This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: KA8WhpzXVF1AZR4wJOPEGeBWM+nq9CIFOwzKa+vL1Xw= Subject key identifier: 61:B4:51:F7:D2:53:EC:9D:C1:C0:3A:0C:AA:79:9E:90:07:7C:61:BB Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0BD1 Signing time: Sat 20 Dec 2025 18:51:19 +0000 Manifest this update: Sat 20 Dec 2025 18:51:18 +0000 Manifest next update: Sat 27 Dec 2025 18:51:18 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: 6K4uB3nrEGSDKhP7obNz46y+YurorBczvqQHxi0NETU=) 2: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: fKITGlH8Ym4FGCNTLdBz3N/9fT41O0ewrHeW85uprek=) 3: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: SlT7b5WGF4xDvO5UnYsRWIEsNMsfCj2P0RDQ0c4uxVg=) 4: E8819018178811EC876F5F50C4F9AE02.roa (hash: TUeSGThA71gPmHqcyXZanu8mExqUQgocKEFv3yzea/g=) 5: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: fpApiu1FjrarZlPUsOOK6GGIbKmnMiZ6mCyLBRP/A/k=) 6: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: RxzJdhNL3XRe6UM0O5+yODZOZOT+QSs+nHTsvvP7oUM=) 7: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: kxUXf7mA4CW5b99j/+9BBjl+HFe5y/+Il84nYKPjkAg=) 8: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: xgcAPmybhdKKX1LB8rArE+ilDIHuIkSGwEMHOrxxz6w=) 9: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: pWNi2zqUl2KymH0GwVdvbCWQHY1sj05kmoe0wb+HqN0=) 10: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: zf45ltuWfmdAtT9A7Ih3Fv5EL5oWc6vkxJu3n9BqugE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Dec 20 18:51:18 2025 GMT Not After : Dec 27 18:51:18 2025 GMT Subject: CN=6946f027-4e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:00:84:bf:7b:47:bb:d5:0a:75:3e:cc:7f: fa:c3:38:2e:8f:98:25:dc:b6:e4:b7:68:5c:9a:ff: f1:cf:a3:d3:4c:8f:cd:52:e5:bf:f4:1a:12:ab:bf: 20:c5:a5:f0:48:93:4e:91:74:9b:be:70:77:56:78: 95:76:ea:9c:f2:e9:84:26:d3:48:33:aa:60:b9:56: b5:d5:f0:58:fe:9f:8b:2a:35:63:d6:2a:37:96:82: 0c:c7:ec:d9:44:60:70:b4:74:54:75:77:bd:57:3d: c9:2b:17:71:ee:eb:e9:9a:ee:80:1d:95:bc:aa:c5: f2:03:36:b3:36:ee:0f:c3:02:e0:1a:98:7a:a2:8a: 07:9a:bd:48:a5:23:79:49:d8:7e:1d:b4:79:a9:fd: 22:7c:c6:df:23:90:56:7c:31:d9:0c:25:57:f5:a5: cb:08:8c:46:d9:7e:45:8b:fd:1a:86:5e:1a:af:fe: fd:8d:62:10:a8:bc:02:e7:62:22:10:48:51:fc:77: 94:3d:2e:bc:ec:cb:46:0b:6d:47:9f:32:f8:f9:b8: 08:3f:d7:b3:02:4e:35:63:4e:eb:04:e0:c5:68:1b: 46:d1:29:1c:57:1f:0c:46:82:d8:de:82:1b:be:e5: 5c:c6:50:cd:7c:c0:9d:94:7e:91:a7:04:27:c7:4e: 5b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B4:51:F7:D2:53:EC:9D:C1:C0:3A:0C:AA:79:9E:90:07:7C:61:BB X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a2:73:94:be:7b:6b:c8:28:c1:3c:6a:80:d2:80:78:38:0d: 0c:90:cc:11:ae:0a:61:ea:1d:ee:94:da:80:19:35:9e:65:c3: b4:37:cf:1f:db:04:f4:97:3c:b5:f2:b5:2c:97:eb:f6:7c:df: a2:c6:25:3f:3d:07:97:dc:ed:41:7e:d2:9e:75:e4:a9:3f:01: d7:51:90:13:45:a8:52:8c:a3:3d:d6:0f:eb:70:14:05:1f:03: dc:fa:1b:07:4e:0f:47:64:11:cd:39:3d:b8:dd:7c:c7:03:e3: e7:bc:62:74:3d:ac:58:47:65:1f:9a:a8:07:a5:34:7e:57:e6: 9b:bc:23:18:ba:9c:7b:ae:01:80:01:53:4d:49:55:b7:1b:ac: 63:a0:70:84:68:c2:56:0f:55:27:2c:c3:90:e3:50:9f:a6:cd: 7c:b5:da:62:66:da:d3:20:28:8e:e0:07:62:a9:73:d7:79:b0: b8:b3:29:48:f9:4a:74:a9:d3:48:e5:40:91:bd:85:69:a1:04: f5:7f:94:e6:31:fe:0d:d0:57:57:e0:08:aa:d5:54:eb:2c:d3: 2d:b4:a6:13:53:fc:23:78:95:56:6d:1c:89:19:a7:ef:c7:38: 8a:39:af:9a:9d:a8:60:7e:46:b5:5f:9b:ed:d4:ad:66:9c:c3: 28:01:48:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUxMjIwMTg1MTE4WhcNMjUxMjI3MTg1MTE4WjAYMRYwFAYD VQQDDA02OTQ2ZjAyNy00ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zgAhL97R7vVCnU+zH/6wzguj5gl3Lbkt2hcmv/xz6PTTI/NUuW/9BoSq78g xaXwSJNOkXSbvnB3VniVduqc8umEJtNIM6pguVa11fBY/p+LKjVj1io3loIMx+zZ RGBwtHRUdXe9Vz3JKxdx7uvpmu6AHZW8qsXyAzazNu4PwwLgGph6oooHmr1IpSN5 Sdh+HbR5qf0ifMbfI5BWfDHZDCVX9aXLCIxG2X5Fi/0ahl4ar/79jWIQqLwC52Ii EEhR/HeUPS687MtGC21HnzL4+bgIP9ezAk41Y07rBODFaBtG0SkcVx8MRoLY3oIb vuVcxlDNfMCdlH6RpwQnx05btQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGG0UffS U+ydwcA6DKp5npAHfGG7MB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAronOUvntryCjBPGqA0oB4OA0MkMwRrgph6h3ulNqAGTWeZcO0N88f 2wT0lzy18rUsl+v2fN+ixiU/PQeX3O1BftKedeSpPwHXUZATRahSjKM91g/rcBQF HwPc+hsHTg9HZBHNOT243XzHA+PnvGJ0PaxYR2UfmqgHpTR+V+abvCMYupx7rgGA AVNNSVW3G6xjoHCEaMJWD1UnLMOQ41Cfps18tdpiZtrTICiO4AdiqXPXebC4sylI +Up0qdNI5UCRvYVpoQT1f5TmMf4N0FdX4Aiq1VTrLNMttKYTU/wjeJVWbRyJGafv xziKOa+anahgfka1X5vt1K1mnMMoAUhb -----END CERTIFICATE-----Generated at Sun Dec 21 02:06:01 2025 by rpki-client