This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json) Hash identifier: Xf+3KDOjpzDF1UgHQ/zJPa01GVweVcwZR5+T8XcuOew= Subject key identifier: 45:99:C3:B8:DE:5C:AE:0E:2F:95:01:BB:3C:D0:84:7A:D3:53:0A:DF Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Certificate serial: 02F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft Manifest number: 02F1 Signing time: Mon 29 Dec 2025 00:18:45 +0000 Manifest this update: Mon 29 Dec 2025 00:18:45 +0000 Manifest next update: Mon 05 Jan 2026 00:18:45 +0000 Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: SCWLM6t6NeseUfkn/juOt8Jin0nURZwurgal0UkbFC4=) 2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: Th4mKp6+0pNQJZ74KauM9+0p7vkvxGV4bsaH8ldZHTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 00:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 757 (0x2f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Validity Not Before: Dec 29 00:18:45 2025 GMT Not After : Jan 5 00:18:45 2026 GMT Subject: CN=6951c8e5-ac42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:55:13:ab:50:c5:79:2b:4c:3c:7f:2c:e9: 5f:7b:41:75:13:df:53:78:12:f7:0d:b5:e8:c8:3e: 7d:93:c7:0d:8e:6f:e8:23:4e:85:c5:56:5e:33:cf: 8f:fb:04:f7:3c:b6:f5:a8:b7:37:6a:c3:63:1e:76: a9:3c:ec:ef:09:9c:7e:c6:cf:76:73:98:08:b9:16: 1b:ac:43:19:06:36:a8:3e:69:d0:4e:b2:94:52:7a: 90:ae:09:ea:e6:51:91:bb:3f:bd:18:cc:db:f8:44: da:a6:59:94:1c:75:29:ab:51:35:f5:6b:2e:35:bc: 8a:ac:26:10:88:62:70:00:d2:c9:71:65:74:1c:d4: 8b:28:55:9f:63:2f:e6:e7:72:ae:9f:ac:bf:db:26: c3:a6:3c:1a:9d:e4:58:aa:4c:1d:13:5b:95:72:40: 31:fb:3f:3b:e2:6f:13:26:40:09:d1:de:e7:58:26: 08:9f:8f:9a:0d:af:bd:9d:9f:7a:fb:d2:d0:3e:06: c4:63:d2:bf:f8:f6:07:f5:73:1b:ae:20:27:ca:a7: 5e:bd:2d:4f:24:d8:ba:a9:78:f2:8b:6c:e2:5d:e7: c7:25:c1:02:e6:6e:0b:17:2d:9d:b5:57:e0:5e:12: 76:19:d5:84:2d:16:e9:36:f2:98:e5:a6:29:33:1f: b9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:99:C3:B8:DE:5C:AE:0E:2F:95:01:BB:3C:D0:84:7A:D3:53:0A:DF X509v3 Authority Key Identifier: keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:41:7f:76:13:4a:e5:35:b7:86:69:69:c9:cb:d3:f9:67:bd: 5f:51:8d:d7:49:68:02:f9:95:d3:e6:5b:82:95:57:86:d7:bd: c8:26:de:0f:32:5e:3e:37:d3:3b:f7:a7:48:7e:ec:4f:9d:c1: c1:20:49:b0:71:8a:04:17:66:06:30:70:27:99:b3:fd:de:46: a5:39:16:8a:e4:ce:c6:c6:82:1e:41:a4:03:f9:ce:22:1f:e1: df:70:8b:c3:c6:33:52:04:ce:bc:e4:5c:41:27:1f:91:6c:b5: ca:e0:ac:62:d8:ab:f9:c6:f0:9d:a6:ce:57:06:a9:1e:40:af: 67:d5:54:cf:25:79:05:a4:cd:87:b1:24:25:89:e2:bc:4d:55: 2f:e7:44:f8:3d:1e:74:8a:7c:cd:0c:95:5f:b8:86:ca:c8:26: 2c:32:4e:96:51:1f:92:58:dc:36:53:7f:2c:a3:6c:d1:c8:de: c5:b9:1c:e2:94:89:24:7a:8e:0a:c3:99:c1:f2:01:3a:ca:5b: 60:d5:8d:f5:f0:35:69:28:ad:2d:d6:c2:78:a3:a9:35:27:1a: 70:53:69:73:c2:60:03:d3:3d:a1:86:1e:91:6c:db:62:8b:c9: 89:3f:8f:11:5e:ff:3e:2b:b3:08:03:f7:70:77:09:01:f1:b3: 7e:a0:60:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw NzM4QUVGQkIwHhcNMjUxMjI5MDAxODQ1WhcNMjYwMTA1MDAxODQ1WjAYMRYwFAYD VQQDDA02OTUxYzhlNS1hYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh5VE6tQxXkrTDx/LOlfe0F1E99TeBL3DbXoyD59k8cNjm/oI06FxVZeM8+P +wT3PLb1qLc3asNjHnapPOzvCZx+xs92c5gIuRYbrEMZBjaoPmnQTrKUUnqQrgnq 5lGRuz+9GMzb+ETaplmUHHUpq1E19WsuNbyKrCYQiGJwANLJcWV0HNSLKFWfYy/m 53Kun6y/2ybDpjwaneRYqkwdE1uVckAx+z874m8TJkAJ0d7nWCYIn4+aDa+9nZ96 +9LQPgbEY9K/+PYH9XMbriAnyqdevS1PJNi6qXjyi2ziXefHJcEC5m4LFy2dtVfg XhJ2GdWELRbpNvKY5aYpMx+5lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWZw7je XK4OL5UBuzzQhHrTUwrfMB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4 OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr dVpndEd5WGVzTVlIT0s3N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJQX92E0rlNbeGaWnJy9P5Z71fUY3XSWgC+ZXT5luClVeG173IJt4P Ml4+N9M796dIfuxPncHBIEmwcYoEF2YGMHAnmbP93kalORaK5M7GxoIeQaQD+c4i H+HfcIvDxjNSBM685FxBJx+RbLXK4Kxi2Kv5xvCdps5XBqkeQK9n1VTPJXkFpM2H sSQlieK8TVUv50T4PR50inzNDJVfuIbKyCYsMk6WUR+SWNw2U38so2zRyN7FuRzi lIkkeo4Kw5nB8gE6yltg1Y318DVpKK0t1sJ4o6k1JxpwU2lzwmAD0z2hhh6RbNti i8mJP48RXv8+K7MIA/dwdwkB8bN+oGCK -----END CERTIFICATE-----Generated at Tue Dec 30 14:57:14 2025 by rpki-client