This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: fS2O72X5fQQxC2EyFOBcofr0MReqw6OhdtL/NxV6CDU= Subject key identifier: 61:FF:E4:8B:9F:65:2A:88:10:60:0E:B8:AC:6F:ED:1C:7C:76:B2:F0 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 05C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 0595 Signing time: Sat 20 Dec 2025 22:39:34 +0000 Manifest this update: Sat 20 Dec 2025 22:39:33 +0000 Manifest next update: Sat 27 Dec 2025 22:39:33 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: JUhCLvkzmhkIEt5HIqREb9EJcUh6VAztnZEPBblTdkg=) 2: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: jJDQVt5YG4qUbIQgC7Oi7FePcAVc60C7b8hfBT+zvz4=) 3: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=) 4: 65B31BB6DA5211F0861FF2DE92D3641D.roa (hash: yJpC0M10CBhXIzsUkj8CGYDPhI1WNZAMAJ0V5iRWHlg=) 5: 06E8BCB4B3F411F0874AC55BC4F9AE02.roa (hash: Vp5etmm0b4cMTiOCVd/ik0duA4OhlC73XZbv5txdzNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1479 (0x5c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Dec 20 22:39:33 2025 GMT Not After : Dec 27 22:39:33 2025 GMT Subject: CN=694725a6-61a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:0f:7c:0e:da:5c:22:4a:ec:0b:a5:c8:96: 63:48:ff:d3:a3:dd:56:21:07:19:ac:26:8a:27:d0: 90:04:c9:f4:20:43:e7:0d:ed:7c:e5:80:86:8d:5f: e8:95:f5:81:b7:ca:e8:82:e6:22:b9:b5:bb:fb:82: a8:c6:ae:0d:09:a5:b6:31:24:a0:4b:56:fd:7b:40: c3:e5:7e:eb:02:d7:ce:a3:86:c1:fa:61:2b:15:82: 0c:ff:ed:38:0b:0d:9a:e2:d1:b7:af:2f:7a:e4:cb: 97:2a:02:93:f4:64:65:e0:3c:81:59:72:82:47:50: e0:0f:a4:65:97:35:ce:23:be:a8:37:1a:b2:4d:31: 62:9e:9a:9a:52:7d:23:49:b0:7f:e1:6c:57:f0:d6: 70:0a:1f:35:ff:a6:30:ca:de:b1:d4:b4:21:93:b0: 50:00:00:0c:72:b2:46:c8:f0:cd:4e:31:0c:1e:e1: 01:fc:8e:c2:5b:d9:db:b2:33:22:40:0e:21:4b:88: d0:1a:07:30:83:e1:be:d4:f2:0e:c4:a7:d4:37:47: 4b:50:f6:ac:cd:95:2c:c9:56:aa:7d:00:f4:b1:9f: 8e:be:f9:a9:ce:85:e3:5d:cf:b0:53:95:ed:33:f1: 72:ff:47:b4:b7:a6:4b:2e:1f:a2:ff:50:4f:c8:7a: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FF:E4:8B:9F:65:2A:88:10:60:0E:B8:AC:6F:ED:1C:7C:76:B2:F0 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:49:8f:50:97:1a:24:77:29:80:66:02:8a:05:89:f0:76:f2: d0:c4:a1:bd:d5:f3:ed:0f:57:e0:20:7e:4a:d4:c0:aa:8e:a3: 51:17:ca:97:44:76:b6:a2:05:e0:3b:dd:58:8d:18:4a:46:32: 75:d1:80:31:59:40:22:f6:89:4e:32:0c:f5:28:14:ad:7c:dd: f8:de:0a:d0:9f:0a:1b:cd:4b:2b:94:f1:d1:c5:b8:21:e6:37: 91:87:f1:a7:a1:c7:ca:a5:34:65:ad:f0:43:3f:ae:cf:ed:60: 4e:35:9b:0e:b5:22:8b:2f:e1:d3:23:98:fd:99:04:f1:45:cc: 0a:b5:68:4c:d7:96:0a:4a:d4:a3:5c:77:74:15:fe:b4:46:aa: ce:32:6d:6c:73:ce:99:86:7a:ef:aa:d3:cf:4a:39:c6:47:7c: 0d:25:d0:86:50:f5:40:19:f5:2b:bf:1f:9f:d9:bf:c8:11:aa: 95:49:6a:4c:b3:93:86:4e:36:36:a3:09:3a:ed:95:c9:98:bd: 89:5c:27:6e:70:13:69:f9:25:05:c4:d0:88:57:c9:eb:2a:73: bb:bc:e4:f7:04:8f:f6:23:0e:d7:66:cd:a3:e4:5f:a9:81:25: fb:1f:7c:5b:96:49:ad:87:c6:c9:e2:29:f7:b9:9f:14:a9:95: 29:9c:93:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUxMjIwMjIzOTMzWhcNMjUxMjI3MjIzOTMzWjAYMRYwFAYD VQQDDA02OTQ3MjVhNi02MWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MUPfA7aXCJK7AulyJZjSP/To91WIQcZrCaKJ9CQBMn0IEPnDe185YCGjV/o lfWBt8roguYiubW7+4Koxq4NCaW2MSSgS1b9e0DD5X7rAtfOo4bB+mErFYIM/+04 Cw2a4tG3ry965MuXKgKT9GRl4DyBWXKCR1DgD6RllzXOI76oNxqyTTFinpqaUn0j SbB/4WxX8NZwCh81/6Ywyt6x1LQhk7BQAAAMcrJGyPDNTjEMHuEB/I7CW9nbsjMi QA4hS4jQGgcwg+G+1PIOxKfUN0dLUPaszZUsyVaqfQD0sZ+OvvmpzoXjXc+wU5Xt M/Fy/0e0t6ZLLh+i/1BPyHrJjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGH/5Iuf ZSqIEGAOuKxv7Rx8drLwMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQSY9QlxokdymAZgKKBYnwdvLQxKG91fPtD1fgIH5K1MCqjqNRF8qX RHa2ogXgO91YjRhKRjJ10YAxWUAi9olOMgz1KBStfN343grQnwobzUsrlPHRxbgh 5jeRh/GnocfKpTRlrfBDP67P7WBONZsOtSKLL+HTI5j9mQTxRcwKtWhM15YKStSj XHd0Ff60RqrOMm1sc86ZhnrvqtPPSjnGR3wNJdCGUPVAGfUrvx+f2b/IEaqVSWpM s5OGTjY2owk67ZXJmL2JXCducBNp+SUFxNCIV8nrKnO7vOT3BI/2Iw7XZs2j5F+p gSX7H3xblkmth8bJ4in3uZ8UqZUpnJP8 -----END CERTIFICATE-----Generated at Sun Dec 21 06:25:23 2025 by rpki-client