This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: atS3OU/i9dvE2lxx1ohulxQ065MpAVEOVbLWzEOSnmE= Subject key identifier: D9:17:78:23:63:31:F1:B6:9F:87:97:79:BD:30:8E:F2:67:33:EA:9C Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0B4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0B62 Signing time: Thu 18 Dec 2025 18:54:33 +0000 Manifest this update: Thu 18 Dec 2025 18:54:33 +0000 Manifest next update: Thu 25 Dec 2025 18:54:33 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: HhG0VovHOGx43MRoljVzj1UJ+dVtoabtTMU3a3TonR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2894 (0xb4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: Dec 18 18:54:33 2025 GMT Not After : Dec 25 18:54:33 2025 GMT Subject: CN=69444de9-0e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:94:e1:62:6d:3a:3b:5e:90:8c:a5:a0:65:d4: 88:f1:79:d9:14:c2:ad:80:95:c2:86:0e:aa:ff:d5: 2f:75:2b:f3:d3:2e:0f:d8:55:0c:cf:9d:b6:94:16: c8:63:48:12:08:ac:78:ee:18:ca:ce:b0:0c:a8:f2: cc:95:5e:65:90:f5:9a:76:0a:3e:74:3a:d9:0c:3b: d1:d4:98:f7:9f:af:7c:99:a0:73:36:62:a5:04:d1: d6:0b:fa:5f:16:a9:f8:d1:4f:3a:a0:9f:d1:c9:12: 49:03:3f:1b:f4:a5:30:1b:5d:42:18:67:58:31:3a: c1:b4:cc:d7:75:4c:2b:9c:ed:fe:85:8f:18:2d:bd: 22:89:f7:b6:e5:6f:02:45:e0:89:03:4e:b6:bf:30: fe:82:91:9d:9e:8d:cb:f5:46:ab:7f:d5:88:cc:33: 76:a6:f6:03:ec:48:39:c7:4a:41:bc:1a:a7:49:93: cc:a0:3b:40:97:fe:d3:3c:da:a5:b6:67:d1:c7:f7: e7:ab:f5:b8:83:e2:5a:61:f3:ea:41:c6:3b:a1:b4: 4f:5e:54:36:13:0b:b8:3d:0d:e6:ca:34:51:cd:6f: f5:25:3d:e6:35:0b:55:4b:cd:14:fe:8b:a5:e1:58: 3c:27:f3:fa:03:95:14:85:0d:fe:47:e0:f8:3a:3e: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:17:78:23:63:31:F1:B6:9F:87:97:79:BD:30:8E:F2:67:33:EA:9C X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:8f:22:d5:3d:de:bc:8d:91:56:97:f6:8b:ea:35:03:0e:43: c9:df:73:a1:72:d8:2d:91:77:85:57:b4:5c:1c:35:fd:00:fc: 59:3b:19:62:cc:4d:ba:9d:79:b8:7d:f9:82:cd:c8:7e:ca:26: 9e:29:57:22:70:f0:a1:43:73:48:ad:27:dc:9d:48:61:a7:bf: cc:76:72:ba:27:2e:1f:49:1d:15:ed:82:d4:36:15:4c:2a:ca: f2:be:a0:f8:b1:40:25:b5:2e:d0:2c:1d:0c:cc:04:45:b2:39: 28:03:b3:e3:a7:7e:c8:f0:43:7c:c2:2b:8d:a3:20:60:62:ac: 6f:fc:07:20:91:6a:b9:f4:7d:89:20:07:d7:6a:04:aa:18:1f: df:c2:f7:d3:22:b1:92:83:59:90:d3:a0:88:1b:c4:6f:88:e9: 30:72:00:e8:e1:42:62:66:9c:0a:aa:b4:1f:00:86:3f:50:d3: d1:5e:32:23:52:75:f4:94:a0:c9:14:39:7a:02:d4:f5:cc:67: 63:08:c8:8e:e1:e9:57:aa:17:3b:11:86:17:7f:71:43:ea:4a: fe:cd:62:68:68:45:e0:82:b0:08:4f:9a:57:8e:00:f3:fc:67: f6:bf:59:eb:5d:af:17:37:06:9b:f2:c8:c1:bf:10:89:49:2d: b3:69:aa:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjUxMjE4MTg1NDMzWhcNMjUxMjI1MTg1NDMzWjAYMRYwFAYD VQQDDA02OTQ0NGRlOS0wZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA75ThYm06O16QjKWgZdSI8XnZFMKtgJXChg6q/9UvdSvz0y4P2FUMz522lBbI Y0gSCKx47hjKzrAMqPLMlV5lkPWadgo+dDrZDDvR1Jj3n698maBzNmKlBNHWC/pf Fqn40U86oJ/RyRJJAz8b9KUwG11CGGdYMTrBtMzXdUwrnO3+hY8YLb0iife25W8C ReCJA062vzD+gpGdno3L9Uarf9WIzDN2pvYD7Eg5x0pBvBqnSZPMoDtAl/7TPNql tmfRx/fnq/W4g+JaYfPqQcY7obRPXlQ2Ewu4PQ3myjRRzW/1JT3mNQtVS80U/oul 4Vg8J/P6A5UUhQ3+R+D4Oj5v1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkXeCNj MfG2n4eXeb0wjvJnM+qcMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqjyLVPd68jZFWl/aL6jUDDkPJ33OhctgtkXeFV7RcHDX9APxZOxli zE26nXm4ffmCzch+yiaeKVcicPChQ3NIrSfcnUhhp7/MdnK6Jy4fSR0V7YLUNhVM KsryvqD4sUAltS7QLB0MzARFsjkoA7Pjp37I8EN8wiuNoyBgYqxv/AcgkWq59H2J IAfXagSqGB/fwvfTIrGSg1mQ06CIG8RviOkwcgDo4UJiZpwKqrQfAIY/UNPRXjIj UnX0lKDJFDl6AtT1zGdjCMiO4elXqhc7EYYXf3FD6kr+zWJoaEXggrAIT5pXjgDz /Gf2v1nrXa8XNwab8sjBvxCJSS2zaaqD -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:19 2025 by rpki-client