This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft File: FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft (raw, json) Hash identifier: nF64FVaYkzaeh3P5EAFbpHvdsOU4hyViSaTBqQveiXI= Subject key identifier: DA:4E:15:A0:CB:97:E8:E2:4C:85:30:CF:2E:E1:B5:18:3E:D9:A8:02 Authority key identifier: 14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D Certificate issuer: /CN=A916E343/serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft Manifest number: 0164 Signing time: Fri 19 Dec 2025 02:22:35 +0000 Manifest this update: Fri 19 Dec 2025 02:22:34 +0000 Manifest next update: Fri 26 Dec 2025 02:22:34 +0000 Files and hashes: 1: FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl (hash: GjtPjaqWLUAN0rrNevCq1nlLOz8UwwnRjyz45U45oe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E343, serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D Validity Not Before: Dec 19 02:22:34 2025 GMT Not After : Dec 26 02:22:34 2025 GMT Subject: CN=6944b6eb-2979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:78:8a:02:35:1c:1c:10:65:a0:10:fe:44: e2:8d:d5:4d:3d:6d:1c:c3:8e:89:75:2b:5c:18:27: 08:38:4d:54:32:8b:03:7d:9e:b2:bf:b1:dd:64:a4: 0f:ef:3e:35:89:90:b1:32:1a:ec:43:83:6f:a3:20: 1b:e1:65:aa:02:76:71:5b:8b:9f:c8:f5:79:3e:8c: cb:8c:08:8d:90:f2:04:eb:23:3e:60:0c:0c:26:08: 25:6f:4d:8b:5e:c8:31:72:62:ca:e2:d8:85:c3:e4: 48:f1:12:84:6d:a1:b8:a6:98:16:44:1b:8c:11:49: 55:d4:30:5b:e3:96:c1:53:b1:fb:1d:ca:e8:2e:09: 5e:62:1a:b0:cc:e3:00:bb:ee:ec:a0:3c:d3:f8:79: dd:17:b0:a2:7a:36:cc:58:8f:99:8a:e0:22:a5:3f: 91:38:bd:eb:ae:8f:84:51:74:f4:ba:f9:33:1d:c0: 20:89:20:0b:77:d2:46:ad:48:fd:f2:3b:a3:50:cf: 3a:17:25:2b:a9:40:56:cc:50:42:a5:4e:0e:18:2f: f7:e6:74:32:eb:e3:63:bf:e1:2b:9a:1d:0e:b6:37: db:e5:23:fe:04:51:80:53:ed:64:2e:b0:63:03:16: cd:99:a9:56:0c:b6:91:ef:c6:a6:0a:03:87:72:b6: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4E:15:A0:CB:97:E8:E2:4C:85:30:CF:2E:E1:B5:18:3E:D9:A8:02 X509v3 Authority Key Identifier: keyid:14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3d:1f:1d:de:e7:24:99:ad:5d:56:3c:08:7c:4c:1c:4e:b6: fa:23:cd:92:cd:36:c6:9d:e1:bc:08:a2:a3:f8:a9:55:dc:66: 4a:67:96:22:81:80:ba:07:64:41:8d:b4:72:8b:ff:bb:30:27: e3:e3:79:9f:08:89:c1:12:2f:cd:7c:d2:1f:a9:cd:73:7f:5e: 8d:48:dc:8e:73:f8:fd:4f:d1:bf:7d:55:9e:34:42:a7:73:ac: 20:1f:ad:fb:35:66:5c:d6:94:89:8c:f0:a1:99:53:aa:ca:06: b2:6f:e8:12:a9:b9:a1:3b:2b:e9:e9:ad:6d:d1:67:02:8c:ec: ae:5d:87:ef:77:d9:ec:ba:5f:46:5f:0b:e2:b5:50:a6:e8:c4: bf:60:54:ca:15:fd:87:80:71:f9:56:27:de:28:67:fb:f5:97: ac:9b:2a:fa:ef:e9:8a:39:bd:fa:f2:9e:99:5b:e6:1e:aa:52: 6b:cd:70:38:e4:21:22:c5:70:53:a4:29:26:0c:92:5f:5f:e9: 9f:cf:cc:77:8d:04:d5:77:e4:c8:39:03:f5:19:8d:46:12:85: e9:db:d1:48:9b:a2:bb:00:f5:51:f6:f5:c8:45:44:cc:b4:16: ec:2f:47:ed:06:48:41:f0:17:09:e5:74:fb:50:9c:58:0a:70: 52:98:df:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzNDMxMTAvBgNVBAUTKDE0RTU1RUMzNDI4RTNEMkJBNERDNzFDMTU5RTVGNjA2 MUYxNjNDNkQwHhcNMjUxMjE5MDIyMjM0WhcNMjUxMjI2MDIyMjM0WjAYMRYwFAYD VQQDDA02OTQ0YjZlYi0yOTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+d4igI1HBwQZaAQ/kTijdVNPW0cw46JdStcGCcIOE1UMosDfZ6yv7HdZKQP 7z41iZCxMhrsQ4NvoyAb4WWqAnZxW4ufyPV5PozLjAiNkPIE6yM+YAwMJgglb02L XsgxcmLK4tiFw+RI8RKEbaG4ppgWRBuMEUlV1DBb45bBU7H7HcroLgleYhqwzOMA u+7soDzT+HndF7CiejbMWI+ZiuAipT+ROL3rro+EUXT0uvkzHcAgiSALd9JGrUj9 8jujUM86FyUrqUBWzFBCpU4OGC/35nQy6+Njv+Ermh0Otjfb5SP+BFGAU+1kLrBj AxbNmalWDLaR78amCgOHcrZSjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpOFaDL l+jiTIUwzy7htRg+2agCMB8GA1UdIwQYMBaAFBTlXsNCjj0rpNxxwVnl9gYfFjxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM0My8zQUU3MzlBRUI5 N0UxMUVFQjNDMjI5NTVDNEY5QUUwMi9GT1ZldzBLT1BTdWszSEhCV2VYMkJoOFdQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZPVmV3MEtPUFN1azNISEJXZVgyQmg4V1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM0My8zQUU3MzlBRUI5N0UxMUVFQjNDMjI5NTVDNEY5QUUwMi9GT1ZldzBLT1BT dWszSEhCV2VYMkJoOFdQRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6PR8d3uckma1dVjwIfEwcTrb6I82SzTbGneG8CKKj+KlV3GZKZ5Yi gYC6B2RBjbRyi/+7MCfj43mfCInBEi/NfNIfqc1zf16NSNyOc/j9T9G/fVWeNEKn c6wgH637NWZc1pSJjPChmVOqygayb+gSqbmhOyvp6a1t0WcCjOyuXYfvd9nsul9G XwvitVCm6MS/YFTKFf2HgHH5VifeKGf79Zesmyr67+mKOb368p6ZW+YeqlJrzXA4 5CEixXBTpCkmDJJfX+mfz8x3jQTVd+TIOQP1GY1GEoXp29FIm6K7APVR9vXIRUTM tBbsL0ftBkhB8BcJ5XT7UJxYCnBSmN97 -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:13 2025 by rpki-client