This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json) Hash identifier: tO6RY+i3bkpS8bpGTcKsgJFEO+YJwxwrIni3KoL5raU= Subject key identifier: 6F:76:E5:5F:04:3B:3A:BF:66:58:56:A1:3C:35:A5:58:3A:D2:0D:11 Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft Manifest number: 0C34 Signing time: Sat 20 Dec 2025 18:18:50 +0000 Manifest this update: Sat 20 Dec 2025 18:18:49 +0000 Manifest next update: Sat 27 Dec 2025 18:18:49 +0000 Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: YqEulRK8FUbTYl8JyxCnpH96zggV+5IZaTKP2FjadlA=) 2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: ndXUBxQ/xEOvoRO3r6r5850s+ooSM85HQb25AiLL8T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Validity Not Before: Dec 20 18:18:49 2025 GMT Not After : Dec 27 18:18:49 2025 GMT Subject: CN=6946e88a-3b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fb:54:e0:c1:95:58:5a:13:f7:08:4e:6b:d3: b8:a8:f7:7e:b5:0e:8f:0b:41:7e:44:bd:6d:ea:2e: f0:20:d9:fb:ae:e2:d3:58:e8:6f:69:4b:d0:7d:33: 73:ea:83:fa:79:56:4d:0c:a1:55:5e:ae:67:44:d9: 1b:4b:86:2d:1d:70:74:bf:c8:a4:ad:4c:a6:8d:8b: a8:d6:22:a7:bd:8e:2e:65:65:6d:90:aa:25:8d:5e: 6e:b8:1b:f0:46:52:d5:4f:a8:a2:87:05:31:79:ea: 36:4b:d2:82:41:fe:14:3c:2b:4f:6f:45:86:1f:05: 79:ce:cb:ac:ab:48:23:47:4b:85:86:58:ca:d2:cb: 34:02:1a:a2:ab:3e:86:88:e5:98:2c:65:1b:1a:9d: a8:a5:3c:c7:14:4e:e9:e6:11:6f:41:73:27:34:55: e1:0c:79:24:14:23:10:6a:e1:da:5f:9a:c5:2c:07: 52:31:8a:7a:05:f3:74:66:2b:0a:93:d0:d7:40:1e: 2f:94:7b:71:4b:19:c4:78:70:ca:a7:ae:ea:b1:c8: 32:7a:43:b1:4f:e0:fc:50:9c:a7:c3:09:5f:58:4d: 76:bc:3b:55:d3:ed:e4:f3:f0:82:35:1a:89:8c:aa: b6:d5:13:dd:54:b0:f5:93:ad:e7:05:e1:79:44:23: 90:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:76:E5:5F:04:3B:3A:BF:66:58:56:A1:3C:35:A5:58:3A:D2:0D:11 X509v3 Authority Key Identifier: keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:57:71:f7:37:3b:04:1b:a0:7a:b4:1a:4a:aa:1a:5a:d4:ac: ab:f1:1c:dd:c2:ce:f6:7f:e0:5b:ff:91:8b:5f:79:31:04:9b: a9:bc:a8:97:20:50:6c:82:b7:3c:95:c8:32:c6:68:14:60:6b: 45:de:99:56:a1:13:93:6a:1b:fc:4b:7b:d8:d5:9e:f5:59:12: 59:b2:d5:0e:fa:17:d6:de:25:46:36:c8:8e:59:42:4c:c0:c9: 6a:bf:7f:fd:f1:cb:d1:e6:0e:2b:2e:99:a8:29:75:3c:aa:7b: 5c:34:cb:e9:2f:e1:b7:62:48:30:1d:1e:73:81:38:28:06:66: 00:55:f0:20:c2:b2:f8:a8:a4:51:58:ca:18:6d:97:c5:f0:c9: 93:a6:8a:ea:8a:36:4c:42:b5:5e:d9:f7:36:c3:7e:85:1a:d1: b3:56:5c:c8:ed:91:f5:4f:d4:1f:19:44:86:dd:85:78:be:4d: fc:eb:5b:4a:b3:77:38:df:a4:6a:22:78:2b:1e:61:45:f3:d6: bc:86:5c:9c:33:48:b8:01:48:0a:d5:ff:8f:9c:d8:c8:73:79: d6:ca:18:9b:d0:6b:2f:7f:19:f1:36:d4:c8:54:a0:70:86:26: 78:a0:45:81:96:9f:ac:24:d3:b3:41:b7:f6:03:18:5f:9f:e3: 07:e8:2f:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE NjlCQzJGMzQwHhcNMjUxMjIwMTgxODQ5WhcNMjUxMjI3MTgxODQ5WjAYMRYwFAYD VQQDDA02OTQ2ZTg4YS0zYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjPtU4MGVWFoT9whOa9O4qPd+tQ6PC0F+RL1t6i7wINn7ruLTWOhvaUvQfTNz 6oP6eVZNDKFVXq5nRNkbS4YtHXB0v8ikrUymjYuo1iKnvY4uZWVtkKoljV5uuBvw RlLVT6iihwUxeeo2S9KCQf4UPCtPb0WGHwV5zsusq0gjR0uFhljK0ss0Ahqiqz6G iOWYLGUbGp2opTzHFE7p5hFvQXMnNFXhDHkkFCMQauHaX5rFLAdSMYp6BfN0ZisK k9DXQB4vlHtxSxnEeHDKp67qscgyekOxT+D8UJynwwlfWE12vDtV0+3k8/CCNRqJ jKq21RPdVLD1k63nBeF5RCOQIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG925V8E Ozq/ZlhWoTw1pVg60g0RMB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2 dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmV3H3NzsEG6B6tBpKqhpa1Kyr8Rzdws72f+Bb/5GLX3kxBJupvKiX IFBsgrc8lcgyxmgUYGtF3plWoROTahv8S3vY1Z71WRJZstUO+hfW3iVGNsiOWUJM wMlqv3/98cvR5g4rLpmoKXU8qntcNMvpL+G3YkgwHR5zgTgoBmYAVfAgwrL4qKRR WMoYbZfF8MmTporqijZMQrVe2fc2w36FGtGzVlzI7ZH1T9QfGUSG3YV4vk3861tK s3c436RqIngrHmFF89a8hlycM0i4AUgK1f+PnNjIc3nWyhib0GsvfxnxNtTIVKBw hiZ4oEWBlp+sJNOzQbf2Axhfn+MH6C+D -----END CERTIFICATE-----Generated at Mon Dec 22 13:22:15 2025 by rpki-client