This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json) Hash identifier: ZGI9ZjZCudAm/wrCpIBUBGVHRU+HmdP3/LYNlsovNaM= Subject key identifier: 50:9A:1B:9E:52:17:4C:F0:78:E1:30:D4:D6:90:9B:66:1F:BA:C4:F2 Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft Manifest number: 0225 Signing time: Sun 21 Dec 2025 01:22:04 +0000 Manifest this update: Sun 21 Dec 2025 01:22:03 +0000 Manifest next update: Sun 28 Dec 2025 01:22:03 +0000 Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: /szSoBEz7iJPjO2jpwfBRSoaC/tPjvf+J81vciksoA4=) 2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Validity Not Before: Dec 21 01:22:03 2025 GMT Not After : Dec 28 01:22:03 2025 GMT Subject: CN=69474bbc-d325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:ee:a3:9e:69:02:ab:75:a0:d2:1e:0f:4b: d9:83:f1:81:da:84:59:0b:2d:a0:0e:36:1e:93:72: b2:ed:ca:d4:95:0e:e7:fd:ef:56:15:ef:40:81:66: 0c:a7:15:39:fc:fb:76:36:1c:91:ce:2d:db:c6:56: 81:7b:f8:e1:78:77:dd:18:d0:da:e8:9e:51:8f:c6: 4a:81:f3:e0:05:58:04:3b:2f:9d:51:e1:76:a0:a9: 72:b9:cf:ca:b3:17:4f:93:d1:96:05:a2:66:c4:ed: 02:7f:a1:a6:75:53:2a:ce:fb:49:fb:94:d7:ae:af: c7:b8:d6:21:eb:f8:8b:78:49:e8:8a:04:8c:cc:8e: 45:17:6b:ba:a4:d2:ef:d9:3e:f8:b9:76:96:ba:ac: 7b:7e:9a:7a:4a:bb:c1:82:14:51:94:3b:e4:cf:24: 36:1b:c9:33:d6:22:0f:01:d8:4a:23:b3:56:1f:75: ac:95:a7:f2:83:c2:53:90:83:6b:f0:4a:6e:1a:e2: 32:d1:87:9c:b0:2f:7e:a3:9b:db:f6:ce:16:05:05: 5c:f2:55:ba:2b:94:c0:1a:f5:a2:47:34:bc:14:d0: 92:29:83:1b:5b:19:8c:fe:0e:03:09:ef:67:81:f7: 67:ea:fa:05:0a:e8:de:8d:44:34:88:50:35:68:94: 17:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9A:1B:9E:52:17:4C:F0:78:E1:30:D4:D6:90:9B:66:1F:BA:C4:F2 X509v3 Authority Key Identifier: keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:07:b1:66:69:8e:d0:a8:79:a6:06:00:88:db:2d:33:7d:84: 00:b4:62:c7:f5:a7:09:33:b9:ae:b2:50:74:d8:f4:47:d3:46: 09:ab:e0:c2:90:28:50:55:c2:3a:3e:e0:f7:60:2f:0f:01:0c: 18:32:c8:10:e0:6b:5f:7a:d3:3e:a8:dd:a0:59:8a:da:bd:3b: d9:89:90:72:6d:94:e2:a2:ed:e8:ea:2d:c8:64:ab:79:07:7f: 3d:ee:35:df:bb:fa:13:b5:ae:76:ba:af:48:92:6f:93:2e:3f: d2:7d:b1:c6:4f:d5:24:ec:e1:eb:28:e7:aa:b5:4f:c3:dc:58: 84:7a:a8:d8:ac:e0:f0:79:7d:48:59:30:5f:67:c4:e4:51:e3: 56:7d:2e:a0:9c:69:9a:5b:98:27:f9:87:4c:34:df:63:8f:ef: fb:2b:1f:1e:c4:4b:a5:72:d1:a0:d6:f5:65:4a:45:51:94:84: 74:9f:16:0d:2b:dc:7f:c8:91:5b:8a:3e:9d:c2:73:ad:e3:0a: e4:78:97:6c:03:a8:01:cd:08:3f:6a:4f:fc:7b:6b:34:2d:30: 76:0a:bb:f4:a3:e0:24:86:8a:79:0b:2e:ac:03:fc:41:88:55: c6:e6:c3:ca:d6:34:7b:2f:8c:61:c5:98:8c:35:64:73:34:0b: bd:9e:a8:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz NUE1MUFBOUUwHhcNMjUxMjIxMDEyMjAzWhcNMjUxMjI4MDEyMjAzWjAYMRYwFAYD VQQDDA02OTQ3NGJiYy1kMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOvuo55pAqt1oNIeD0vZg/GB2oRZCy2gDjYek3Ky7crUlQ7n/e9WFe9AgWYM pxU5/Pt2NhyRzi3bxlaBe/jheHfdGNDa6J5Rj8ZKgfPgBVgEOy+dUeF2oKlyuc/K sxdPk9GWBaJmxO0Cf6GmdVMqzvtJ+5TXrq/HuNYh6/iLeEnoigSMzI5FF2u6pNLv 2T74uXaWuqx7fpp6SrvBghRRlDvkzyQ2G8kz1iIPAdhKI7NWH3Wslafyg8JTkINr 8EpuGuIy0YecsC9+o5vb9s4WBQVc8lW6K5TAGvWiRzS8FNCSKYMbWxmM/g4DCe9n gfdn6voFCujejUQ0iFA1aJQXwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCaG55S F0zweOEw1NaQm2YfusTyMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0 RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+B7FmaY7QqHmmBgCI2y0zfYQAtGLH9acJM7muslB02PRH00YJq+DC kChQVcI6PuD3YC8PAQwYMsgQ4GtfetM+qN2gWYravTvZiZBybZTiou3o6i3IZKt5 B3897jXfu/oTta52uq9Ikm+TLj/SfbHGT9Uk7OHrKOeqtU/D3FiEeqjYrODweX1I WTBfZ8TkUeNWfS6gnGmaW5gn+YdMNN9jj+/7Kx8exEulctGg1vVlSkVRlIR0nxYN K9x/yJFbij6dwnOt4wrkeJdsA6gBzQg/ak/8e2s0LTB2Crv0o+Akhop5Cy6sA/xB iFXG5sPK1jR7L4xhxZiMNWRzNAu9nqjy -----END CERTIFICATE-----Generated at Sun Dec 21 10:21:12 2025 by rpki-client