This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft File: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft (raw, json) Hash identifier: /jumYJOr02W+KQp7WI7cYZtERNT9B29dbSvidhoteTk= Subject key identifier: 1B:1D:3E:A8:8E:39:EF:A1:D3:7E:DF:86:38:50:35:53:0C:A6:1B:A1 Authority key identifier: 16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA Certificate issuer: /CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft Manifest number: 0169 Signing time: Fri 19 Dec 2025 03:05:14 +0000 Manifest this update: Fri 19 Dec 2025 03:05:14 +0000 Manifest next update: Fri 26 Dec 2025 03:05:14 +0000 Files and hashes: 1: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl (hash: ZFJCwAWzws7VE79O8iVZWJD/vGi6fUzsYr9yYazTXA0=) 2: BD16D2BCB11411EE9B803C66C4F9AE02.roa (hash: lR8Bw6f2BJOLO8ooe7J/r1W5noPvKu/D4s9lgSl+fj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD, serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA Validity Not Before: Dec 19 03:05:14 2025 GMT Not After : Dec 26 03:05:14 2025 GMT Subject: CN=6944c0ea-2bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:3d:66:b0:d7:a3:57:fe:19:cb:7c:e0:0a: 45:9a:c2:3c:bb:d9:5c:3c:cd:bd:f9:cb:d6:a0:1e: 97:08:cf:af:91:78:2e:2e:1c:ab:9e:9d:b7:d4:6a: 57:d0:72:57:2b:c9:a4:4f:4c:2e:22:10:9b:c3:06: 2c:e0:d0:84:a0:fc:95:b7:a1:e6:42:3a:77:5e:ab: 81:36:d7:c1:b3:da:86:08:af:9e:f6:9e:f2:bb:d8: f5:fd:cd:81:4b:f0:c8:56:24:9b:00:ca:ac:2a:67: e3:ed:d4:af:86:6b:d5:1a:47:7e:d3:9a:3e:31:ec: 83:33:79:74:7f:c1:8c:a6:9f:79:0f:57:7a:3c:89: d6:41:9a:3b:e0:a2:32:ed:21:96:5b:83:18:ce:e0: 17:0f:da:6f:e2:97:49:8f:4d:80:19:2d:71:75:02: 2d:d7:e3:c5:36:80:19:5c:72:1e:dc:32:d6:3d:88: e2:e8:4d:cf:a1:a8:49:19:b8:0e:30:b9:ac:d3:8b: f2:fc:36:94:8d:c8:f7:28:f3:92:d3:22:ea:3b:ee: 85:bc:19:75:55:bb:fd:f7:01:0f:ee:4a:25:37:88: a3:11:76:db:4b:9e:14:be:e4:49:cc:b7:9a:94:4a: 04:e3:9f:a1:5a:26:4d:c2:6a:c4:57:81:1b:0d:fc: e0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1D:3E:A8:8E:39:EF:A1:D3:7E:DF:86:38:50:35:53:0C:A6:1B:A1 X509v3 Authority Key Identifier: keyid:16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:bd:0c:6d:7c:e3:ca:27:fd:0c:78:53:c7:37:fc:2e:1d:56: bb:56:5d:d1:4d:7d:75:70:cb:e0:69:64:75:4c:3d:d6:0b:5b: 7c:b8:8b:aa:ce:80:ac:96:c9:58:33:8f:0b:6c:b1:ea:cc:45: 27:e5:29:70:98:9f:af:77:7d:a5:87:f1:cc:03:dd:34:e2:d2: 2c:0f:ff:0d:75:61:97:c0:6c:27:bb:25:cb:65:b4:55:c3:7c: 1b:06:4f:56:56:6f:9b:c7:27:59:00:ad:aa:33:e4:42:04:f7: 7e:b4:21:fb:26:92:d8:d8:66:aa:1c:67:ed:60:d2:12:d7:84: 24:26:3c:9e:94:b8:5a:de:eb:0f:25:91:d7:a0:4d:a1:b8:a2: dc:79:17:4f:98:13:26:8e:04:c0:a9:c2:cf:89:b5:7b:bb:c5: c0:30:d6:99:7b:96:2b:31:d5:1b:ce:98:fd:32:70:26:25:c1: cb:55:fc:99:d3:82:0b:0e:d1:3a:e1:d6:a3:6d:1e:c7:e7:18: 18:b2:86:99:a5:1e:47:25:10:ff:82:14:a2:83:1d:19:36:d5: e0:3c:9c:4a:6d:bf:e2:6f:d6:20:4c:9b:b3:67:75:65:90:a8: d7:f3:42:4e:32:c3:cd:f1:d2:da:fd:bf:1e:ce:bc:38:6b:19: 47:f1:c1:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkQxMTAvBgNVBAUTKDE2N0Q2RUMzMkFEMEIzNTgxNUYyODg0N0FERDc5NzBF QjY3RjJEQkEwHhcNMjUxMjE5MDMwNTE0WhcNMjUxMjI2MDMwNTE0WjAYMRYwFAYD VQQDDA02OTQ0YzBlYS0yYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWo9ZrDXo1f+Gct84ApFmsI8u9lcPM29+cvWoB6XCM+vkXguLhyrnp231GpX 0HJXK8mkT0wuIhCbwwYs4NCEoPyVt6HmQjp3XquBNtfBs9qGCK+e9p7yu9j1/c2B S/DIViSbAMqsKmfj7dSvhmvVGkd+05o+MeyDM3l0f8GMpp95D1d6PInWQZo74KIy 7SGWW4MYzuAXD9pv4pdJj02AGS1xdQIt1+PFNoAZXHIe3DLWPYji6E3PoahJGbgO MLms04vy/DaUjcj3KPOS0yLqO+6FvBl1Vbv99wEP7kolN4ijEXbbS54UvuRJzLea lEoE45+hWiZNwmrEV4EbDfzg6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsdPqiO Oe+h037fhjhQNVMMphuhMB8GA1UdIwQYMBaAFBZ9bsMq0LNYFfKIR63Xlw62fy26 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zRTQwMDY5OEIx MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi9GbjF1d3lyUXMxZ1Y4b2hIcmRlWERyWl9M Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuMXV3eXJRczFnVjhvaEhyZGVYRHJaX0xiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCRC8zRTQwMDY5OEIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi9GbjF1d3lyUXMx Z1Y4b2hIcmRlWERyWl9MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4vQxtfOPKJ/0MeFPHN/wuHVa7Vl3RTX11cMvgaWR1TD3WC1t8uIuq zoCslslYM48LbLHqzEUn5SlwmJ+vd32lh/HMA9004tIsD/8NdWGXwGwnuyXLZbRV w3wbBk9WVm+bxydZAK2qM+RCBPd+tCH7JpLY2GaqHGftYNIS14QkJjyelLha3usP JZHXoE2huKLceRdPmBMmjgTAqcLPibV7u8XAMNaZe5YrMdUbzpj9MnAmJcHLVfyZ 04ILDtE64dajbR7H5xgYsoaZpR5HJRD/ghSigx0ZNtXgPJxKbb/ib9YgTJuzZ3Vl kKjX80JOMsPN8dLa/b8ezrw4axlH8cGU -----END CERTIFICATE-----Generated at Fri Dec 19 18:58:11 2025 by rpki-client