This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json) Hash identifier: NF2isO5G6Lh2lpVtQX56RTERWLFtBE8XBlXxZZIos8Y= Subject key identifier: D5:AD:11:74:74:8F:9D:AB:68:B7:7B:3E:A9:91:E6:0F:87:BA:32:92 Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Certificate serial: 02F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft Manifest number: 02EF Signing time: Thu 25 Dec 2025 00:20:27 +0000 Manifest this update: Thu 25 Dec 2025 00:20:27 +0000 Manifest next update: Thu 01 Jan 2026 00:20:27 +0000 Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: 9k6YtRAjYN1uvaRWWZ0TJUPbAYjb7OiYawnzwWbduQY=) 2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: Th4mKp6+0pNQJZ74KauM9+0p7vkvxGV4bsaH8ldZHTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 00:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Validity Not Before: Dec 25 00:20:27 2025 GMT Not After : Jan 1 00:20:27 2026 GMT Subject: CN=694c834b-bc42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d1:42:c5:72:a6:24:81:90:ba:14:3e:bb:23: ce:19:e2:49:a6:a1:8a:bc:7e:9b:f1:b0:b7:92:b4: 23:4d:34:b3:bf:99:5b:a0:fe:0e:f7:ec:9d:66:84: 4b:db:a4:d9:3f:f4:82:c8:ee:42:6f:4a:b7:49:e2: 57:ef:f6:85:c1:21:64:fa:62:25:4f:3e:f9:ac:a9: 9e:5e:76:b1:74:10:d4:d3:cd:fc:02:47:75:e0:a9: 88:22:e5:cc:3d:9d:73:ee:1b:bb:86:94:62:24:d9: 93:2b:4b:fa:26:8d:5f:e2:8e:cd:c6:f7:8e:6a:e2: ec:9c:3f:d8:6b:1b:fb:0d:9a:a3:23:ca:30:c8:dd: 7a:e5:f9:18:f9:07:56:71:be:f4:1f:ba:79:9a:5c: f3:fc:c6:63:fa:71:05:c2:06:d1:30:f7:7f:ef:5f: 38:64:33:65:de:87:0c:fc:3e:43:b2:24:4f:d2:59: 25:89:22:9c:10:2d:ed:68:33:b7:09:3b:6c:e8:63: 9f:79:5b:91:5e:3c:42:64:68:2f:94:54:a9:75:0b: 34:7d:19:5d:40:5d:45:87:12:b8:53:18:ae:57:ba: 6b:cd:10:89:3c:3e:bd:b9:87:52:bd:49:4b:a6:17: aa:a3:d0:ef:e4:11:54:07:cb:50:06:64:33:60:a8: df:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AD:11:74:74:8F:9D:AB:68:B7:7B:3E:A9:91:E6:0F:87:BA:32:92 X509v3 Authority Key Identifier: keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:98:a2:35:12:38:04:14:d5:b6:40:c5:2b:6a:58:77:d2:98: cb:32:f1:8f:43:40:f7:49:43:95:fd:f1:dc:45:c8:c4:83:92: 2b:5b:0f:bd:bd:31:0c:5e:14:0c:2f:ff:cc:85:3a:cc:fa:59: 7c:40:71:b5:c4:f4:ba:ae:db:53:9c:61:39:ed:9f:0e:c9:5a: 43:6f:a2:bc:6b:b9:11:5a:4e:fd:6f:e9:59:c2:7d:40:ba:bf: 7e:03:9b:0e:2a:50:6c:59:39:44:49:6e:dc:f1:e6:31:b0:14: dc:8d:24:77:7d:56:81:b3:73:18:22:03:cd:d5:30:73:35:30: 0f:a9:d7:45:6d:b1:97:df:0c:72:47:e1:a7:d7:94:fe:89:01: 20:c5:38:39:3a:d3:a7:f5:f5:8f:ff:cf:97:4f:1b:6c:9b:b7: 39:14:a3:1b:63:f9:5e:ea:af:45:82:81:0a:33:69:3a:36:e1: 8f:f1:6a:03:7f:4d:fd:12:e0:d8:fb:6d:ad:ea:82:4d:ec:22: 37:88:d0:63:10:af:f8:6d:b0:f3:11:be:3a:1f:9c:b2:fe:75: 07:bc:01:43:2f:dc:68:60:fc:22:64:29:0e:dd:9d:bb:2d:41: e4:30:2e:e4:3b:48:db:43:96:8d:40:0d:87:a8:76:5a:cd:c7: a5:a4:63:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw NzM4QUVGQkIwHhcNMjUxMjI1MDAyMDI3WhcNMjYwMTAxMDAyMDI3WjAYMRYwFAYD VQQDDA02OTRjODM0Yi1iYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdFCxXKmJIGQuhQ+uyPOGeJJpqGKvH6b8bC3krQjTTSzv5lboP4O9+ydZoRL 26TZP/SCyO5Cb0q3SeJX7/aFwSFk+mIlTz75rKmeXnaxdBDU0838Akd14KmIIuXM PZ1z7hu7hpRiJNmTK0v6Jo1f4o7NxveOauLsnD/Yaxv7DZqjI8owyN165fkY+QdW cb70H7p5mlzz/MZj+nEFwgbRMPd/7184ZDNl3ocM/D5DsiRP0lkliSKcEC3taDO3 CTts6GOfeVuRXjxCZGgvlFSpdQs0fRldQF1FhxK4UxiuV7przRCJPD69uYdSvUlL pheqo9Dv5BFUB8tQBmQzYKjfqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWtEXR0 j52raLd7PqmR5g+HujKSMB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4 OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr dVpndEd5WGVzTVlIT0s3N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdmKI1EjgEFNW2QMUralh30pjLMvGPQ0D3SUOV/fHcRcjEg5IrWw+9 vTEMXhQML//MhTrM+ll8QHG1xPS6rttTnGE57Z8OyVpDb6K8a7kRWk79b+lZwn1A ur9+A5sOKlBsWTlESW7c8eYxsBTcjSR3fVaBs3MYIgPN1TBzNTAPqddFbbGX3wxy R+Gn15T+iQEgxTg5OtOn9fWP/8+XTxtsm7c5FKMbY/le6q9FgoEKM2k6NuGP8WoD f039EuDY+22t6oJN7CI3iNBjEK/4bbDzEb46H5yy/nUHvAFDL9xoYPwiZCkO3Z27 LUHkMC7kO0jbQ5aNQA2HqHZazcelpGM6 -----END CERTIFICATE-----Generated at Thu Dec 25 21:10:14 2025 by rpki-client