This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft File: fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json) Hash identifier: h9D7jRE4NXpI0Gz+ccR8NDewQYj8IKDE9d9wycGyzsM= Subject key identifier: 31:CC:D2:9C:6A:5D:92:DC:E0:DE:19:E8:1B:BD:47:6A:13:E3:1B:A2 Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 Certificate issuer: /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Certificate serial: 0CBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft Manifest number: 0CB4 Signing time: Sun 28 Dec 2025 17:52:29 +0000 Manifest this update: Sun 28 Dec 2025 17:52:29 +0000 Manifest next update: Sun 04 Jan 2026 17:52:29 +0000 Files and hashes: 1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: +ADSpX39h7IgK8YNpTBEsuy7+9KOUXQjLaD/8Yg6w/A=) 2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: QKvT/NXLjM1zgrExrepY0NIOpuLuOZvI/cmhC3FJr94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 17:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Validity Not Before: Dec 28 17:52:29 2025 GMT Not After : Jan 4 17:52:29 2026 GMT Subject: CN=69516e5d-b695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:0c:a9:26:89:9a:ec:76:6a:91:69:46:85: e6:f5:ba:ba:96:a6:08:61:61:d5:2f:07:b5:c7:cd: a0:1d:8b:92:ce:71:b7:70:2d:fb:6b:90:6e:77:74: 6a:ab:54:28:b5:c1:b4:15:bd:6a:dd:5d:65:59:dd: de:ed:68:5c:14:95:3e:54:77:06:7f:b8:63:f2:a6: 25:44:68:ba:c1:c3:33:af:68:67:8d:bd:e5:c8:9d: 82:1e:af:c6:9e:e4:60:31:48:88:a9:ee:cf:f7:23: 6b:a2:27:36:6f:ad:8f:ee:de:58:86:8f:81:82:ca: b6:45:53:23:e2:d9:c7:48:f7:1e:de:a1:68:53:74: 83:32:ba:2d:3c:4f:b6:4c:a9:3f:33:94:f2:e2:a1: 1f:3c:90:56:97:7c:df:64:d9:14:44:b1:0d:fa:a7: 04:ba:3b:1a:2f:92:d8:cc:f2:ad:73:14:9d:b2:ad: f0:e3:27:85:ef:db:c8:84:eb:61:03:44:2b:8f:82: 66:7d:01:a2:48:69:d1:47:50:e6:2a:a4:78:26:c4: 6b:a8:67:78:97:c8:2a:32:39:41:5a:de:1b:bd:b5: 88:fb:c7:eb:fc:61:77:61:bc:76:e9:94:1d:42:65: 1f:df:95:f4:3d:2c:44:5c:32:ee:94:87:0c:0e:a3: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CC:D2:9C:6A:5D:92:DC:E0:DE:19:E8:1B:BD:47:6A:13:E3:1B:A2 X509v3 Authority Key Identifier: keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:1f:16:9c:a2:3b:86:6e:bf:58:ff:46:f1:0b:17:7b:d5:62: 84:31:ff:dd:3e:39:93:e1:51:36:ed:57:ba:1f:e6:b2:85:09: ec:40:9a:f4:f4:c9:4d:28:f0:41:4b:da:52:52:45:0c:fc:88: 5f:bb:80:3b:f1:a7:d8:d1:9a:91:90:15:e9:32:95:e0:14:09: 42:b5:d7:f0:51:71:c5:8c:77:c3:17:de:e1:a7:3b:b7:c3:cd: 8f:41:11:59:3e:a7:a0:bb:5b:79:bc:cb:0b:0e:a8:9a:34:58: 00:40:65:85:a2:8f:70:73:c7:48:5f:4a:86:d9:c8:98:d1:87: 94:6c:63:24:ff:43:47:4c:bf:cf:70:c4:61:e7:5d:cd:d6:a0: e6:7f:d6:d9:b2:db:a4:19:cf:cd:e8:3b:e7:8b:50:8b:1c:71: 27:ce:4c:1b:45:35:ac:e9:1b:33:d1:90:01:4f:7f:a3:42:89: 2c:2d:e3:63:92:3e:8a:e0:70:34:b1:36:f3:aa:a0:e4:65:bb: 18:b4:f6:d9:21:cf:e9:ce:fc:6e:d7:5d:a5:6a:67:11:47:b8: 8d:10:fa:74:71:9e:77:5d:a3:67:4b:34:46:91:0a:49:e2:72: 04:63:90:25:2f:00:f1:c2:37:77:58:ba:9c:4e:69:09:c2:03: 43:9b:85:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1OTgxMTAvBgNVBAUTKDdEQzQ2MkFGM0U2Mjc4QTgyMTg5MDVBMUIzRTdEQjM3 RjJFRjdBODIwHhcNMjUxMjI4MTc1MjI5WhcNMjYwMTA0MTc1MjI5WjAYMRYwFAYD VQQDDA02OTUxNmU1ZC1iNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHUMqSaJmux2apFpRoXm9bq6lqYIYWHVLwe1x82gHYuSznG3cC37a5Bud3Rq q1QotcG0Fb1q3V1lWd3e7WhcFJU+VHcGf7hj8qYlRGi6wcMzr2hnjb3lyJ2CHq/G nuRgMUiIqe7P9yNroic2b62P7t5Yho+Bgsq2RVMj4tnHSPce3qFoU3SDMrotPE+2 TKk/M5Ty4qEfPJBWl3zfZNkURLEN+qcEujsaL5LYzPKtcxSdsq3w4yeF79vIhOth A0Qrj4JmfQGiSGnRR1DmKqR4JsRrqGd4l8gqMjlBWt4bvbWI+8fr/GF3Ybx26ZQd QmUf35X0PSxEXDLulIcMDqPhKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHM0pxq XZLc4N4Z6Bu9R2oT4xuiMB8GA1UdIwQYMBaAFH3EYq8+YnioIYkFobPn2zfy73qC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU5OC84MTJDRTlENDA0 NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVLZ2hpUVdocy1mYk5fTHZl b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjUmlyejVpZUtnaGlRV2hzLWZiTl9MdmVvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU5OC84MTJDRTlENDA0NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVL Z2hpUVdocy1mYk5fTHZlb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBHxacojuGbr9Y/0bxCxd71WKEMf/dPjmT4VE27Ve6H+ayhQnsQJr0 9MlNKPBBS9pSUkUM/Ihfu4A78afY0ZqRkBXpMpXgFAlCtdfwUXHFjHfDF97hpzu3 w82PQRFZPqegu1t5vMsLDqiaNFgAQGWFoo9wc8dIX0qG2ciY0YeUbGMk/0NHTL/P cMRh513N1qDmf9bZstukGc/N6Dvni1CLHHEnzkwbRTWs6Rsz0ZABT3+jQoksLeNj kj6K4HA0sTbzqqDkZbsYtPbZIc/pzvxu112lamcRR7iNEPp0cZ53XaNnSzRGkQpJ 4nIEY5AlLwDxwjd3WLqcTmkJwgNDm4Wa -----END CERTIFICATE-----Generated at Mon Dec 29 16:44:48 2025 by rpki-client