This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
File: fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json)
Hash identifier: mmzTsf5z1vFKke5hvpCi3OBYS03Li2mVZIj4cba7AtA=
Subject key identifier: F7:6A:C7:95:57:98:39:20:0D:27:EC:89:3C:EE:89:41:EF:21:AC:53
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial: 0D03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
Manifest number: 0CE5
Signing time: Thu 18 Dec 2025 17:54:41 +0000
Manifest this update: Thu 18 Dec 2025 17:54:41 +0000
Manifest next update: Thu 25 Dec 2025 17:54:41 +0000
Files and hashes: 1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: MTVw1Bj6ss91dBSmjzU689yPINkgFkpt9sF+AOYfFJU=)
2: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: HIjKO7+O+xO4OJIX/SiiO1R/+mZGDdIFJvolSoIaESM=)
3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: o8NCxqq4p9ZsLjI+qVRvi9tHW9nOHmjBRARXIkBx7/E=)
4: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: VEiVACuoAH55v33Ux5UO5cLk1TfJhkMWYIwJCgym6L0=)
5: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: 0V1hKLm+r4dSC+e7G/qlJanKA86/g6SLREXYPfiyVTo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3331 (0xd03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Validity
Not Before: Dec 18 17:54:41 2025 GMT
Not After : Dec 25 17:54:41 2025 GMT
Subject: CN=69443fe1-47c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:10:05:c5:f1:ca:e4:f0:91:25:fa:36:08:
1f:0d:8a:60:58:88:f5:31:35:66:83:2e:18:8b:14:
eb:2a:aa:75:3b:86:70:7e:5f:69:0d:31:23:bd:ee:
8a:a9:2a:41:0f:3e:4b:3c:c5:c8:33:ff:40:a9:43:
17:8c:f3:48:5e:a8:da:9c:13:b9:dc:f8:c4:cd:29:
cd:6c:9d:13:d8:7d:ac:fa:bf:66:81:bf:d0:2c:a0:
a8:60:f7:96:00:7a:91:3b:03:13:b3:24:07:0c:9d:
71:62:c6:dc:36:25:4a:eb:66:b3:fe:90:98:e6:a4:
2e:f1:c6:07:df:73:d1:f1:8f:d4:d9:be:10:1c:29:
8a:f0:c4:50:3f:97:bd:b2:a5:7f:ab:eb:9d:d5:d1:
90:ea:48:dd:b5:f2:fc:b2:06:79:aa:b5:2f:f8:20:
87:98:e8:a8:54:a1:43:8d:4b:63:d7:77:37:97:05:
c1:a7:32:a3:57:b3:af:90:82:c7:22:9d:c5:76:b0:
ad:08:9e:e6:7c:18:1e:57:6b:8f:e2:ec:97:95:03:
f9:5a:38:43:30:58:79:19:27:01:32:bf:2c:f2:b5:
0d:09:bf:be:d0:92:1f:91:2e:11:01:d8:25:a3:4d:
59:53:86:c7:2e:d6:e5:b3:52:4c:b5:dc:7c:be:d5:
93:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6A:C7:95:57:98:39:20:0D:27:EC:89:3C:EE:89:41:EF:21:AC:53
X509v3 Authority Key Identifier:
keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ef:0c:62:01:4a:62:a0:d3:7f:55:65:de:95:f6:c7:20:30:
e6:89:29:49:11:2d:dc:45:28:7f:c3:51:52:96:17:4d:da:82:
64:41:ed:39:60:ac:88:7b:da:a0:d3:87:ee:2d:db:48:51:65:
79:ef:4f:83:eb:0f:87:9c:bd:fb:b6:29:31:b0:67:5c:ca:08:
cf:08:97:a4:a5:ee:b4:05:ae:3b:55:27:f3:45:c9:2e:80:fc:
cc:ae:6b:64:f2:76:c7:db:a8:fd:c0:6b:15:33:d9:f2:99:42:
c7:87:93:5e:7d:2a:bc:ed:89:c4:ad:d7:53:47:27:be:9c:3a:
63:43:a2:66:d2:24:1c:68:62:59:d5:98:1d:84:c5:a2:80:45:
1c:77:94:db:3a:ea:c8:db:43:6d:97:7d:cf:04:21:e7:b3:38:
7d:fa:2e:d0:51:d1:ba:70:10:95:4e:a0:e7:9b:4c:90:45:46:
96:12:70:18:48:5f:bf:5e:b3:17:b5:c0:b0:3c:a5:e7:dc:29:
8b:ce:25:fa:7c:53:c5:ff:80:0f:70:6a:07:8e:73:d3:51:e9:
6d:ea:60:e6:33:c0:80:fd:8f:cd:d9:2e:c3:8c:0d:cb:20:fd:
b5:3f:16:29:84:66:29:1c:88:2e:e3:90:4d:d7:25:8d:38:be:
25:4d:3f:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFGMDgxMTAvBgNVBAUTKDdFRTBDNkEyOEI3NTlGNzJENURDOUE1ODk1MDM4QkJB
Qjk0QTg2MTQwHhcNMjUxMjE4MTc1NDQxWhcNMjUxMjI1MTc1NDQxWjAYMRYwFAYD
VQQDDA02OTQ0M2ZlMS00N2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs9sQBcXxyuTwkSX6NggfDYpgWIj1MTVmgy4YixTrKqp1O4Zwfl9pDTEjve6K
qSpBDz5LPMXIM/9AqUMXjPNIXqjanBO53PjEzSnNbJ0T2H2s+r9mgb/QLKCoYPeW
AHqROwMTsyQHDJ1xYsbcNiVK62az/pCY5qQu8cYH33PR8Y/U2b4QHCmK8MRQP5e9
sqV/q+ud1dGQ6kjdtfL8sgZ5qrUv+CCHmOioVKFDjUtj13c3lwXBpzKjV7OvkILH
Ip3FdrCtCJ7mfBgeV2uP4uyXlQP5WjhDMFh5GScBMr8s8rUNCb++0JIfkS4RAdgl
o01ZU4bHLtbls1JMtdx8vtWTJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdqx5VX
mDkgDSfsiTzuiUHvIaxTMB8GA1UdIwQYMBaAFH7gxqKLdZ9y1dyaWJUDi7q5SoYU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUYwOC9CMEY1Mzc2Q0ZB
QzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4zTFYzSnBZbFFPTHVybEto
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1REdvb3QxbjNMVjNKcFlsUU9MdXJsS2hoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUYwOC9CMEY1Mzc2Q0ZBQzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4z
TFYzSnBZbFFPTHVybEtoaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB67wxiAUpioNN/VWXelfbHIDDmiSlJES3cRSh/w1FSlhdN2oJkQe05
YKyIe9qg04fuLdtIUWV570+D6w+HnL37tikxsGdcygjPCJekpe60Ba47VSfzRcku
gPzMrmtk8nbH26j9wGsVM9nymULHh5NefSq87YnErddTRye+nDpjQ6Jm0iQcaGJZ
1ZgdhMWigEUcd5TbOurI20Ntl33PBCHnszh9+i7QUdG6cBCVTqDnm0yQRUaWEnAY
SF+/XrMXtcCwPKXn3CmLziX6fFPF/4APcGoHjnPTUelt6mDmM8CA/Y/N2S7DjA3L
IP21PxYphGYpHIgu45BN1yWNOL4lTT8G
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:29 2025 by rpki-client