This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft File: Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json) Hash identifier: Fa8az6kQYfhICot0HWOFCjq8GB31+qLXtJKEZU8VCnY= Subject key identifier: A7:FC:E8:2B:57:A5:EE:D5:3D:32:1A:A6:4A:22:EA:7F:6F:52:D7:5A Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A Certificate issuer: /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Certificate serial: 34FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft Manifest number: 34F3 Signing time: Thu 18 Dec 2025 14:46:59 +0000 Manifest this update: Thu 18 Dec 2025 14:46:59 +0000 Manifest next update: Thu 25 Dec 2025 14:46:59 +0000 Files and hashes: 1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: 333qtMkJVPuH7uE7Y5ay0mdonXVfWLiRy0uB7S32F7c=) 2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: 4GdGUVJOi7JjJ/AHOJR3g7ZUzd7x0VAsl8ckv3O4HKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13562 (0x34fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EFB8, serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Validity Not Before: Dec 18 14:46:59 2025 GMT Not After : Dec 25 14:46:59 2025 GMT Subject: CN=694413e3-3027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:04:ac:68:24:7c:3d:93:4a:dd:32:f0:82:2d: b7:f7:ae:d9:c0:c7:78:70:66:d3:49:88:8d:90:e3: 85:de:9b:a8:56:a8:64:fc:cd:9f:45:ce:2f:8d:f4: 15:f0:7b:e5:e5:91:01:f2:5a:b3:0e:ee:1e:84:f3: 9b:61:08:cc:01:ee:4c:de:18:65:ca:c5:a4:47:cf: 9c:bf:aa:11:e5:33:b6:a4:b8:a3:07:79:4b:e8:37: 16:98:0f:28:3b:df:5b:ce:7d:08:4f:0c:5d:18:ba: 6a:ea:eb:9c:3a:45:c2:4d:18:1f:49:de:65:be:7c: 80:32:66:3c:2f:70:b9:41:6b:97:fe:57:3a:47:f1: 53:75:d1:0a:36:4d:73:5d:7b:c6:10:c7:72:0f:a6: ce:34:92:4d:75:77:30:ed:83:21:c5:d1:72:9d:45: 7c:b2:b5:05:cf:9d:be:f4:21:e4:a3:d2:78:1b:ca: 69:58:de:5d:89:9c:8d:b7:f3:0f:d8:0a:c2:29:1b: 77:31:48:49:a8:43:58:26:49:df:d1:a6:27:86:f1: 06:a0:7d:aa:f8:9f:78:17:e9:6a:1b:4e:b9:1c:0f: 57:4d:2c:55:9a:7f:b8:28:bd:96:76:05:0e:4f:e4: ec:e8:b5:ab:ac:5e:2b:31:88:41:0f:56:e8:8c:8b: da:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FC:E8:2B:57:A5:EE:D5:3D:32:1A:A6:4A:22:EA:7F:6F:52:D7:5A X509v3 Authority Key Identifier: keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f5:09:2e:96:1d:be:ca:c8:b5:78:d5:02:c9:d4:37:d9:63: df:7a:95:c1:9d:7f:fa:5b:a9:8a:18:de:3c:d3:98:d9:9b:4b: b1:e9:9b:93:e0:35:d6:3a:7c:72:ba:c9:8a:15:a3:dc:02:1a: 7d:ca:af:55:99:8a:e5:cf:8e:ea:13:b1:f5:d9:de:eb:7c:3d: 5e:57:d3:4e:a5:02:57:eb:91:65:d8:cd:46:5c:00:b7:e2:7e: eb:1e:85:55:14:8d:61:09:ad:76:55:49:75:7c:b4:bb:8a:2f: 63:b8:30:a4:76:62:c8:0c:38:73:1a:ea:c1:49:73:42:f5:16: 6b:58:64:58:c4:5b:45:51:33:76:93:3f:86:cb:b9:53:08:0e: 7d:53:f6:d5:77:74:a9:7c:76:36:67:8c:95:2b:42:28:48:f3: 27:63:88:4f:80:6f:6b:a0:dd:f3:47:ca:57:39:32:ea:34:5d: f1:35:78:26:51:3f:98:95:27:23:23:cc:b0:34:b9:ad:8b:dd: 38:f3:66:cb:26:17:50:db:e6:ea:da:fa:ef:cb:5c:31:79:61: da:32:77:2b:12:1a:52:54:42:b7:f3:5f:4f:b3:72:b5:f8:9b: 31:12:df:ff:c1:4b:28:83:37:f9:7d:3c:8a:47:a3:7e:65:d8: 7a:40:ff:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGQjgxMTAvBgNVBAUTKDE3MEU5Qzc2NzY0M0MzQzFGNjA1Nzk0MDg2NDhBM0Yw REE4NDA0NUEwHhcNMjUxMjE4MTQ0NjU5WhcNMjUxMjI1MTQ0NjU5WjAYMRYwFAYD VQQDDA02OTQ0MTNlMy0zMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ASsaCR8PZNK3TLwgi23967ZwMd4cGbTSYiNkOOF3puoVqhk/M2fRc4vjfQV 8Hvl5ZEB8lqzDu4ehPObYQjMAe5M3hhlysWkR8+cv6oR5TO2pLijB3lL6DcWmA8o O99bzn0ITwxdGLpq6uucOkXCTRgfSd5lvnyAMmY8L3C5QWuX/lc6R/FTddEKNk1z XXvGEMdyD6bONJJNdXcw7YMhxdFynUV8srUFz52+9CHko9J4G8ppWN5diZyNt/MP 2ArCKRt3MUhJqENYJknf0aYnhvEGoH2q+J94F+lqG065HA9XTSxVmn+4KL2WdgUO T+Ts6LWrrF4rMYhBD1bojIvaoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKf86CtX pe7VPTIapkoi6n9vUtdaMB8GA1UdIwQYMBaAFBcOnHZ2Q8PB9gV5QIZIo/DahARa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZCOC9EOTgwQTE3MjFE OTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4SDJCWGxBaGtpajhOcUVC Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3NmNkblpEdzhIMkJYbEFoa2lqOE5xRUJGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUZCOC9EOTgwQTE3MjFEOTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4 SDJCWGxBaGtpajhOcUVCRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB79Qkulh2+ysi1eNUCydQ32WPfepXBnX/6W6mKGN4805jZm0ux6ZuT 4DXWOnxyusmKFaPcAhp9yq9VmYrlz47qE7H12d7rfD1eV9NOpQJX65Fl2M1GXAC3 4n7rHoVVFI1hCa12VUl1fLS7ii9juDCkdmLIDDhzGurBSXNC9RZrWGRYxFtFUTN2 kz+Gy7lTCA59U/bVd3SpfHY2Z4yVK0IoSPMnY4hPgG9roN3zR8pXOTLqNF3xNXgm UT+YlScjI8ywNLmti90482bLJhdQ2+bq2vrvy1wxeWHaMncrEhpSVEK3819Ps3K1 +JsxEt//wUsogzf5fTyKR6N+Zdh6QP9Q -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:59 2025 by rpki-client