This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: H1IQkT7W2Rch5tlKVc2aIJYS6h2ZKcyKsKxFMQuNUX8= Subject key identifier: E6:25:1D:46:B0:F2:88:48:26:A8:0B:06:13:06:A7:E5:23:B7:B8:04 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 0225 Signing time: Sun 21 Dec 2025 01:21:04 +0000 Manifest this update: Sun 21 Dec 2025 01:21:04 +0000 Manifest next update: Sun 28 Dec 2025 01:21:04 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: pthlJoULwvSIpnrDEYFn4n4/sJ0rrFmfbe0+0sgvemY=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Dec 21 01:21:04 2025 GMT Not After : Dec 28 01:21:04 2025 GMT Subject: CN=69474b80-f691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5a:84:51:ea:01:6b:ad:28:6a:36:6d:ba:de: 0a:c1:31:3f:82:8f:e1:96:20:99:cc:38:60:2e:32: 0b:50:43:b1:0e:cd:47:bf:d9:61:e5:ce:96:c4:bd: 36:4e:f9:2e:d3:f5:66:3b:ad:a1:8e:67:6c:4b:95: 06:51:78:40:e0:cd:0f:54:58:ee:56:60:fd:d1:8f: 4b:38:b2:e2:5f:1c:83:22:a0:04:a6:05:8f:7f:85: ac:ac:ba:7c:99:cc:27:b5:cf:de:92:55:e2:4f:1b: b3:3a:3c:5e:6a:51:13:67:c0:4d:5f:50:f4:04:81: cd:6f:a2:a3:79:c4:0c:b9:b6:d4:36:49:75:f2:f1: 13:49:82:7f:4d:e5:f9:2a:3f:57:d7:87:4b:89:40: ae:13:e1:5b:35:5a:7a:f1:c9:40:fa:dc:13:1a:71: 93:a8:99:f1:82:46:3c:e4:68:01:f5:ab:0d:05:eb: d7:5a:f8:75:54:4f:d4:70:05:7d:98:4b:b3:73:81: e0:bb:cd:ac:54:55:4b:f3:0c:ba:91:96:74:6d:4c: bf:33:ea:37:c9:9e:f5:bc:50:53:c3:80:06:40:d7: 09:f4:88:9f:48:dd:b5:a7:21:b4:97:0e:34:93:54: 83:1d:f4:71:27:61:1a:7d:b1:9d:0a:6f:da:77:96: e8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:25:1D:46:B0:F2:88:48:26:A8:0B:06:13:06:A7:E5:23:B7:B8:04 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:59:82:70:b2:f3:31:83:75:f3:47:15:5d:f4:22:3c:25:ad: 26:9c:07:c8:f4:2e:36:da:60:9c:1f:30:26:ef:07:f6:be:5a: 01:83:2b:2b:37:fd:75:97:61:9d:a9:0c:83:7c:67:7a:08:1d: cb:86:13:22:b3:85:d8:51:9a:9b:e1:21:b6:2d:ba:a8:8a:ac: 5e:79:a3:1f:b2:29:6d:51:18:cf:a5:32:bf:b7:84:3f:0e:ff: e2:cf:aa:58:5b:6c:37:3a:fa:17:72:20:76:10:86:e1:7d:e5: a4:2c:ab:fe:39:8e:d2:7e:9f:4d:25:9d:9e:4c:b1:b9:19:59: a5:81:c0:2b:06:69:73:9c:6b:f4:a0:a0:53:c5:ad:58:00:33: bd:00:7e:8d:72:e7:fc:57:3b:a1:dd:91:91:08:1b:67:16:91: c2:94:e8:c1:0c:0a:66:77:63:70:4e:4c:99:4e:d7:12:53:3e: 21:2a:d5:47:6a:b5:9e:f3:86:9c:bf:28:ec:5a:e9:b4:b7:7e: d1:1a:f2:3b:73:85:52:3a:8f:d8:5b:ef:be:1c:3e:da:34:2b: 9e:51:92:f8:16:2c:8a:73:30:cd:cb:11:bf:05:4a:60:1c:c9: 3e:ee:a9:ff:8d:d4:c0:12:2d:cb:4e:f1:59:28:04:37:3b:8f: 3f:29:d9:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUxMjIxMDEyMTA0WhcNMjUxMjI4MDEyMTA0WjAYMRYwFAYD VQQDDA02OTQ3NGI4MC1mNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VqEUeoBa60oajZtut4KwTE/go/hliCZzDhgLjILUEOxDs1Hv9lh5c6WxL02 Tvku0/VmO62hjmdsS5UGUXhA4M0PVFjuVmD90Y9LOLLiXxyDIqAEpgWPf4WsrLp8 mcwntc/eklXiTxuzOjxealETZ8BNX1D0BIHNb6KjecQMubbUNkl18vETSYJ/TeX5 Kj9X14dLiUCuE+FbNVp68clA+twTGnGTqJnxgkY85GgB9asNBevXWvh1VE/UcAV9 mEuzc4Hgu82sVFVL8wy6kZZ0bUy/M+o3yZ71vFBTw4AGQNcJ9IifSN21pyG0lw40 k1SDHfRxJ2EafbGdCm/ad5bo4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYlHUaw 8ohIJqgLBhMGp+Ujt7gEMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4WYJwsvMxg3XzRxVd9CI8Ja0mnAfI9C422mCcHzAm7wf2vloBgysr N/11l2GdqQyDfGd6CB3LhhMis4XYUZqb4SG2LbqoiqxeeaMfsiltURjPpTK/t4Q/ Dv/iz6pYW2w3OvoXciB2EIbhfeWkLKv+OY7Sfp9NJZ2eTLG5GVmlgcArBmlznGv0 oKBTxa1YADO9AH6Ncuf8Vzuh3ZGRCBtnFpHClOjBDApmd2NwTkyZTtcSUz4hKtVH arWe84acvyjsWum0t37RGvI7c4VSOo/YW+++HD7aNCueUZL4FiyKczDNyxG/BUpg HMk+7qn/jdTAEi3LTvFZKAQ3O48/Kdkz -----END CERTIFICATE-----Generated at Sun Dec 21 12:58:14 2025 by rpki-client