This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft File: fTWFKD3zPrULnDiNWc14bLudw54.mft (raw, json) Hash identifier: cB/ucLDoexA/IK1LVBKxjqoae6mvAiU0s7ba8WpOXc8= Subject key identifier: DF:6D:95:44:8A:EE:53:C8:14:D7:75:AB:7B:A4:5E:C5:D2:59:C9:AD Authority key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E Certificate issuer: /CN=A91352D1/serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft Manifest number: 18 Signing time: Fri 19 Dec 2025 06:48:33 +0000 Manifest this update: Fri 19 Dec 2025 06:48:33 +0000 Manifest next update: Fri 26 Dec 2025 06:48:33 +0000 Files and hashes: 1: fTWFKD3zPrULnDiNWc14bLudw54.crl (hash: oGpS4RfhKFL2NrAFx6+vxcZwz4+2aLN1RcW5PLkiQ88=) 2: F0F521DEC10B11F0B1AC197FC4F9AE02.roa (hash: SOZdm0XRjeKBQo6yKoYuPgXjYHien32Esy3ozHe7Fjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E Validity Not Before: Dec 19 06:48:33 2025 GMT Not After : Dec 26 06:48:33 2025 GMT Subject: CN=6944f541-b009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:73:eb:33:50:be:7e:35:df:0c:af:00:9b: ed:7c:73:5d:bc:53:be:b6:6f:12:0b:e9:3e:20:10: 75:5f:d6:6e:ed:f3:51:e7:2f:b6:35:ab:b8:1d:ea: 40:30:98:73:a6:c7:38:a0:04:a7:09:18:9f:56:44: 30:05:57:ac:1b:c2:cc:19:e1:31:24:c5:9d:25:70: 2e:54:b6:33:5b:d1:ef:d2:4d:d3:2e:e9:6a:e8:58: 05:c0:f2:27:ee:1b:d0:10:eb:12:95:bb:6d:a6:fd: 3b:fa:9f:c9:34:e7:e2:47:20:1c:a4:69:a2:33:08: 68:5e:c9:12:76:ac:dd:bd:ee:8e:f0:64:e9:86:e3: 5a:c4:0a:f9:31:c5:62:12:18:c0:82:ff:a2:d8:71: ce:72:27:ce:34:15:2b:06:57:92:62:37:c1:81:1f: 97:d1:55:e0:c3:1b:52:85:25:3d:c0:06:ed:fa:82: d8:fa:72:d0:a6:8e:77:a4:78:ce:00:21:10:4e:42: 00:e7:10:85:9d:f8:75:a5:8e:f9:7e:c0:1a:0b:5e: 61:14:30:51:41:30:09:a2:38:64:05:1f:72:d4:81: c8:88:8f:6c:86:c0:34:9a:aa:3e:8a:a8:9c:03:6b: 2b:a8:e0:8f:94:a6:c1:8f:42:e7:c1:de:a8:c4:a6: 4a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6D:95:44:8A:EE:53:C8:14:D7:75:AB:7B:A4:5E:C5:D2:59:C9:AD X509v3 Authority Key Identifier: keyid:7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:da:6e:79:c3:1b:e2:36:46:c5:e7:98:32:95:f7:d2:11:fb: 33:26:9c:14:f0:74:2a:77:9d:d2:e2:b5:1c:27:cd:ef:e2:21: d0:9d:82:18:3a:bf:a6:3d:0f:84:a1:33:42:55:13:c2:bc:08: fc:74:25:b6:a2:88:35:df:52:35:40:19:a4:d6:ec:c8:d0:63: 4a:06:f4:36:a9:ce:bf:a1:5d:f0:ed:7e:e8:09:04:39:bc:f3: b7:02:3d:56:4a:40:92:18:bf:f5:c6:21:1e:9e:92:98:40:a4: 2c:25:61:6b:53:9b:6f:ba:29:c3:9f:1d:be:c0:f6:1f:39:26: 58:77:b7:f4:a9:82:ac:19:e5:4a:ef:8b:d9:9e:b9:8d:49:41: 0e:6e:7f:68:ae:a9:ef:8a:82:8a:ce:b7:69:be:13:30:ce:1e: 74:50:65:0e:3f:fa:41:01:0f:2e:62:e4:06:12:f6:56:fc:8e: 28:b4:61:e8:06:3a:d9:85:80:eb:ae:03:0d:0e:e7:b6:3c:80: 17:01:44:39:69:72:34:60:70:6b:eb:c2:58:9e:f1:3b:49:7a: 7a:59:93:92:49:80:55:37:58:53:57:bf:60:75:bb:f4:29:0b: 04:32:ba:33:0f:4e:6b:54:59:9c:6d:76:f4:76:8d:f8:ab:ee: 8d:51:5e:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTJEMTExMC8GA1UEBRMoN0QzNTg1MjgzREYzM0VCNTBCOUMzODhENTlDRDc4NkNC QjlEQzM5RTAeFw0yNTEyMTkwNjQ4MzNaFw0yNTEyMjYwNjQ4MzNaMBgxFjAUBgNV BAMMDTY5NDRmNTQxLWIwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwlHPrM1C+fjXfDK8Am+18c128U762bxIL6T4gEHVf1m7t81HnL7Y1q7gd6kAw mHOmxzigBKcJGJ9WRDAFV6wbwswZ4TEkxZ0lcC5UtjNb0e/STdMu6WroWAXA8ifu G9AQ6xKVu22m/Tv6n8k05+JHIBykaaIzCGheyRJ2rN297o7wZOmG41rECvkxxWIS GMCC/6LYcc5yJ840FSsGV5JiN8GBH5fRVeDDG1KFJT3ABu36gtj6ctCmjnekeM4A IRBOQgDnEIWd+HWljvl+wBoLXmEUMFFBMAmiOGQFH3LUgciIj2yGwDSaqj6KqJwD ayuo4I+UpsGPQufB3qjEpkolAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU322VRIru U8gU13Wre6RexdJZya0wHwYDVR0jBBgwFoAUfTWFKD3zPrULnDiNWc14bLudw54w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1MkQxLzY0QTVBQjg0QzBF QTExRjA5QkE5REI3NEM0RjlBRTAyL2ZUV0ZLRDN6UHJVTG5EaU5XYzE0Ykx1ZHc1 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZlRXRktEM3pQclVMbkRpTldjMTRiTHVkdzU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 MkQxLzY0QTVBQjg0QzBFQTExRjA5QkE5REI3NEM0RjlBRTAyL2ZUV0ZLRDN6UHJV TG5EaU5XYzE0Ykx1ZHc1NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHfabnnDG+I2RsXnmDKV99IR+zMmnBTwdCp3ndLitRwnze/iIdCdghg6 v6Y9D4ShM0JVE8K8CPx0JbaiiDXfUjVAGaTW7MjQY0oG9Dapzr+hXfDtfugJBDm8 87cCPVZKQJIYv/XGIR6ekphApCwlYWtTm2+6KcOfHb7A9h85Jlh3t/SpgqwZ5Urv i9meuY1JQQ5uf2iuqe+KgorOt2m+EzDOHnRQZQ4/+kEBDy5i5AYS9lb8jii0YegG OtmFgOuuAw0O57Y8gBcBRDlpcjRgcGvrwlie8TtJenpZk5JJgFU3WFNXv2B1u/Qp CwQyujMPTmtUWZxtdvR2jfir7o1RXhk= -----END CERTIFICATE-----Generated at Sat Dec 20 00:57:04 2025 by rpki-client