This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json)
Hash identifier: 4HO1MvBpyfJZ3lVvUgqsHDe10LphNhHS7pK0XdtzQEI=
Subject key identifier: EE:A2:AF:0F:C7:4B:E6:EC:9A:F7:24:DF:D1:F4:3E:AA:0D:60:69:77
Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
Certificate serial: 0278
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
Manifest number: 0273
Signing time: Fri 19 Dec 2025 00:49:28 +0000
Manifest this update: Fri 19 Dec 2025 00:49:27 +0000
Manifest next update: Fri 26 Dec 2025 00:49:27 +0000
Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: wB5fEioJ9fkPRx5Aw65tHJMbkg7a/MopoqSy/8grYSU=)
2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: z3vMrh+MfifC7nf/d8HWXEmLlkM4nBll9m3BXQVcSyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl
rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
Validity
Not Before: Dec 19 00:49:27 2025 GMT
Not After : Dec 26 00:49:27 2025 GMT
Subject: CN=6944a118-470c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:ef:25:a0:91:ac:06:af:a9:9f:e7:13:ac:
e8:c0:c8:cd:d0:61:a6:be:50:20:22:01:1c:93:c7:
66:ad:da:54:78:b0:5f:2d:a0:ab:04:ee:86:08:2f:
09:60:7d:93:11:45:af:1c:3e:f4:fb:49:ff:24:f7:
21:04:23:9a:c6:22:00:22:db:56:7f:fc:ca:69:52:
14:c2:63:c8:5f:da:0e:71:13:a6:bd:84:f5:87:ce:
f3:28:30:0c:c1:bd:58:6d:7e:ca:8e:9a:ff:9b:41:
fc:d0:63:b1:d1:80:6e:49:69:1b:d7:60:93:60:7a:
b3:c0:02:fd:f3:a5:33:3a:bc:2e:bc:78:aa:55:0c:
cc:3c:28:66:d2:70:7d:05:18:f8:5a:2e:2d:72:d5:
72:a0:03:78:57:94:bb:53:e9:24:1b:b9:6f:71:5c:
24:09:77:6c:66:04:e3:d9:d6:af:1b:8c:37:75:3f:
b5:56:73:bd:f5:21:2c:fe:ec:6a:0c:7d:a0:81:cb:
92:b1:63:59:a1:57:37:d4:2f:78:57:ea:b7:24:29:
44:f2:3b:7d:c1:61:91:d9:c6:13:15:0e:85:f7:d4:
75:7e:f4:b1:ad:2d:2f:1c:cd:19:fd:dc:2c:06:f1:
f9:13:8c:7d:aa:29:d5:08:d8:9b:46:60:0c:ac:bf:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A2:AF:0F:C7:4B:E6:EC:9A:F7:24:DF:D1:F4:3E:AA:0D:60:69:77
X509v3 Authority Key Identifier:
keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b8:dc:1b:9b:aa:f8:fe:c9:4e:cd:cc:61:94:26:e3:d6:42:
3c:a7:d9:50:70:b5:7c:6e:14:7b:a2:ee:1d:20:90:09:80:d4:
66:09:73:13:56:32:2c:7d:84:2e:2c:4d:8a:93:b3:2b:7e:40:
d4:f4:3d:29:dd:c3:51:0e:16:27:60:f4:22:5a:3a:82:9b:ab:
ff:bc:31:13:73:81:6f:ab:22:7b:45:4e:31:a3:6b:2a:01:fa:
c3:9b:b9:5e:19:33:3c:ee:4c:55:b7:c2:56:ce:fa:8d:8f:f6:
f2:de:4e:90:be:14:c1:ad:21:a8:ac:b3:64:66:77:95:14:b9:
7f:c2:6c:f5:db:31:dc:f1:c3:e2:6f:76:ee:2a:0f:09:88:d2:
36:1c:1a:cb:1f:bb:93:92:3c:e9:e1:76:74:4c:44:c1:cb:08:
8a:59:d3:97:c1:00:1e:3a:48:82:d6:d3:ce:59:c2:7b:52:33:
3e:51:eb:0b:f1:54:8a:c7:6d:c3:0f:5c:44:61:c4:98:f9:4d:
be:30:18:55:a0:ae:12:bb:4a:07:55:e4:35:a8:3a:e1:c1:03:
90:c0:07:c6:a8:27:6c:e4:85:73:28:29:46:74:d0:03:75:08:
08:81:44:c4:9f:19:09:25:55:dd:c4:e9:ec:85:48:cb:b5:0d:
0a:8b:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:28:07 2025 by rpki-client