This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json) Hash identifier: aPUK4aeB7AvdBW3hGQpNIqY8rIlr2GkP/R+tkafXHmg= Subject key identifier: F5:96:6A:90:77:05:86:F2:E6:0E:55:93:2C:4D:33:70:22:86:1E:C8 Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Certificate serial: 04BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft Manifest number: 0491 Signing time: Fri 26 Dec 2025 23:16:08 +0000 Manifest this update: Fri 26 Dec 2025 23:16:08 +0000 Manifest next update: Fri 02 Jan 2026 23:16:08 +0000 Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: GN+6FWiFLXpo7mLx9HeOtjfa5rq9MTUVCI8Qk65SaQA=) 2: F29967B22B0011F0B0319E61C4F9AE02.roa (hash: AWipWCwfBJg9FTHPHDUNW5DfQTImAx6KbbjHRDTBNc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 23:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1214 (0x4be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Validity Not Before: Dec 26 23:16:08 2025 GMT Not After : Jan 2 23:16:08 2026 GMT Subject: CN=694f1738-230c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:08:f0:c6:56:7a:fd:a6:21:6a:4f:36:ff: 65:4d:8c:a0:3b:97:1b:40:1f:ce:9e:07:24:68:1f: 3d:9c:1d:5a:89:30:b0:f9:14:6b:6e:90:2f:81:8f: 8c:8c:4a:45:cd:7d:67:43:46:89:60:72:ca:2c:e6: 96:b3:c3:46:c1:a5:f8:87:01:c0:a4:85:16:ce:07: 4c:c3:0b:ba:70:46:ff:84:50:0c:4e:4d:52:2c:bb: fe:bf:55:f6:bb:de:90:ca:c1:16:30:fb:9f:ea:fb: 5f:10:66:24:20:8f:59:11:7a:ce:10:48:d3:49:e1: 38:d7:2a:ba:14:2d:57:d7:87:2a:a8:dc:cf:54:1c: 5f:70:fe:b5:83:53:9b:e4:5d:0c:bd:69:f8:82:61: df:08:41:21:93:07:5f:14:17:23:99:6b:e6:4f:8a: 43:b2:9f:f6:00:ea:2f:3c:b6:8c:96:7c:e9:4d:57: 97:be:7a:f7:9a:3a:5e:fc:14:24:a7:bc:27:61:61: 8e:ab:a9:f1:2c:23:1e:48:b6:63:8b:43:3f:8f:3b: bb:18:69:50:01:34:37:5f:0d:1f:9c:fe:d1:24:d7: fd:ee:f5:d1:ab:d4:97:ee:74:29:39:28:30:cb:d2: 50:da:5f:87:8c:67:86:80:72:20:35:a9:a4:94:3f: 4e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:96:6A:90:77:05:86:F2:E6:0E:55:93:2C:4D:33:70:22:86:1E:C8 X509v3 Authority Key Identifier: keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:3c:2d:20:16:11:98:fc:17:af:de:01:c2:8d:6e:50:dc:0c: 71:74:71:c2:d3:76:0f:d5:96:23:60:12:75:c6:59:7b:8d:12: 1d:5a:4e:84:e3:39:58:68:4e:2e:a5:96:03:b7:f0:85:d8:02: d9:94:a4:88:55:54:95:f5:7c:8b:b8:0f:3f:12:c7:29:70:76: ef:d6:bc:fb:05:97:46:ee:ab:7c:8c:7d:a2:fc:d3:6e:89:d8: 4c:22:b4:44:87:96:3b:63:22:40:0e:03:b2:13:c7:a0:5f:d1: 51:86:71:34:5b:d2:eb:67:23:92:b0:81:bb:d6:3c:29:3a:81: f1:3a:f8:1b:dd:04:17:d8:9d:21:92:d1:dd:82:36:9e:d5:63: d7:7a:ee:5f:5d:52:d6:09:39:70:2b:bb:c3:ee:ee:d7:03:55: dc:1c:ad:b2:ff:db:00:c7:05:26:62:51:b6:48:0c:59:30:26: 6a:b6:15:12:4d:ad:88:d3:76:0f:4e:75:b3:31:2a:c3:4b:fe: f0:99:91:b5:85:9e:41:35:34:42:e5:92:eb:f6:e3:d7:90:fe: 71:82:70:18:25:80:0b:11:3a:c6:bc:2e:e8:5f:47:4f:f9:7c: 96:27:4d:9d:d6:06:bb:6a:35:cb:ed:41:2f:d4:97:ed:73:b1: 03:45:da:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0RTQ3QzUxMzA2 M0Q5MkNFQzIwHhcNMjUxMjI2MjMxNjA4WhcNMjYwMTAyMjMxNjA4WjAYMRYwFAYD VQQDDA02OTRmMTczOC0yMzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2II8MZWev2mIWpPNv9lTYygO5cbQB/OngckaB89nB1aiTCw+RRrbpAvgY+M jEpFzX1nQ0aJYHLKLOaWs8NGwaX4hwHApIUWzgdMwwu6cEb/hFAMTk1SLLv+v1X2 u96QysEWMPuf6vtfEGYkII9ZEXrOEEjTSeE41yq6FC1X14cqqNzPVBxfcP61g1Ob 5F0MvWn4gmHfCEEhkwdfFBcjmWvmT4pDsp/2AOovPLaMlnzpTVeXvnr3mjpe/BQk p7wnYWGOq6nxLCMeSLZji0M/jzu7GGlQATQ3Xw0fnP7RJNf97vXRq9SX7nQpOSgw y9JQ2l+HjGeGgHIgNamklD9OAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWWapB3 BYby5g5VkyxNM3Aihh7IMB8GA1UdIwQYMBaAFBcASqMxBbCg5tPrTkfFEwY9ks7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDRBNi82QTU5NjlBODdF OTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNLRG0wLXRPUjhVVEJqMlN6 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3QktvekVGc0tEbTAtdE9SOFVUQmoyU3pzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNL RG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0PC0gFhGY/Bev3gHCjW5Q3AxxdHHC03YP1ZYjYBJ1xll7jRIdWk6E 4zlYaE4upZYDt/CF2ALZlKSIVVSV9XyLuA8/EscpcHbv1rz7BZdG7qt8jH2i/NNu idhMIrREh5Y7YyJADgOyE8egX9FRhnE0W9LrZyOSsIG71jwpOoHxOvgb3QQX2J0h ktHdgjae1WPXeu5fXVLWCTlwK7vD7u7XA1XcHK2y/9sAxwUmYlG2SAxZMCZqthUS Ta2I03YPTnWzMSrDS/7wmZG1hZ5BNTRC5ZLr9uPXkP5xgnAYJYALETrGvC7oX0dP +XyWJ02d1ga7ajXL7UEv1Jftc7EDRdoA -----END CERTIFICATE-----Generated at Sat Dec 27 17:48:40 2025 by rpki-client