This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: Hu/D4mIfqIsJkfyge47jYCC5JqUBCinJ9mC/yY3OaLY= Subject key identifier: BA:5C:FD:21:9E:6B:64:3F:46:38:9F:52:72:5E:57:C9:79:DC:23:48 Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 34F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 3996 Signing time: Tue 30 Dec 2025 14:36:19 +0000 Manifest this update: Tue 30 Dec 2025 14:36:18 +0000 Manifest next update: Tue 06 Jan 2026 14:36:18 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: 5pmJoq07CO3AQQY9lOzY29PUCOv+bQVoiyikjwYclBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 14:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13555 (0x34f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: Dec 30 14:36:18 2025 GMT Not After : Jan 6 14:36:18 2026 GMT Subject: CN=6953e363-67f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:6b:be:c4:38:d5:3f:3c:8f:f6:69:06:bc: db:24:ea:f5:ec:35:81:64:e0:94:75:b7:86:2b:2e: e4:4f:82:26:f3:18:4d:0f:22:b7:25:2e:cc:6a:aa: b0:23:9d:47:f1:dc:50:ef:36:42:f2:c7:db:23:ee: 2b:96:78:37:aa:0d:b0:43:4a:06:a5:47:30:e1:5c: 29:df:37:63:67:0a:a1:a8:f5:94:be:93:03:10:cf: 1b:99:d7:c7:bb:13:4e:70:b7:f0:8f:a7:b9:7a:0c: e9:bc:61:49:02:f3:f1:44:d4:c7:9f:b2:10:a8:9e: e5:b1:bd:e8:63:47:05:8e:4e:d1:16:67:d8:02:d8: 4c:22:bf:89:10:08:33:b3:e9:8c:41:fa:f1:41:18: 0f:4c:f2:38:91:c4:9c:22:ee:7d:47:68:4f:3b:4d: b9:1f:0c:f0:ff:c1:39:c9:18:e8:e5:a4:47:ea:99: 3c:de:0c:9e:a9:21:6a:a3:16:eb:e7:c7:d5:94:e9: 08:41:c9:f4:e1:85:40:5a:79:1a:f3:82:12:8c:73: 2e:f2:18:76:e8:80:ef:a9:2a:10:22:73:90:de:7e: 96:b4:de:c3:de:ed:a5:92:00:8e:fb:48:31:bf:3c: 38:88:f4:a5:d3:d9:07:81:19:ad:93:81:05:62:6e: 11:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5C:FD:21:9E:6B:64:3F:46:38:9F:52:72:5E:57:C9:79:DC:23:48 X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:67:f5:9e:79:63:b6:97:8a:cd:08:89:51:4a:28:a8:1e:ba: 90:33:95:8a:8a:de:3a:9a:e8:19:df:79:8d:f6:29:7a:59:62: 01:4f:f9:cb:0c:b4:d9:4b:c3:76:e2:f3:02:e3:4c:21:34:38: d7:12:63:2c:66:91:cd:1a:b5:59:17:12:f3:5a:8a:1f:7f:6e: 55:fd:8d:e4:f3:c4:18:88:4f:ce:3c:d3:43:1b:a1:a7:d7:2e: d6:01:d7:b7:8a:b8:01:f5:9b:2e:a6:3d:16:64:d3:7d:31:50: b1:81:1a:8f:98:50:e3:64:f5:e2:0f:6a:63:66:08:a5:94:17: e6:6a:a2:0c:19:de:32:0e:40:b4:c9:c1:22:9b:4a:9b:e3:a6: 0f:ce:4e:80:09:54:b3:db:99:56:fc:d0:24:8e:46:f0:a6:aa: 9c:3d:9e:55:80:93:41:50:0d:ca:c3:b0:a9:28:f8:db:4b:c1: e9:f8:7c:29:c1:e1:76:2f:5f:27:e2:c1:e6:01:3c:aa:d7:5d: 34:6a:8e:cb:d9:32:a8:cc:de:e8:f1:03:d4:12:82:c1:cd:7a: c0:6c:17:77:75:89:40:10:3c:00:1e:f7:d9:6f:3e:cd:06:2d: 45:ca:db:eb:33:ad:64:7b:e9:b6:c1:63:f9:a8:4a:65:96:75: 56:25:bd:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjUxMjMwMTQzNjE4WhcNMjYwMTA2MTQzNjE4WjAYMRYwFAYD VQQDDA02OTUzZTM2My02N2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtglrvsQ41T88j/ZpBrzbJOr17DWBZOCUdbeGKy7kT4Im8xhNDyK3JS7Maqqw I51H8dxQ7zZC8sfbI+4rlng3qg2wQ0oGpUcw4Vwp3zdjZwqhqPWUvpMDEM8bmdfH uxNOcLfwj6e5egzpvGFJAvPxRNTHn7IQqJ7lsb3oY0cFjk7RFmfYAthMIr+JEAgz s+mMQfrxQRgPTPI4kcScIu59R2hPO025Hwzw/8E5yRjo5aRH6pk83gyeqSFqoxbr 58fVlOkIQcn04YVAWnka84ISjHMu8hh26IDvqSoQInOQ3n6WtN7D3u2lkgCO+0gx vzw4iPSl09kHgRmtk4EFYm4RVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpc/SGe a2Q/RjifUnJeV8l53CNIMB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZZ/WeeWO2l4rNCIlRSiioHrqQM5WKit46mugZ33mN9il6WWIBT/nL DLTZS8N24vMC40whNDjXEmMsZpHNGrVZFxLzWooff25V/Y3k88QYiE/OPNNDG6Gn 1y7WAde3irgB9Zsupj0WZNN9MVCxgRqPmFDjZPXiD2pjZgillBfmaqIMGd4yDkC0 ycEim0qb46YPzk6ACVSz25lW/NAkjkbwpqqcPZ5VgJNBUA3Kw7CpKPjbS8Hp+Hwp weF2L18n4sHmATyq1100ao7L2TKozN7o8QPUEoLBzXrAbBd3dYlAEDwAHvfZbz7N Bi1FytvrM61ke+m2wWP5qEpllnVWJb1d -----END CERTIFICATE-----Generated at Tue Dec 30 20:20:38 2025 by rpki-client