This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json) Hash identifier: ZxLlr05V8ns6iSNS22bPUxrlVptSADWgt7hbkLIIW3Q= Subject key identifier: B9:33:D8:20:BA:04:E9:B7:F2:C1:FB:99:BD:D8:08:AF:9C:8B:A6:E1 Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Certificate serial: 0CB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft Manifest number: 0CA7 Signing time: Thu 18 Dec 2025 18:07:21 +0000 Manifest this update: Thu 18 Dec 2025 18:07:20 +0000 Manifest next update: Thu 25 Dec 2025 18:07:20 +0000 Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: iklhK19Jrs9W5JfslV/DGLF1cpGWCQ5rySyOIILzIT4=) 2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: gcmOeuv4CPwiyDEbbjuVKa7sBj9FNhXZhMuz2eqrCks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3248 (0xcb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Validity Not Before: Dec 18 18:07:20 2025 GMT Not After : Dec 25 18:07:20 2025 GMT Subject: CN=694442d9-f5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f2:a3:e3:bc:c5:63:53:c2:bf:bb:1e:fd:ef: 4f:a9:27:5c:16:23:3f:38:3d:bb:33:bc:06:e8:27: cb:73:05:41:ef:70:63:57:e9:8d:13:04:ec:ef:71: cd:37:d6:be:2e:ec:59:04:a3:33:cd:9b:8b:03:e1: e9:8d:8f:6e:2b:2a:21:16:b7:b5:46:39:36:f2:38: 2d:b3:fa:f3:11:0d:91:03:cf:60:df:9b:71:61:1b: 32:91:72:84:49:38:c9:fb:74:d4:a1:46:4f:f1:ee: cf:2a:b2:90:a3:36:80:07:89:68:c7:33:2b:75:11: 2b:45:95:32:9c:29:8b:89:b4:68:d8:59:2e:09:01: d6:f4:89:24:00:a2:b1:a2:12:c5:3e:b9:91:72:bd: e9:b7:27:3c:28:bd:6e:9d:f8:ad:9f:56:55:58:0e: e5:ba:47:5e:a0:36:b9:a3:af:05:ac:f0:a2:81:c4: f9:78:03:f4:6b:eb:27:cc:41:44:c1:16:aa:de:88: c9:84:20:3c:44:67:6f:3e:68:58:ce:6b:28:95:b6: dd:a8:31:2d:fc:76:14:32:09:49:64:29:b1:2a:4f: 69:5d:1f:e8:da:6d:14:fa:57:7f:88:8f:39:56:96: 10:62:2c:be:71:a1:45:ad:da:2b:6b:c6:52:eb:09: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:33:D8:20:BA:04:E9:B7:F2:C1:FB:99:BD:D8:08:AF:9C:8B:A6:E1 X509v3 Authority Key Identifier: keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:99:cf:5b:7d:f6:04:9e:11:35:80:df:55:e6:e2:be:cd:39: 28:5a:24:43:52:a0:b4:c3:36:88:0a:e8:b3:7b:87:7e:2a:ca: c4:29:dc:9c:7a:f2:44:af:c5:64:85:37:3d:b7:04:8c:6c:91: 0e:e3:49:2f:ee:4b:75:24:c5:2d:c9:4e:fe:3c:cb:55:06:0f: e5:73:0f:0a:bf:02:c0:97:1c:28:4f:4a:d2:31:75:af:f7:7e: b6:a8:49:3e:7f:10:ac:cd:29:65:78:d0:8d:6e:47:2f:e6:f4: be:af:a8:c8:f1:73:68:19:a7:ea:5d:ba:6d:be:ba:bb:40:2e: b0:04:83:cf:fd:8c:0d:30:b2:aa:b5:f3:a4:63:a5:75:46:7d: 61:b2:b5:64:f7:87:75:6b:8e:80:bb:3c:8c:58:76:45:94:dd: da:88:34:d1:0c:ef:fb:4c:23:0e:00:f5:7d:5a:9a:5b:30:85: 06:bb:e8:c4:e2:0a:ec:65:26:a9:18:cb:6f:fe:bd:f4:9b:ff: 67:5c:52:c0:25:6f:99:b9:ab:13:e2:3c:91:c3:7d:ea:03:15: 70:2f:38:7b:8c:a8:81:a9:f9:47:8c:79:03:c4:21:60:5e:22: 66:78:4f:13:73:4d:a7:ed:f8:b7:ae:74:01:65:32:a3:52:2a: e4:1b:2d:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE NDZBNjIyNjEwHhcNMjUxMjE4MTgwNzIwWhcNMjUxMjI1MTgwNzIwWjAYMRYwFAYD VQQDDA02OTQ0NDJkOS1mNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj/Kj47zFY1PCv7se/e9PqSdcFiM/OD27M7wG6CfLcwVB73BjV+mNEwTs73HN N9a+LuxZBKMzzZuLA+HpjY9uKyohFre1Rjk28jgts/rzEQ2RA89g35txYRsykXKE STjJ+3TUoUZP8e7PKrKQozaAB4loxzMrdRErRZUynCmLibRo2FkuCQHW9IkkAKKx ohLFPrmRcr3ptyc8KL1unfitn1ZVWA7lukdeoDa5o68FrPCigcT5eAP0a+snzEFE wRaq3ojJhCA8RGdvPmhYzmsolbbdqDEt/HYUMglJZCmxKk9pXR/o2m0U+ld/iI85 VpYQYiy+caFFrdora8ZS6wmixwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkz2CC6 BOm38sH7mb3YCK+ci6bhMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2 RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ T2JKR2Y5WERtbXJVYW1JbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7mc9bffYEnhE1gN9V5uK+zTkoWiRDUqC0wzaICuize4d+KsrEKdyc evJEr8VkhTc9twSMbJEO40kv7kt1JMUtyU7+PMtVBg/lcw8KvwLAlxwoT0rSMXWv 9362qEk+fxCszSlleNCNbkcv5vS+r6jI8XNoGafqXbptvrq7QC6wBIPP/YwNMLKq tfOkY6V1Rn1hsrVk94d1a46AuzyMWHZFlN3aiDTRDO/7TCMOAPV9WppbMIUGu+jE 4grsZSapGMtv/r30m/9nXFLAJW+ZuasT4jyRw33qAxVwLzh7jKiBqflHjHkDxCFg XiJmeE8Tc02n7fi3rnQBZTKjUirkGy06 -----END CERTIFICATE-----Generated at Fri Dec 19 23:56:23 2025 by rpki-client