This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft File: fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json) Hash identifier: keNmtML0Q5Mtrj8SjidWf+gWlUBl/zu/c8evw4v0VDk= Subject key identifier: 8D:12:18:28:CC:98:7E:88:60:54:B2:0B:F4:F5:15:4F:08:61:E0:23 Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 Certificate issuer: /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Certificate serial: 1F98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft Manifest number: 1F8B Signing time: Wed 31 Dec 2025 15:49:49 +0000 Manifest this update: Wed 31 Dec 2025 15:49:48 +0000 Manifest next update: Wed 07 Jan 2026 15:49:48 +0000 Files and hashes: 1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: jWdbNafOZN216b+wXJ0g3ZpaECTbK4o8RhcjMPN3cC8=) 2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: DcM+Lc5+n2tyIRWKbRIwYXhW1cJ+6S2apUWAewERFcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 15:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8088 (0x1f98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Validity Not Before: Dec 31 15:49:48 2025 GMT Not After : Jan 7 15:49:48 2026 GMT Subject: CN=6955461c-277a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:0f:9b:21:09:c5:f4:0f:2f:2f:dc:fd:01: 44:16:8c:c6:02:b2:cc:c2:d1:65:e3:c5:3a:7d:1e: 5d:cc:09:26:d0:9b:10:fc:b9:9e:b9:23:a2:a9:ae: 1f:fe:69:cd:d9:96:3f:df:f5:44:b7:c7:1c:f3:8a: 56:b7:34:0b:5d:b9:09:0c:e1:f8:7c:bd:b4:ff:ff: a8:7a:b8:62:5f:12:80:92:cf:e7:75:42:98:5a:64: 3e:e1:9a:dc:b0:e7:1b:36:2b:9c:c7:98:e9:b7:7a: 33:ef:7a:78:d5:06:fb:1a:81:42:c6:e4:bf:93:b7: ed:10:9d:e8:ea:15:fe:a9:49:6e:f9:b3:19:9d:60: 3f:19:ae:b5:cc:a8:9b:41:90:58:5e:7c:41:59:67: eb:99:d6:39:0b:10:57:4c:fa:c8:75:27:86:5e:c3: e2:58:3b:42:69:21:15:c3:7f:56:6f:1b:0e:59:e4: 05:6a:51:7c:21:fa:56:de:a3:2c:8d:85:d4:14:cc: 99:42:04:0a:80:cd:40:f4:29:d2:cd:d9:ff:7e:f3: c8:1f:26:80:43:58:f9:ae:73:e9:06:24:e4:9e:10: c3:9b:21:82:b9:c0:4d:f8:dd:2f:c1:59:46:42:94: 2a:8a:9e:7d:3f:87:a4:31:06:8b:69:9b:40:62:c5: 1b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:12:18:28:CC:98:7E:88:60:54:B2:0B:F4:F5:15:4F:08:61:E0:23 X509v3 Authority Key Identifier: keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:0c:dc:54:f8:5b:2f:03:6a:4e:7a:30:28:78:4a:bc:4d:a3: 7a:98:66:d3:17:45:c8:e2:35:4d:05:90:cc:4e:f3:0f:50:9d: b2:ae:e3:91:bf:5d:57:e5:10:14:5e:77:8f:e9:99:d3:b1:da: a2:85:ab:d5:40:b6:46:06:43:b3:2d:32:eb:77:21:bd:81:78: 74:db:8e:73:38:60:a9:e8:d2:c7:4d:d5:c9:32:b4:00:8a:fc: cb:98:9c:e5:21:e5:5b:20:81:7f:c0:04:e8:90:54:31:18:c8: 6c:db:84:ee:7d:ba:31:6f:04:54:2b:57:03:eb:55:96:1a:bf: cf:62:27:f1:1b:4f:96:db:84:2f:49:03:f2:b7:42:b2:45:66: 8c:36:17:88:f5:34:41:9e:a2:25:ec:93:dd:69:ae:a9:69:61: 59:4c:23:c5:25:a6:e0:43:62:2d:7b:4b:83:ab:85:75:6d:7f: 1e:7f:40:db:eb:9a:d2:73:08:11:68:d7:b1:1a:a7:bb:1c:6e: 4d:73:aa:7c:e0:d0:cb:a5:45:e4:25:04:40:eb:20:dc:8a:65: 65:c2:3e:30:d7:9a:39:fb:e4:4d:6b:34:fd:5b:7c:a3:e9:4d: d4:27:b5:82:60:41:84:50:af:98:50:ec:aa:73:7c:30:2f:7d: c7:f6:82:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCOUYxMTAvBgNVBAUTKDdFMEFBOENEMkJFODYxNzAxQTVDQTdDRkI5RDQ1MEQz RDkxODI3RTgwHhcNMjUxMjMxMTU0OTQ4WhcNMjYwMTA3MTU0OTQ4WjAYMRYwFAYD VQQDDA02OTU1NDYxYy0yNzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshQPmyEJxfQPLy/c/QFEFozGArLMwtFl48U6fR5dzAkm0JsQ/LmeuSOiqa4f /mnN2ZY/3/VEt8cc84pWtzQLXbkJDOH4fL20//+oerhiXxKAks/ndUKYWmQ+4Zrc sOcbNiucx5jpt3oz73p41Qb7GoFCxuS/k7ftEJ3o6hX+qUlu+bMZnWA/Ga61zKib QZBYXnxBWWfrmdY5CxBXTPrIdSeGXsPiWDtCaSEVw39WbxsOWeQFalF8IfpW3qMs jYXUFMyZQgQKgM1A9CnSzdn/fvPIHyaAQ1j5rnPpBiTknhDDmyGCucBN+N0vwVlG QpQqip59P4ekMQaLaZtAYsUbxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0SGCjM mH6IYFSyC/T1FU8IYeAjMB8GA1UdIwQYMBaAFH4KqM0r6GFwGlynz7nUUNPZGCfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI5Ri9CODhGNDI1MjU0 NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lYQWFYS2ZQdWRSUTA5a1lK LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZncW96U3ZvWVhBYVhLZlB1ZFJRMDlrWUotZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI5Ri9CODhGNDI1MjU0NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lY QWFYS2ZQdWRSUTA5a1lKLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5DNxU+FsvA2pOejAoeEq8TaN6mGbTF0XI4jVNBZDMTvMPUJ2yruOR v11X5RAUXneP6ZnTsdqihavVQLZGBkOzLTLrdyG9gXh0245zOGCp6NLHTdXJMrQA ivzLmJzlIeVbIIF/wATokFQxGMhs24TufboxbwRUK1cD61WWGr/PYifxG0+W24Qv SQPyt0KyRWaMNheI9TRBnqIl7JPdaa6paWFZTCPFJabgQ2Ite0uDq4V1bX8ef0Db 65rScwgRaNexGqe7HG5Nc6p84NDLpUXkJQRA6yDcimVlwj4w15o5++RNazT9W3yj 6U3UJ7WCYEGEUK+YUOyqc3wwL33H9oJV -----END CERTIFICATE-----Generated at Thu Jan 1 19:36:26 2026 by rpki-client