This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft File: 1FLGfvaHRDivqZOoStCrwYUWkhs.mft (raw, json) Hash identifier: QW5DvgRYqFIWjMhRY2MH/MGD295n4gMDOqlSSznGV2A= Subject key identifier: DF:3A:AD:38:DB:62:BA:88:C5:3A:82:5E:EA:0E:42:F4:7F:2A:86:F5 Authority key identifier: D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B Certificate issuer: /CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft Manifest number: 0288 Signing time: Thu 01 Jan 2026 01:03:25 +0000 Manifest this update: Thu 01 Jan 2026 01:03:24 +0000 Manifest next update: Thu 08 Jan 2026 01:03:24 +0000 Files and hashes: 1: 1FLGfvaHRDivqZOoStCrwYUWkhs.crl (hash: 0L4nRhTrCTpdU1PWsfol0Brta0SIJfjbM0ZGMluhNXc=) 2: 9BDA59F69C8C11F0A27C535EC4F9AE02.roa (hash: tcpEfQimbgGgCKxs43ap0j00HaFFUo0cjpbDGWWFteI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 01:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD27, serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B Validity Not Before: Jan 1 01:03:24 2026 GMT Not After : Jan 8 01:03:24 2026 GMT Subject: CN=6955c7dd-d975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:55:9c:08:b5:d5:13:b0:da:0d:a3:aa:f6: d0:88:0b:54:fc:34:8e:c3:fc:56:b1:a4:b3:0c:04: 23:84:26:37:38:a7:b2:c6:b5:f4:b0:f1:a4:b2:c7: 30:e8:c2:bb:71:98:12:bd:e9:0d:c7:50:6b:34:28: cf:4b:8c:59:49:4b:60:d4:dc:69:19:04:07:a2:56: 7f:54:30:81:3d:ee:b9:86:d3:dd:85:cd:34:78:32: 7b:35:db:6e:48:96:9f:16:44:f2:c8:30:0c:69:85: 2a:11:67:a3:4e:53:58:d7:e6:e8:7c:6b:ab:cd:e6: a9:e7:44:b6:b9:09:eb:33:42:ff:84:0c:3e:df:ae: df:27:96:68:f3:62:b6:46:c1:92:76:17:1e:cb:7f: f0:dd:ac:dc:ca:d3:de:29:7e:52:d2:52:a6:60:c1: 10:19:42:66:d5:2a:71:99:f1:3f:cf:dc:a8:70:2c: 5b:ef:b9:6b:28:29:8a:a7:60:21:a8:43:ed:7c:f1: 86:7a:f5:f3:a5:db:32:71:7d:3b:70:7b:b9:68:f9: fb:33:f6:ef:27:fe:27:71:5b:c7:5a:32:86:1f:06: 02:96:e1:0c:42:5c:79:20:fa:5d:19:10:90:a5:51: 59:c8:e2:d8:5c:4a:4d:36:c1:cf:5e:b9:84:9e:dc: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3A:AD:38:DB:62:BA:88:C5:3A:82:5E:EA:0E:42:F4:7F:2A:86:F5 X509v3 Authority Key Identifier: keyid:D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:6e:57:17:98:eb:1e:e4:3f:7f:da:3a:06:9a:cc:bf:2f:88: c8:6b:bb:bf:3c:6f:e0:ee:40:88:b0:c2:c3:c9:9c:f3:f5:dd: e5:a2:1e:e1:fc:e1:77:f4:a1:33:e4:60:b8:20:8e:24:46:85: 20:ca:73:de:4e:42:b7:cf:e5:e2:4d:6b:e6:c4:b0:e0:59:55: 7c:69:d9:7e:87:f5:1b:0a:cb:cd:ff:b2:35:6b:9b:52:e4:8e: c0:c7:76:92:81:b5:34:80:c6:a2:1a:d9:a2:d9:b7:97:9a:49: 39:b8:b2:60:31:ab:e5:2a:f7:6a:bb:b3:cd:c5:5a:0f:dc:57: c1:c7:b0:f5:bc:96:48:0f:33:22:0c:18:6d:55:3d:20:74:2c: c9:e0:64:e9:8b:a9:f3:23:bc:27:15:29:fc:25:a5:d4:27:24: 68:e5:99:7d:e0:32:09:9f:f0:91:c5:e1:91:97:7c:18:7b:5a: 25:7a:62:da:70:33:bd:a4:4d:bc:6e:35:9b:67:09:e8:0c:de: 3e:d4:ca:a7:74:42:74:35:6a:4a:99:b8:46:d7:87:71:ad:f7: 2b:67:97:6d:d1:fd:1e:dd:18:a8:4c:d3:4a:bb:7c:b5:7d:b8: 7a:c3:0b:e3:dd:82:e1:b2:0c:9b:ba:e2:19:ad:91:9b:9f:99: 74:fa:b0:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEMjcxMTAvBgNVBAUTKEQ0NTJDNjdFRjY4NzQ0MzhBRkE5OTNBODRBRDBBQkMx ODUxNjkyMUIwHhcNMjYwMTAxMDEwMzI0WhcNMjYwMTA4MDEwMzI0WjAYMRYwFAYD VQQDDA02OTU1YzdkZC1kOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg9VnAi11ROw2g2jqvbQiAtU/DSOw/xWsaSzDAQjhCY3OKeyxrX0sPGksscw 6MK7cZgSvekNx1BrNCjPS4xZSUtg1NxpGQQHolZ/VDCBPe65htPdhc00eDJ7Ndtu SJafFkTyyDAMaYUqEWejTlNY1+bofGurzeap50S2uQnrM0L/hAw+367fJ5Zo82K2 RsGSdhcey3/w3azcytPeKX5S0lKmYMEQGUJm1SpxmfE/z9yocCxb77lrKCmKp2Ah qEPtfPGGevXzpdsycX07cHu5aPn7M/bvJ/4ncVvHWjKGHwYCluEMQlx5IPpdGRCQ pVFZyOLYXEpNNsHPXrmEntyfAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN86rTjb YrqIxTqCXuoOQvR/Kob1MB8GA1UdIwQYMBaAFNRSxn72h0Q4r6mTqErQq8GFFpIb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQyNy9BODBEQjM4MjM1 RUYxMUVEODIzOUFGMkJDNEY5QUUwMi8xRkxHZnZhSFJEaXZxWk9vU3RDcndZVVdr aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGTEdmdmFIUkRpdnFaT29TdENyd1lVV2tocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkQyNy9BODBEQjM4MjM1RUYxMUVEODIzOUFGMkJDNEY5QUUwMi8xRkxHZnZhSFJE aXZxWk9vU3RDcndZVVdraHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkblcXmOse5D9/2joGmsy/L4jIa7u/PG/g7kCIsMLDyZzz9d3loh7h /OF39KEz5GC4II4kRoUgynPeTkK3z+XiTWvmxLDgWVV8adl+h/UbCsvN/7I1a5tS 5I7Ax3aSgbU0gMaiGtmi2beXmkk5uLJgMavlKvdqu7PNxVoP3FfBx7D1vJZIDzMi DBhtVT0gdCzJ4GTpi6nzI7wnFSn8JaXUJyRo5Zl94DIJn/CRxeGRl3wYe1olemLa cDO9pE28bjWbZwnoDN4+1MqndEJ0NWpKmbhG14dxrfcrZ5dt0f0e3RioTNNKu3y1 fbh6wwvj3YLhsgybuuIZrZGbn5l0+rDh -----END CERTIFICATE-----Generated at Thu Jan 1 02:44:05 2026 by rpki-client