This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json) Hash identifier: huKis2w0mZnyKTmgXUPNek19By839H8JYGEOUlqOXbM= Subject key identifier: 8B:86:FC:12:A8:3F:54:8C:66:67:7B:2D:03:6F:62:90:40:9D:87:24 Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Certificate serial: 08D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft Manifest number: 1551 Signing time: Sun 28 Dec 2025 18:00:46 +0000 Manifest this update: Sun 28 Dec 2025 18:00:45 +0000 Manifest next update: Sun 04 Jan 2026 18:00:45 +0000 Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: /XVkJNMK3dMHhOfLf43NwF2TSMDtUU7WXQWEf5PCqMw=) 2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: LJOeHyhGq5PPmm1YdhMXahy2BlMK+uuqLBs6e3cOua4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2256 (0x8d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Validity Not Before: Dec 28 18:00:45 2025 GMT Not After : Jan 4 18:00:45 2026 GMT Subject: CN=6951704e-43f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:ec:1c:55:b6:db:82:ad:9a:15:c4:a1:e3: 9c:3f:72:f3:87:fb:a7:4c:4c:81:cf:5c:45:32:0a: 45:8d:22:2d:8e:dc:61:25:f0:9b:e7:69:e9:c6:da: c7:83:d4:70:bb:1f:aa:5c:c8:c4:ed:00:81:39:c2: 00:12:40:4a:f2:21:f9:2d:26:cb:21:f7:7e:ff:e6: cd:dc:46:f3:bc:f8:53:b6:4b:3d:76:57:0a:8e:01: 87:8a:80:bf:98:02:07:c6:20:53:ad:7e:f4:be:67: 36:e0:ab:db:48:6f:ea:04:48:b8:78:90:b0:8c:d4: 80:73:ce:81:b3:0d:19:f6:76:e0:36:36:cc:b7:d8: be:e5:5a:b3:8b:55:57:9f:ac:8f:cd:05:ec:3e:62: 90:4b:06:2d:fb:b2:da:bf:d2:03:9e:c5:76:12:5f: 8e:02:96:2d:a3:0b:96:6f:64:bb:e9:c8:f6:c9:11: 81:03:72:bf:31:01:e3:c4:25:6a:6d:fa:82:76:8c: a2:95:3f:62:ff:17:7e:1c:5d:df:66:b0:96:a6:4b: 09:ed:a0:11:5f:de:0e:1a:8c:ef:e1:9e:76:a7:4a: c2:ca:3b:64:bc:47:d1:d4:7d:e7:23:f5:2a:7e:68: 71:ea:74:a4:e5:61:42:f3:bb:d8:23:47:69:87:53: 63:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:86:FC:12:A8:3F:54:8C:66:67:7B:2D:03:6F:62:90:40:9D:87:24 X509v3 Authority Key Identifier: keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d4:ac:e2:41:2f:80:8d:69:d5:a7:fc:03:53:08:28:cc:59: 21:2b:a7:5d:29:97:be:4c:bb:f6:e0:8c:f3:15:df:e8:b6:81: 3c:13:a8:75:8a:f8:91:a8:7e:af:c2:7b:86:93:fb:ef:23:db: 9f:32:d0:74:6c:7a:2c:a8:de:73:43:05:9d:58:04:f3:20:8e: 9b:eb:07:f7:b9:6d:cd:da:ef:85:8a:20:0c:b6:3e:92:9a:a6: 39:52:4b:bb:78:a3:5b:9a:53:43:8d:66:e6:3f:ab:67:ba:af: 98:db:a8:c6:a5:4a:52:4c:14:64:3f:c7:65:59:ae:8e:7b:bf: 59:f3:79:dd:f4:7b:2d:00:96:1c:da:ce:f8:5b:6f:c5:d6:8a: 37:1b:49:21:a2:94:b8:f3:c8:49:b7:42:17:ae:dc:74:e2:24: 9d:b4:96:04:30:79:cf:0d:ca:b5:90:a8:75:e9:8d:1d:f5:16: 84:fc:8f:75:49:98:0b:bd:12:29:a4:aa:75:46:1d:f6:2c:23: 22:0a:22:10:9b:91:7d:e8:ac:73:6c:88:98:7e:06:de:67:1a: 60:e8:6c:22:92:f9:ca:7b:08:db:69:51:03:df:9a:ae:13:b8: 59:0f:25:29:8b:0d:0b:11:22:60:e1:a1:44:3d:b5:d5:31:2a: 07:80:5d:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw NDJCRUFDNTYwHhcNMjUxMjI4MTgwMDQ1WhcNMjYwMTA0MTgwMDQ1WjAYMRYwFAYD VQQDDA02OTUxNzA0ZS00M2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzPsHFW224KtmhXEoeOcP3Lzh/unTEyBz1xFMgpFjSItjtxhJfCb52npxtrH g9Rwux+qXMjE7QCBOcIAEkBK8iH5LSbLIfd+/+bN3EbzvPhTtks9dlcKjgGHioC/ mAIHxiBTrX70vmc24KvbSG/qBEi4eJCwjNSAc86Bsw0Z9nbgNjbMt9i+5Vqzi1VX n6yPzQXsPmKQSwYt+7Lav9IDnsV2El+OApYtowuWb2S76cj2yRGBA3K/MQHjxCVq bfqCdoyilT9i/xd+HF3fZrCWpksJ7aARX94OGozv4Z52p0rCyjtkvEfR1H3nI/Uq fmhx6nSk5WFC87vYI0dph1NjwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuG/BKo P1SMZmd7LQNvYpBAnYckMB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl UGM1MDNwaV9WWW9FSy1yRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu1KziQS+AjWnVp/wDUwgozFkhK6ddKZe+TLv24IzzFd/otoE8E6h1 iviRqH6vwnuGk/vvI9ufMtB0bHosqN5zQwWdWATzII6b6wf3uW3N2u+FiiAMtj6S mqY5Uku7eKNbmlNDjWbmP6tnuq+Y26jGpUpSTBRkP8dlWa6Oe79Z83nd9HstAJYc 2s74W2/F1oo3G0khopS488hJt0IXrtx04iSdtJYEMHnPDcq1kKh16Y0d9RaE/I91 SZgLvRIppKp1Rh32LCMiCiIQm5F96KxzbIiYfgbeZxpg6GwikvnKewjbaVED35qu E7hZDyUpiw0LESJg4aFEPbXVMSoHgF0G -----END CERTIFICATE-----Generated at Mon Dec 29 02:25:36 2025 by rpki-client