This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft File: FION2NTh_gMXFCZnF24W4KW2hlE.mft (raw, json) Hash identifier: 5JmuQI70w7mrmEfdRriTEDPdaUUH1OpAyRih+/dCYok= Subject key identifier: 0A:0E:D1:40:58:A2:19:BA:3E:6A:D7:11:83:6A:73:E8:8A:9C:37:C6 Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 Certificate issuer: /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Certificate serial: 0E5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft Manifest number: 0E53 Signing time: Sat 10 Jan 2026 17:27:12 +0000 Manifest this update: Sat 10 Jan 2026 17:27:11 +0000 Manifest next update: Sat 17 Jan 2026 17:27:11 +0000 Files and hashes: 1: FION2NTh_gMXFCZnF24W4KW2hlE.crl (hash: wvpQ3jelKr4xhQv+cKNke1gCTEbEKeviEEtro0EU+oM=) 2: 14E68648B42D11E9A44FF25BC4F9AE02.roa (hash: aOcvKXW2OwUSyFzRq5Kiuga5ndEep1PmMp0UDb+8XIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 17:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3675 (0xe5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D9, serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Validity Not Before: Jan 10 17:27:11 2026 GMT Not After : Jan 17 17:27:11 2026 GMT Subject: CN=69628bf0-8a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:79:4a:fa:68:b3:9a:d4:38:f5:00:27:63:0d: af:6b:1d:1a:16:bc:f5:51:9d:2b:ba:ce:f5:65:9c: 5c:9e:58:ec:70:5e:b9:d8:53:04:be:fc:9d:12:c4: ad:92:b5:98:5f:77:e8:2c:e9:72:07:0d:db:96:a2: 5c:c6:d6:d7:33:9a:88:6b:92:b9:ca:ab:33:e3:bf: 0e:f9:c5:20:b9:71:15:ce:45:1e:2d:73:62:c2:87: b5:69:d1:5b:12:c6:a7:74:fc:47:0d:8c:91:5a:a8: f3:45:27:6f:2c:2e:c4:fc:0c:d4:c8:3c:88:1e:3b: 64:8a:72:a3:08:e3:df:00:c3:96:c7:f8:23:97:c5: 75:b3:cd:d5:dc:e4:05:81:4a:39:90:e4:63:22:0c: 1e:b1:fb:6d:0b:d6:e9:1c:b9:98:e2:b0:20:e8:b4: d6:e5:d4:e1:1a:03:34:5f:1a:3d:f2:d1:29:0b:22: 08:6d:e1:a7:20:c9:2b:20:2a:df:bf:2e:83:09:71: ca:59:dd:b1:77:fc:7d:35:39:67:93:6c:af:a0:34: c4:1e:c4:87:21:95:08:19:4c:fd:37:f6:17:fb:0a: a7:94:41:20:e2:e4:f6:3b:a9:4c:7c:45:72:c4:d0: 77:12:26:fc:4b:7b:52:b1:51:5a:fa:84:07:f0:16: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0E:D1:40:58:A2:19:BA:3E:6A:D7:11:83:6A:73:E8:8A:9C:37:C6 X509v3 Authority Key Identifier: keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:75:05:86:ad:3d:20:79:77:b0:95:84:4c:cc:30:f9:3e:1f: 72:09:f4:0b:07:7d:ee:cc:44:47:ba:c5:bb:79:48:19:6d:93: a4:9b:e5:50:94:fb:67:26:b5:5e:2f:f5:b0:c0:24:52:f3:8c: 93:78:8a:32:a9:bc:02:83:75:5e:db:db:85:ae:d0:82:31:10: cb:e3:9a:18:51:97:c5:41:d1:49:8c:0c:6b:7b:6a:b2:29:28: 04:80:b6:12:af:1c:6b:a3:b9:0a:4b:19:46:74:7e:c5:74:8d: 65:be:c1:d3:f5:f1:44:f9:fc:be:85:2f:0c:2a:d2:c7:9e:af: c7:9c:85:31:0d:dc:ac:67:68:69:2c:d5:95:8f:57:32:4b:bb: 6b:17:b0:c0:4b:54:03:fb:df:05:e8:9b:d4:d8:cd:f4:13:e0: 1d:69:5d:73:6c:5e:f2:01:d0:77:c1:2a:74:06:ea:c1:8c:c8: f3:2a:10:c5:f7:15:fd:cc:14:ad:d9:48:03:e5:a8:a6:4e:b8: 16:15:73:b3:d7:c9:f5:32:d0:79:25:aa:89:eb:40:b5:34:ba: dc:fb:95:81:af:dc:1a:9c:f7:e4:ec:b9:a2:5d:32:d9:9d:43: 96:bc:bd:97:8d:10:36:2a:df:95:4d:08:a8:ba:d1:86:46:47: 75:66:bc:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDkxMTAvBgNVBAUTKDE0ODM4REQ4RDRFMUZFMDMxNzE0MjY2NzE3NkUxNkUw QTVCNjg2NTEwHhcNMjYwMTEwMTcyNzExWhcNMjYwMTE3MTcyNzExWjAYMRYwFAYD VQQDDA02OTYyOGJmMC04YTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nlK+mizmtQ49QAnYw2vax0aFrz1UZ0rus71ZZxcnljscF652FMEvvydEsSt krWYX3foLOlyBw3blqJcxtbXM5qIa5K5yqsz478O+cUguXEVzkUeLXNiwoe1adFb EsandPxHDYyRWqjzRSdvLC7E/AzUyDyIHjtkinKjCOPfAMOWx/gjl8V1s83V3OQF gUo5kORjIgwesfttC9bpHLmY4rAg6LTW5dThGgM0Xxo98tEpCyIIbeGnIMkrICrf vy6DCXHKWd2xd/x9NTlnk2yvoDTEHsSHIZUIGUz9N/YX+wqnlEEg4uT2O6lMfEVy xNB3Eib8S3tSsVFa+oQH8BYRkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoO0UBY ohm6PmrXEYNqc+iKnDfGMB8GA1UdIwQYMBaAFBSDjdjU4f4DFxQmZxduFuCltoZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEOS8xQzNERDk2NkI0 MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9nTVhGQ1puRjI0VzRLVzJo bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZJT04yTlRoX2dNWEZDWm5GMjRXNEtXMmhsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEOS8xQzNERDk2NkI0MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9n TVhGQ1puRjI0VzRLVzJobEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSdQWGrT0geXewlYRMzDD5Ph9yCfQLB33uzERHusW7eUgZbZOkm+VQ lPtnJrVeL/WwwCRS84yTeIoyqbwCg3Ve29uFrtCCMRDL45oYUZfFQdFJjAxre2qy KSgEgLYSrxxro7kKSxlGdH7FdI1lvsHT9fFE+fy+hS8MKtLHnq/HnIUxDdysZ2hp LNWVj1cyS7trF7DAS1QD+98F6JvU2M30E+AdaV1zbF7yAdB3wSp0BurBjMjzKhDF 9xX9zBSt2UgD5aimTrgWFXOz18n1MtB5JaqJ60C1NLrc+5WBr9wanPfk7LmiXTLZ nUOWvL2XjRA2Kt+VTQioutGGRkd1Zrxj -----END CERTIFICATE-----Generated at Sun Jan 11 20:18:13 2026 by rpki-client