7:f7: 8b:72:28:c1:fc:4f:9b:f8:2d:7f:97:99:e1:6a:9d:8b:e0:9a: 27:c5:17:06:d2:14:dc:76:73:25:7a:1d:a6:81:e9:c4:c6:ff: f6:e8:4e:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw NzM4QUVGQkIwHhcNMjUxMjIzMDAxNTE2WhcNMjUxMjMwMDAxNTE2WjAYMRYwFAYD VQQDDA02OTQ5ZGYxNS1kNTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiNYkfaXqlmI9/vVQ7vCxjc4Vow15b0k7TkqgHv4YPKqYFTxKNtlBSAa9QkYB MMNroWgjVJ/bNdS099DKSEqm96pLYWvV3wQ5skk2KQpe2kPMcfQVKoDQ1P8bplWv BrnXwmfuKvGr3dJwqjBcUnetNFuihv1YF1tEvxyjB2xGDwbfjDRknD/LHFQ3DvFO OZEvF8HmuTB6gSmMnOaGYFRLlGUaheLlmVDP64JlrWQ1a+EHvdUmamZHtlmQyM/9 edzaUO8qBYojr4PT+CRQOy9U/awYoadyTrFuoQfYvChQmb7RRAQXuPylaDvypiYV z2smBZ9063BvvXMry2A49oya9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGnF1o3 NOexmy4ZQIG6oGZS8GCBMB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4 OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr dVpndEd5WGVzTVlIT0s3N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2ivWe/noJa/qYIof+TReE6U/jrwH8z6BiqGJGFVAJXkRikLTpJJBQ Z9CWVboBbHyrNOkIxX2gv4Zosb9phFq4UxVw/QH7z/otX8QMghyAxNiiPhZV7XHg 6wOJemg9etYs1L99y4IDrCvwUVDW5tEyoogajx+MLcQjk5VyxqZMEmKn6o5Qi7v1 no5zJrv7Z20/hvQfokCseKp63Zbm/Nyv9Vh+F6uuRYyVFW30rJi1qYVLpgUOjjq1 KfhVdlriAd/iBoiqw8uWl1uPM1JdWxwevzl/tkBh5/eLcijB/E+b+C1/l5nhap2L 4JonxRcG0hTcdnMleh2mgenExv/26E5o -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:53 2025 by rpki-client