This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: A/+enNB/2/Jy0UoupIzMIHwHzDTtLIGVgVAz6dhJSWg= Subject key identifier: E0:E2:86:33:A5:22:2D:7C:C5:CE:6B:BD:56:EF:20:69:6C:7D:CE:77 Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 0812 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 07E8 Signing time: Thu 18 Dec 2025 20:42:57 +0000 Manifest this update: Thu 18 Dec 2025 20:42:56 +0000 Manifest next update: Thu 25 Dec 2025 20:42:56 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: /+sxiXcWuwoGb9eRWoWe9Qs6jcP8AsJ/lgeFDxTdgLE=) 2: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: lqYCCMlU2p+r8Vr8oCvHriQYj28R9n24bUWS9AQiTY0=) 3: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: jMAptin7Nn/9ubjtB7+t/RBCpP9LLYksPnIclcQRTkk=) 4: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: eRh3STMZAaCuqDqQZCMcnNT2rNeo5Bk/5FuTVp0jQRg=) 5: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: 9AUbM37b5CiLCdaFctD08Xg1S7rAzz8NUfqZj75vIUI=) 6: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: NCqMqwIpI4KCw7V6V+LHlzb+BzZa7gOeav4mNQAltOI=) 7: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: Ath/WU2ZkFdzqQ3oivM8Zg8QBrfw7L/kuNwCwRxLfag=) 8: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Djj/jcA9qOYbqLWVcaOfucyuLejfqOjI1XLtoDbH2+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2066 (0x812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Dec 18 20:42:56 2025 GMT Not After : Dec 25 20:42:56 2025 GMT Subject: CN=69446751-fcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:18:97:1c:85:d8:fe:e3:15:ad:ab:74:fa: 71:e3:0e:80:10:91:2e:d9:2a:bf:34:a7:d0:c6:b6: b0:90:1a:00:72:a0:b4:75:76:5e:7b:a1:47:3e:23: 49:4a:7c:81:d6:36:49:52:9f:11:0b:e0:8f:f4:b7: ea:dd:d1:b4:3f:c3:94:b4:e1:d5:b8:a6:86:87:08: 7a:12:97:37:4e:9d:46:f4:c7:43:13:10:d0:d4:cf: a6:99:67:03:8e:71:62:3d:07:7b:46:32:89:c0:21: 20:d1:48:1e:64:86:28:7a:07:31:c8:d3:a8:5b:e0: 20:44:54:a1:9b:84:1d:2d:ed:57:a2:7f:87:26:23: ba:d4:87:f3:9a:ae:3b:4f:93:45:88:bf:4e:cd:ee: f1:b3:f0:3a:a7:97:52:b2:ec:50:e0:87:94:a4:e5: 4e:5d:d8:7d:bb:8e:75:d6:a3:b9:cc:12:fd:b0:97: 5b:17:03:5f:c2:01:8b:af:0a:89:71:75:28:b1:83: 7a:dc:39:eb:01:cb:37:05:c2:5e:2f:aa:7f:18:91: ed:ea:2a:a5:f8:40:05:df:cc:12:b9:86:d9:52:a9: 6c:1a:0b:af:83:0a:b3:f7:b3:c3:81:ce:0d:52:9c: 88:b2:d8:1f:a1:40:0d:b5:8f:60:45:ec:f8:fd:d9: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E2:86:33:A5:22:2D:7C:C5:CE:6B:BD:56:EF:20:69:6C:7D:CE:77 X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:32:69:94:3c:06:2a:7a:f6:61:96:48:12:f5:8e:3a:61:c1: e6:b3:5d:fd:ab:d0:5f:ca:f1:ae:f2:c6:6c:bb:d1:ed:c2:2c: ee:ab:7d:46:b6:93:f6:94:75:e5:d3:2e:6c:53:87:71:0d:91: 1c:85:b1:20:45:7b:57:78:78:05:89:d0:6e:2a:d6:2b:aa:ac: 51:0a:55:60:3e:24:03:52:5a:db:84:f1:11:58:8f:67:7b:41: f2:73:ec:e0:8f:35:3b:e8:30:fc:ae:d7:ee:9e:00:f8:b7:b5: 6a:27:ae:fa:5f:61:4d:09:75:e1:22:b8:32:a4:f0:2e:02:fd: cc:c9:16:c3:70:84:32:f4:70:fe:45:5c:de:d6:36:4b:f9:47: dc:e7:40:a9:bc:36:f3:03:af:61:b4:11:80:46:4c:ec:41:36: 1c:f1:90:c5:e3:30:39:e0:c9:e8:cc:5b:7a:8c:98:41:88:75: ee:93:21:d0:72:88:f7:95:f3:f5:3c:2a:85:7e:06:8a:6f:78: 23:14:9d:f6:6b:79:7d:17:29:1c:79:a8:48:d9:06:87:50:d8: 96:d7:4f:f2:8a:08:00:e2:f5:be:2f:8b:7c:2a:73:33:39:df: a3:7d:1e:41:db:5b:ad:c1:6d:82:54:a8:61:92:a7:d6:7c:11: cb:eb:61:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjUxMjE4MjA0MjU2WhcNMjUxMjI1MjA0MjU2WjAYMRYwFAYD VQQDDA02OTQ0Njc1MS1mY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmQYlxyF2P7jFa2rdPpx4w6AEJEu2Sq/NKfQxrawkBoAcqC0dXZee6FHPiNJ SnyB1jZJUp8RC+CP9Lfq3dG0P8OUtOHVuKaGhwh6Epc3Tp1G9MdDExDQ1M+mmWcD jnFiPQd7RjKJwCEg0UgeZIYoegcxyNOoW+AgRFShm4QdLe1Xon+HJiO61Ifzmq47 T5NFiL9Oze7xs/A6p5dSsuxQ4IeUpOVOXdh9u4511qO5zBL9sJdbFwNfwgGLrwqJ cXUosYN63DnrAcs3BcJeL6p/GJHt6iql+EAF38wSuYbZUqlsGguvgwqz97PDgc4N UpyIstgfoUANtY9gRez4/dkacwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODihjOl Ii18xc5rvVbvIGlsfc53MB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHMmmUPAYqevZhlkgS9Y46YcHms139q9BfyvGu8sZsu9Htwizuq31G tpP2lHXl0y5sU4dxDZEchbEgRXtXeHgFidBuKtYrqqxRClVgPiQDUlrbhPERWI9n e0Hyc+zgjzU76DD8rtfungD4t7VqJ676X2FNCXXhIrgypPAuAv3MyRbDcIQy9HD+ RVze1jZL+Ufc50CpvDbzA69htBGARkzsQTYc8ZDF4zA54MnozFt6jJhBiHXukyHQ coj3lfP1PCqFfgaKb3gjFJ32a3l9FykceahI2QaHUNiW10/yiggA4vW+L4t8KnMz Od+jfR5B21utwW2CVKhhkqfWfBHL62FA -----END CERTIFICATE-----Generated at Sat Dec 20 11:41:43 2025 by rpki-client