This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json) Hash identifier: JuiLMX9KA4+3/MksE46+zKN071hVoKOY3HF270rCPsE= Subject key identifier: F1:63:AA:86:87:B8:C8:97:75:B2:40:41:A5:41:0D:3E:1E:D0:81:AB Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Certificate serial: 0419 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft Manifest number: 0410 Signing time: Thu 18 Dec 2025 23:43:52 +0000 Manifest this update: Thu 18 Dec 2025 23:43:51 +0000 Manifest next update: Thu 25 Dec 2025 23:43:51 +0000 Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: X5duapALCvhmo/W6vwsci6Y5F06xlFetWlcKnVhUPKs=) 2: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: sczNDr9Uf1o14TeMLvhQpR0Eoi4DkVd7EM/ILBPX2f8=) 3: 412371002A5911F08EA23244C4F9AE02.roa (hash: nv5XmU97C++H82vtSbaW06zkLpVOeaF9Xg49KK/5bYU=) 4: 2106E428992111EC99E0095AC4F9AE02.roa (hash: WwA/rBGjBDEpiOexD1IjCU08QUDY8G7l57/ipRDGA8M=) 5: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: ZEuV8rnSTrAUL1+f9B0DJgZDQV0kGj4jMARqkjlC+9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1049 (0x419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Validity Not Before: Dec 18 23:43:51 2025 GMT Not After : Dec 25 23:43:51 2025 GMT Subject: CN=694491b8-d4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:08:55:81:68:62:9c:d9:db:38:b4:01:e8: 06:ab:8c:9e:5b:96:c6:b2:2d:d4:fe:fc:88:ec:51: ee:eb:78:fd:ff:63:16:ff:cf:46:33:08:44:e6:c6: 6b:6c:3f:02:09:68:23:49:99:b2:44:1c:52:ef:a0: c1:9f:54:8b:d7:11:4e:19:41:7b:5f:ab:55:88:19: c3:48:6f:93:8e:3c:0e:c4:68:46:a4:58:56:47:59: 07:cd:1e:65:07:4a:27:b0:56:fe:f4:8e:d5:13:fc: 2b:4d:d1:6d:cd:c5:36:75:e1:64:ae:42:97:07:16: 46:35:fd:43:7f:88:18:2a:f1:74:39:b6:50:3f:dc: 85:aa:67:56:d2:da:e8:e2:4f:ed:c8:02:d9:47:97: 70:ba:f8:5d:45:5a:d4:98:3f:b0:57:b5:40:1a:f2: a1:35:35:b4:58:ac:af:fd:b4:a0:80:6e:aa:b7:30: 7d:0f:dd:5f:05:cf:2d:99:05:75:a8:3e:af:3e:a4: 5b:4d:5b:67:c7:17:dc:2e:c8:0b:ad:b8:25:23:49: 22:f8:4e:ad:48:06:44:c0:d0:f5:ea:c1:45:a7:f4: 7c:3e:10:a3:d8:06:2f:a7:63:e4:e2:36:34:37:39: 29:ea:2b:77:a3:ad:3f:eb:03:1f:11:1f:17:ec:d9: c3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:63:AA:86:87:B8:C8:97:75:B2:40:41:A5:41:0D:3E:1E:D0:81:AB X509v3 Authority Key Identifier: keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:0d:11:cd:de:ba:ee:5c:df:7c:df:b2:2c:9e:89:dc:db:d3: 62:c3:f4:71:6e:dd:0e:03:0d:07:92:68:cb:de:2c:e7:9a:01: 62:d3:f6:07:c9:08:b7:f1:d8:98:f9:c5:05:cb:15:e5:f8:e4: 48:e1:c0:9f:a9:d9:f0:a6:4a:9a:60:fa:73:0c:35:30:92:27: 53:83:25:d4:10:6f:eb:d2:31:6e:da:b0:94:60:c3:0e:33:dd: f5:65:35:c0:f6:73:f3:88:22:8c:c5:f1:bd:02:f5:6c:9c:f3: b2:7f:56:f9:52:6d:8f:8e:71:36:ae:59:c4:e9:e3:56:61:92: f3:5e:bc:79:28:6d:02:34:a5:6c:f1:f1:7f:1d:a9:02:00:91: 48:62:ba:36:48:4d:09:db:93:3d:e7:a1:8f:35:7b:0b:46:90: 4a:9f:ed:00:bc:5e:74:fb:ad:a7:16:13:b5:f7:17:61:3f:72: f8:7c:76:c8:92:a2:46:58:3d:33:ef:8a:aa:95:cd:d3:d5:b6: 6a:43:25:a7:9d:22:f6:5e:4b:c6:ac:81:db:a0:78:6e:ea:3e: 5c:12:84:13:9b:49:3e:af:82:1c:0c:c0:1e:35:d0:7b:e8:b5: 25:56:c2:52:e7:51:f2:73:6a:91:0f:18:2d:0d:f4:6a:8f:91: 65:23:6d:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3 ODAzMTFBNUQwHhcNMjUxMjE4MjM0MzUxWhcNMjUxMjI1MjM0MzUxWjAYMRYwFAYD VQQDDA02OTQ0OTFiOC1kNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfwIVYFoYpzZ2zi0AegGq4yeW5bGsi3U/vyI7FHu63j9/2MW/89GMwhE5sZr bD8CCWgjSZmyRBxS76DBn1SL1xFOGUF7X6tViBnDSG+TjjwOxGhGpFhWR1kHzR5l B0onsFb+9I7VE/wrTdFtzcU2deFkrkKXBxZGNf1Df4gYKvF0ObZQP9yFqmdW0tro 4k/tyALZR5dwuvhdRVrUmD+wV7VAGvKhNTW0WKyv/bSggG6qtzB9D91fBc8tmQV1 qD6vPqRbTVtnxxfcLsgLrbglI0ki+E6tSAZEwND16sFFp/R8PhCj2AYvp2Pk4jY0 Nzkp6it3o60/6wMfER8X7NnDxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFjqoaH uMiXdbJAQaVBDT4e0IGrMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5 MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFBRC84RkRERjVFODk5MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3Zv VUVuU3I1c3lyTWg0QXhHbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnDRHN3rruXN9837Isnonc29Niw/Rxbt0OAw0HkmjL3iznmgFi0/YH yQi38diY+cUFyxXl+ORI4cCfqdnwpkqaYPpzDDUwkidTgyXUEG/r0jFu2rCUYMMO M931ZTXA9nPziCKMxfG9AvVsnPOyf1b5Um2PjnE2rlnE6eNWYZLzXrx5KG0CNKVs 8fF/HakCAJFIYro2SE0J25M956GPNXsLRpBKn+0AvF50+62nFhO19xdhP3L4fHbI kqJGWD0z74qqlc3T1bZqQyWnnSL2XkvGrIHboHhu6j5cEoQTm0k+r4IcDMAeNdB7 6LUlVsJS51Hyc2qRDxgtDfRqj5FlI21S -----END CERTIFICATE-----Generated at Sat Dec 20 21:10:28 2025 by rpki-client