This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json) Hash identifier: Ga8dF209Es/VHbuarakAtBik7m61xu3ZTpGkMtVShZ4= Subject key identifier: BF:EA:46:DE:70:43:99:A2:28:92:56:1C:06:A5:D2:56:A5:EE:9B:D0 Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft Manifest number: 076D Signing time: Mon 22 Dec 2025 20:55:29 +0000 Manifest this update: Mon 22 Dec 2025 20:55:28 +0000 Manifest next update: Mon 29 Dec 2025 20:55:28 +0000 Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: z6gRDJW3EIP66sSjScn+gCCqWnli8ORHw0UriLzxDsE=) 2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: Dec 22 20:55:28 2025 GMT Not After : Dec 29 20:55:28 2025 GMT Subject: CN=6949b041-a2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:7f:37:92:a6:5d:c8:9b:c0:c9:eb:59:65: b4:29:99:74:53:e7:90:d8:55:f1:fe:ed:9d:27:c3: 18:b8:ac:b9:7c:06:5a:48:0f:39:92:d2:49:28:fd: 16:f7:b5:bf:28:3f:49:51:49:7a:cc:02:d6:d8:ad: a9:66:b5:1b:ab:8c:78:ea:6d:a8:72:4c:7d:6f:7f: ec:05:fa:0d:4f:d4:fc:f2:30:01:a7:2e:f1:9c:70: 44:3b:cd:42:38:8e:65:a9:92:c2:04:3c:c8:bc:a1: bb:1c:df:50:97:44:dc:7f:7e:6b:c4:5d:a6:ad:58: 59:22:fc:7d:3f:00:38:12:2d:fa:aa:03:6f:4c:6b: 6e:9c:c7:36:4f:1e:2e:53:f1:fc:ac:fc:2e:66:5d: 0d:38:2b:00:96:20:b5:91:52:bb:76:90:c5:79:2b: 19:ce:71:6c:12:71:32:77:ab:37:3b:cf:e4:c4:b4: 0d:3a:50:2f:78:0d:d6:a3:59:fd:fd:27:8d:84:05: f1:66:70:7f:6a:c6:74:74:84:f4:43:de:97:4d:f4: 69:eb:1c:e6:79:18:6c:81:5e:ae:81:af:fe:8a:4a: 77:17:a6:c0:16:81:35:1a:cc:93:e7:a4:ad:80:b8: ff:ac:7d:e6:62:f6:c0:1a:cc:86:ad:bf:6c:4d:1e: 4e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EA:46:DE:70:43:99:A2:28:92:56:1C:06:A5:D2:56:A5:EE:9B:D0 X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7f:69:be:50:54:3c:aa:02:c1:6a:25:48:75:36:48:87:3e: 33:c2:27:e1:6c:6e:f9:ae:b9:63:bf:19:1f:b7:4b:cf:43:db: 2c:69:1b:ff:b4:1f:87:e7:2e:ad:f7:7a:43:98:f9:a8:e1:3b: 7f:93:d0:d0:27:76:8c:63:5b:d2:c4:6a:4f:d0:0a:19:60:2e: 12:3a:a8:89:c5:d9:8f:cb:09:5a:16:f3:ff:fc:e3:74:87:0d: e5:a9:b8:b4:61:df:4e:07:7f:a6:c2:d9:0e:2c:56:0b:f9:76: 26:85:17:b9:78:3e:3d:0e:a6:98:4c:fb:7b:ab:1a:22:a0:b1: a9:f2:23:01:02:3e:fd:8b:74:94:c9:6b:0a:49:91:6d:b8:3a: 1e:6b:cc:dc:44:0b:c4:3c:da:8e:53:31:70:e9:d1:79:e4:35: 43:71:f1:f2:c0:b1:cf:35:40:3d:46:12:d0:04:c1:3e:22:90: 4e:1c:ea:48:28:23:eb:e1:00:c9:f0:b3:5f:24:ff:17:03:89: 4f:ef:35:32:a0:04:5b:ca:e1:87:78:4e:1c:92:34:d4:59:75: 01:97:00:1a:68:da:19:de:fb:2b:35:5d:27:b4:e6:e7:e3:d5: c2:d8:41:88:ed:64:2e:02:82:11:c7:ee:7b:b1:dc:d8:65:31: 70:e1:74:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjUxMjIyMjA1NTI4WhcNMjUxMjI5MjA1NTI4WjAYMRYwFAYD VQQDDA02OTQ5YjA0MS1hMmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy19/N5KmXcibwMnrWWW0KZl0U+eQ2FXx/u2dJ8MYuKy5fAZaSA85ktJJKP0W 97W/KD9JUUl6zALW2K2pZrUbq4x46m2ockx9b3/sBfoNT9T88jABpy7xnHBEO81C OI5lqZLCBDzIvKG7HN9Ql0Tcf35rxF2mrVhZIvx9PwA4Ei36qgNvTGtunMc2Tx4u U/H8rPwuZl0NOCsAliC1kVK7dpDFeSsZznFsEnEyd6s3O8/kxLQNOlAveA3Wo1n9 /SeNhAXxZnB/asZ0dIT0Q96XTfRp6xzmeRhsgV6uga/+ikp3F6bAFoE1GsyT56St gLj/rH3mYvbAGsyGrb9sTR5O3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/qRt5w Q5miKJJWHAal0lal7pvQMB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvf2m+UFQ8qgLBaiVIdTZIhz4zwifhbG75rrljvxkft0vPQ9ssaRv/ tB+H5y6t93pDmPmo4Tt/k9DQJ3aMY1vSxGpP0AoZYC4SOqiJxdmPywlaFvP//ON0 hw3lqbi0Yd9OB3+mwtkOLFYL+XYmhRe5eD49DqaYTPt7qxoioLGp8iMBAj79i3SU yWsKSZFtuDoea8zcRAvEPNqOUzFw6dF55DVDcfHywLHPNUA9RhLQBME+IpBOHOpI KCPr4QDJ8LNfJP8XA4lP7zUyoARbyuGHeE4ckjTUWXUBlwAaaNoZ3vsrNV0ntObn 49XC2EGI7WQuAoIRx+57sdzYZTFw4XQW -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:46 2025 by rpki-client