This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json) Hash identifier: yfn6su05x58u7wLDU/O59Vb7NdUt/CACvGW4lpoXHgQ= Subject key identifier: 87:41:B8:39:25:C0:20:8A:75:BD:3C:11:75:21:22:0F:B0:47:10:6E Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Certificate serial: 06F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft Manifest number: 06E8 Signing time: Mon 22 Dec 2025 21:15:38 +0000 Manifest this update: Mon 22 Dec 2025 21:15:38 +0000 Manifest next update: Mon 29 Dec 2025 21:15:38 +0000 Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: W5zikH0LFQXquS4ix9vMWowVs/o1TyOHqAWh6VuBnzY=) 2: 2E248E2CAD8511F08469DF53C4F9AE02.roa (hash: tYXj2bMl7MaKxL6ygpAW6mqtyVQwQZ+Bu+BYsWPtUdc=) 3: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: cbGv9Az0WV6nTGgrUjq6cjPrkcXLiewtavxh7ffNibo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785 (0x6f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Validity Not Before: Dec 22 21:15:38 2025 GMT Not After : Dec 29 21:15:38 2025 GMT Subject: CN=6949b4fa-83a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:bf:5b:a3:0d:ce:29:f8:eb:79:b7:fa:7e: aa:33:b8:cf:ba:14:28:2d:25:05:71:1e:ab:49:86: 43:12:7a:a3:4d:a1:b6:9f:74:c8:fe:81:2b:f3:82: 06:6a:8f:d6:f6:f8:07:57:54:f7:de:3d:1c:06:c7: 9c:6f:b4:3c:25:8b:54:16:91:f6:a0:04:4e:0d:f0: ce:e2:d5:b4:55:dd:fe:3b:23:a1:c8:1b:80:48:4c: f8:90:66:b9:d5:a6:4c:ed:26:04:3d:00:d6:fc:d9: 49:4e:f2:63:20:2d:b5:28:19:e2:74:5e:f8:fb:cb: 5c:cd:9b:dd:ee:d3:33:45:95:8e:08:8a:c9:64:82: 2e:24:67:b9:79:01:ff:d6:32:22:34:eb:e5:bf:8a: 7b:d1:f6:db:e7:bc:bd:55:7c:1c:8c:9a:33:37:f1: 39:87:d7:a4:4c:72:04:a3:5b:e5:47:49:5a:41:27: fe:06:56:cc:91:fb:fc:58:d7:cf:bb:ca:8c:9e:3d: 3f:07:47:32:9d:26:49:69:1b:31:fc:51:c5:dd:91: 3b:33:16:db:fc:af:4b:70:36:0a:8c:2c:d4:66:30: 89:4a:1f:fc:06:09:ca:fe:d7:4c:73:cd:20:03:e1: e9:48:06:85:f5:73:1f:b2:8f:65:50:66:62:8e:2f: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:41:B8:39:25:C0:20:8A:75:BD:3C:11:75:21:22:0F:B0:47:10:6E X509v3 Authority Key Identifier: keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:d6:46:7a:19:f0:4a:50:76:7d:f8:f9:bc:1e:bc:e4:0b:d5: a2:b5:65:4f:65:c4:6f:b4:f9:c6:45:8e:6b:43:2d:4c:6d:2d: a6:1f:5b:db:7c:1f:18:d1:e7:9a:b4:32:aa:01:c2:c3:07:65: f3:2e:99:f7:3d:bb:e8:47:b1:09:80:6e:47:f0:9f:50:9c:ee: fe:2a:86:6f:47:38:0f:c1:2e:6f:2d:18:cf:62:d4:56:74:12: 59:d5:21:46:80:f9:ed:31:5b:97:93:be:2a:6a:69:1b:95:66: 44:5d:33:47:8f:9d:59:5c:f9:eb:c4:e1:e4:45:7b:68:d7:ea: 07:3c:6e:5d:41:ad:58:69:4e:8a:fe:21:ae:04:ab:02:e6:51: 6d:42:b7:28:bc:56:61:8b:98:31:7f:1f:1f:3d:61:93:10:d5: 94:d2:94:4e:af:2a:28:02:40:89:c8:51:79:0b:1e:42:27:63: a0:39:59:45:25:2c:bd:29:e0:de:cf:85:41:23:be:58:9c:4a: a8:03:6f:20:90:59:78:05:bc:00:84:d1:1e:21:bc:47:0f:a0: 82:e2:d3:ad:64:f0:64:08:10:69:f8:c0:38:38:39:65:5b:9d: 03:e3:cf:66:9a:c4:12:26:0c:66:f9:bc:4e:ad:3d:a0:1e:d0: 0f:e0:d3:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5 NTYwRjJCQ0EwHhcNMjUxMjIyMjExNTM4WhcNMjUxMjI5MjExNTM4WjAYMRYwFAYD VQQDDA02OTQ5YjRmYS04M2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxO/W6MNzin463m3+n6qM7jPuhQoLSUFcR6rSYZDEnqjTaG2n3TI/oEr84IG ao/W9vgHV1T33j0cBsecb7Q8JYtUFpH2oARODfDO4tW0Vd3+OyOhyBuASEz4kGa5 1aZM7SYEPQDW/NlJTvJjIC21KBnidF74+8tczZvd7tMzRZWOCIrJZIIuJGe5eQH/ 1jIiNOvlv4p70fbb57y9VXwcjJozN/E5h9ekTHIEo1vlR0laQSf+BlbMkfv8WNfP u8qMnj0/B0cynSZJaRsx/FHF3ZE7Mxbb/K9LcDYKjCzUZjCJSh/8BgnK/tdMc80g A+HpSAaF9XMfso9lUGZiji+TrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdBuDkl wCCKdb08EXUhIg+wRxBuMB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUJDQi8zNDJGRkYxODdBODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2 NkFNRUFnREpxcWlWWVBLOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC1kZ6GfBKUHZ9+Pm8HrzkC9WitWVPZcRvtPnGRY5rQy1MbS2mH1vb fB8Y0eeatDKqAcLDB2XzLpn3PbvoR7EJgG5H8J9QnO7+KoZvRzgPwS5vLRjPYtRW dBJZ1SFGgPntMVuXk74qamkblWZEXTNHj51ZXPnrxOHkRXto1+oHPG5dQa1YaU6K /iGuBKsC5lFtQrcovFZhi5gxfx8fPWGTENWU0pROryooAkCJyFF5Cx5CJ2OgOVlF JSy9KeDez4VBI75YnEqoA28gkFl4BbwAhNEeIbxHD6CC4tOtZPBkCBBp+MA4ODll W50D489mmsQSJgxm+bxOrT2gHtAP4NM7 -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:43 2025 by rpki-client