This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: lx13Ja2AnSwJUhPOPCjrCt7bPrdXBsPcAmQEttkVap8= Subject key identifier: 9D:B6:A4:51:00:C3:54:E4:CB:A5:97:BF:3E:63:E4:D4:83:3F:98:91 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 0228 Signing time: Sat 27 Dec 2025 01:07:18 +0000 Manifest this update: Sat 27 Dec 2025 01:07:17 +0000 Manifest next update: Sat 03 Jan 2026 01:07:17 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: F/j35svKIyyDa6BKPSrytGfEzx1ew+/VJrg+uaV09ZE=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 01:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Dec 27 01:07:17 2025 GMT Not After : Jan 3 01:07:17 2026 GMT Subject: CN=694f3146-5817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:b3:53:60:46:51:d0:65:4b:de:51:72:be: ff:65:6b:44:71:d5:45:cd:d5:e9:8c:c0:38:0b:e3: 73:0b:a5:21:18:1a:83:21:ce:55:aa:39:83:f1:85: 86:8e:2c:a8:af:90:f7:83:be:9c:ad:17:c7:d7:d6: 6a:e3:2e:b5:25:0c:58:c3:e7:94:f2:28:1a:63:fe: 3e:f2:a4:93:4d:16:9c:e0:a7:93:0e:29:cf:5f:69: bb:39:f8:51:e0:2e:1c:27:f7:47:c8:a9:bc:e4:67: ca:26:77:99:6d:67:24:9f:8b:82:58:68:35:03:62: c5:16:6a:53:43:c4:bd:f4:d9:26:d5:89:8f:b3:4f: b1:b6:1d:f0:b3:38:13:ea:b9:40:7d:b0:71:16:a1: c0:b5:18:ca:f2:64:64:b5:17:b4:01:a1:c6:96:20: 49:d4:7f:77:0a:1e:7f:56:e5:51:25:23:0d:af:08: 4e:38:1d:a1:59:92:f3:04:9c:aa:ef:79:fe:97:fb: b0:9b:c4:07:5a:dc:e3:d9:b1:8c:83:63:d2:83:80: 8b:f0:bd:2b:d1:70:b2:f3:47:7e:0d:cd:7b:36:44: 24:00:85:ee:36:a2:3b:55:b5:d3:86:f9:b6:97:8f: 80:93:07:38:da:1f:a7:cc:35:98:44:d3:ef:29:1e: 72:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B6:A4:51:00:C3:54:E4:CB:A5:97:BF:3E:63:E4:D4:83:3F:98:91 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:52:13:81:ad:e2:55:60:20:fc:fc:8b:5a:b3:b2:ef:2a:83: bc:e2:ba:c2:45:f4:68:93:b1:3f:c6:2f:ef:45:09:85:64:ea: d3:e0:6c:c8:98:7b:c7:4d:51:36:75:9b:3a:3e:7e:b1:3e:89: 21:64:ce:45:17:a4:ac:64:e5:f1:60:3e:bf:f6:d1:09:45:64: 00:27:b4:d1:5b:41:3c:97:37:38:ca:62:b8:c3:94:9b:30:bb: 9d:76:ba:d6:eb:43:54:78:77:8d:b0:3f:ab:85:68:ef:23:c0: f4:b4:06:aa:f3:f9:62:41:0d:8b:82:b5:45:5e:c3:38:2d:83: bf:0b:77:83:68:22:63:1f:a6:08:d9:1d:7a:e3:b0:16:d3:31: cb:d6:1b:6b:1f:12:5f:f0:ad:7e:68:18:72:b2:f6:57:54:d8: 1b:82:40:06:22:0e:90:ff:15:34:c0:85:a7:fb:27:cc:81:ce: b3:08:e4:24:aa:56:fd:c7:24:46:2d:c4:db:0f:32:a7:fc:9d: b8:0e:76:5a:36:2e:ae:3e:d0:4c:85:0b:a0:a4:07:34:ad:6d: 04:36:8f:cf:57:9f:58:47:98:3a:ff:27:1d:e4:9d:a9:ad:c9: b0:8d:67:3b:8a:08:96:f7:c8:8d:0b:30:e7:f3:4c:b3:c1:bb: 94:0a:d4:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUxMjI3MDEwNzE3WhcNMjYwMTAzMDEwNzE3WjAYMRYwFAYD VQQDDA02OTRmMzE0Ni01ODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2CzU2BGUdBlS95Rcr7/ZWtEcdVFzdXpjMA4C+NzC6UhGBqDIc5VqjmD8YWG jiyor5D3g76crRfH19Zq4y61JQxYw+eU8igaY/4+8qSTTRac4KeTDinPX2m7OfhR 4C4cJ/dHyKm85GfKJneZbWckn4uCWGg1A2LFFmpTQ8S99Nkm1YmPs0+xth3wszgT 6rlAfbBxFqHAtRjK8mRktRe0AaHGliBJ1H93Ch5/VuVRJSMNrwhOOB2hWZLzBJyq 73n+l/uwm8QHWtzj2bGMg2PSg4CL8L0r0XCy80d+Dc17NkQkAIXuNqI7VbXThvm2 l4+Akwc42h+nzDWYRNPvKR5ydwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ22pFEA w1Tky6WXvz5j5NSDP5iRMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLUhOBreJVYCD8/Itas7LvKoO84rrCRfRok7E/xi/vRQmFZOrT4GzI mHvHTVE2dZs6Pn6xPokhZM5FF6SsZOXxYD6/9tEJRWQAJ7TRW0E8lzc4ymK4w5Sb MLuddrrW60NUeHeNsD+rhWjvI8D0tAaq8/liQQ2LgrVFXsM4LYO/C3eDaCJjH6YI 2R1647AW0zHL1htrHxJf8K1+aBhysvZXVNgbgkAGIg6Q/xU0wIWn+yfMgc6zCOQk qlb9xyRGLcTbDzKn/J24DnZaNi6uPtBMhQugpAc0rW0ENo/PV59YR5g6/ycd5J2p rcmwjWc7igiW98iNCzDn80yzwbuUCtTR -----END CERTIFICATE-----Generated at Sat Dec 27 04:10:48 2025 by rpki-client