This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft File: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json) Hash identifier: qmMP7hBX9wg2GzYBvJDTjCndCSTnLFZwTq9ZZFHFhSs= Subject key identifier: 1C:9B:BC:D4:D7:35:BA:E3:16:D3:7D:7E:6D:5D:75:2C:91:9C:C9:61 Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Certificate serial: 0CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft Manifest number: 0CBF Signing time: Sat 20 Dec 2025 18:08:09 +0000 Manifest this update: Sat 20 Dec 2025 18:08:09 +0000 Manifest next update: Sat 27 Dec 2025 18:08:09 +0000 Files and hashes: 1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: ANblN/Aq2jNiS2mk+UTdsYpQhWiukzC7gVcmfwaTslg=) 2: B256D8FC479711F09A25BE59C4F9AE02.roa (hash: g0SoJEOW6hbapp+G2W5wkFaJTTHS/dc2FgUbvjsjuIM=) 3: 34E6B680511A11F0B256FA65C4F9AE02.roa (hash: DotKGlewQf4vCmtjp0W5XPKIyQK3DWXLsRQy4LfbCHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Validity Not Before: Dec 20 18:08:09 2025 GMT Not After : Dec 27 18:08:09 2025 GMT Subject: CN=6946e609-942c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:f8:2b:09:e3:1d:82:8b:01:0a:ab:1b:f9: 14:30:5c:8a:5c:6c:8a:cc:c2:93:fa:3d:e3:66:a3: d1:cc:02:b1:89:cb:09:bb:11:e8:d0:59:df:05:85: f8:f0:59:52:b9:25:fc:2a:01:c0:0b:e2:56:d3:62: cd:3c:f6:f5:1f:6e:ed:d9:fe:72:ca:09:1f:9b:81: 2e:51:dc:29:8c:65:dd:ef:24:41:bb:09:1a:e2:8f: 89:58:65:8a:f2:c3:ec:4b:c3:10:d9:af:df:e2:4e: 25:08:78:34:22:c5:eb:e7:70:b3:9d:43:29:8b:e6: be:ed:23:1a:ad:ef:7b:8b:a3:4f:94:b5:8e:a6:2c: 60:4d:5c:b7:46:9a:d0:df:30:e6:8e:26:25:98:11: f7:a9:af:4d:0b:cf:02:c3:36:db:e8:cb:eb:ac:a0: 70:22:f3:a3:89:cd:d4:0c:2a:90:39:95:5b:30:17: 9f:be:4e:30:29:61:f3:7b:d1:6a:0c:25:8b:85:da: 1c:64:6c:8e:1d:f3:78:5a:12:b6:90:0e:e6:cf:06: c6:cf:d1:32:9c:2c:8f:d1:26:3a:07:75:87:3c:3a: a4:9a:fa:7d:dc:af:82:fe:09:a0:82:57:59:b3:dd: 6c:35:f3:da:f3:08:17:0d:a9:5a:55:c5:24:20:15: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9B:BC:D4:D7:35:BA:E3:16:D3:7D:7E:6D:5D:75:2C:91:9C:C9:61 X509v3 Authority Key Identifier: keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:75:7d:28:38:4f:3f:3d:25:e0:83:de:fd:b2:46:87:22:9c: 0f:f8:df:22:12:13:b9:86:ae:e3:59:3a:44:9d:c1:8b:0d:99: 87:b2:6f:29:09:d1:a3:49:ab:ff:f0:be:5d:26:42:ea:54:ed: f6:77:32:1a:64:55:3b:9e:a9:db:53:6a:31:20:93:57:4a:54: 30:7c:3b:03:f6:76:7f:c3:2c:ad:12:a0:67:d0:10:5b:4c:00: 12:2f:31:4f:1b:f9:18:dc:8d:74:f6:ec:fc:a6:1c:21:78:9d: c7:bf:95:9b:bd:5b:4a:d7:44:89:d2:73:e4:30:6b:0b:f0:97: d9:76:ba:b4:ec:bb:4c:d3:31:2d:1e:82:26:78:32:ea:70:2e: f0:13:70:26:d4:30:88:23:5f:2a:7c:b1:a9:57:4c:1f:c8:fb: 8d:cb:b8:ae:52:99:1c:e4:fc:e2:7b:92:c4:8c:87:b8:fc:3a: e5:92:0e:73:f4:24:57:5d:6d:d8:ca:2b:d0:13:ef:af:2c:8e: 3e:3b:69:e5:4c:0e:ef:63:4e:35:9c:13:fd:cb:84:9f:21:da: e0:8d:39:21:08:26:97:1b:55:f0:a5:27:7d:14:9d:19:cf:47: 76:3b:a2:77:60:35:b0:93:35:1b:aa:83:59:8e:00:9f:aa:0f: 43:b2:bf:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzRUUxMTAvBgNVBAUTKEZDNTZFN0UwNzZGN0ZEMEE4NEJFQ0M5QzNFMjI5MTQy QTA5MDFGRUMwHhcNMjUxMjIwMTgwODA5WhcNMjUxMjI3MTgwODA5WjAYMRYwFAYD VQQDDA02OTQ2ZTYwOS05NDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1X4KwnjHYKLAQqrG/kUMFyKXGyKzMKT+j3jZqPRzAKxicsJuxHo0FnfBYX4 8FlSuSX8KgHAC+JW02LNPPb1H27t2f5yygkfm4EuUdwpjGXd7yRBuwka4o+JWGWK 8sPsS8MQ2a/f4k4lCHg0IsXr53CznUMpi+a+7SMare97i6NPlLWOpixgTVy3RprQ 3zDmjiYlmBH3qa9NC88Cwzbb6MvrrKBwIvOjic3UDCqQOZVbMBefvk4wKWHze9Fq DCWLhdocZGyOHfN4WhK2kA7mzwbGz9EynCyP0SY6B3WHPDqkmvp93K+C/gmggldZ s91sNfPa8wgXDalaVcUkIBVlZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBybvNTX NbrjFtN9fm1ddSyRnMlhMB8GA1UdIwQYMBaAFPxW5+B29/0KhL7MnD4ikUKgkB/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTNFRS82ODU4RjY4ODBF MDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19RcUV2c3ljUGlLUlFxQ1FI LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19GYm40SGIzX1FxRXZzeWNQaUtSUXFDUUgtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTNFRS82ODU4RjY4ODBFMDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19R cUV2c3ljUGlLUlFxQ1FILXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzdX0oOE8/PSXgg979skaHIpwP+N8iEhO5hq7jWTpEncGLDZmHsm8p CdGjSav/8L5dJkLqVO32dzIaZFU7nqnbU2oxIJNXSlQwfDsD9nZ/wyytEqBn0BBb TAASLzFPG/kY3I109uz8phwheJ3Hv5WbvVtK10SJ0nPkMGsL8JfZdrq07LtM0zEt HoImeDLqcC7wE3Am1DCII18qfLGpV0wfyPuNy7iuUpkc5Pzie5LEjIe4/Drlkg5z 9CRXXW3YyivQE++vLI4+O2nlTA7vY041nBP9y4SfIdrgjTkhCCaXG1XwpSd9FJ0Z z0d2O6J3YDWwkzUbqoNZjgCfqg9Dsr8H -----END CERTIFICATE-----Generated at Mon Dec 22 17:22:57 2025 by rpki-client