This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json) Hash identifier: st2XK7//a8GSsuZZ8xUXOjyzkX7CJmaYI7H+NEFNC3U= Subject key identifier: E7:D5:79:43:8D:ED:E7:FE:3D:30:5D:E1:7D:90:F9:CF:85:BB:91:8E Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft Manifest number: 0519 Signing time: Thu 18 Dec 2025 22:55:34 +0000 Manifest this update: Thu 18 Dec 2025 22:55:34 +0000 Manifest next update: Thu 25 Dec 2025 22:55:34 +0000 Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: CXuqh1jxWbvs59W6EUFQee14a9uAj95haVRk60027GI=) 2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: prBekR9LUayidaAK9GSYWyVHKMLahKIDTDQ64hhVlAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Validity Not Before: Dec 18 22:55:34 2025 GMT Not After : Dec 25 22:55:34 2025 GMT Subject: CN=69448666-0678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:f7:9f:29:33:74:ee:cc:7a:42:88:72:0b: ad:03:f6:d6:73:67:b2:53:36:ac:ec:07:6b:14:83: c1:bc:d2:82:d8:ff:f6:32:2d:20:ea:e3:f0:11:87: 27:05:b9:3f:b6:a5:c2:3a:76:6f:8b:5c:ef:8f:fe: 1c:88:e1:ad:19:d3:dd:75:b2:7d:c1:fb:87:77:af: 01:5b:17:2b:72:4a:9e:91:2e:6f:1a:41:68:5a:55: da:31:37:6d:c1:aa:ac:c4:6f:d5:2e:89:05:9b:d4: 2b:cf:2c:fd:7c:e0:b9:b6:00:cc:b5:11:9e:18:17: 4c:c1:ef:36:f4:ae:6c:b8:98:c1:4f:9b:3f:ce:58: f0:20:c5:e1:c1:98:9e:79:af:9c:a8:2d:60:4b:27: bd:bc:48:17:13:78:52:58:0a:8e:de:d7:63:86:b6: 2d:92:a4:89:19:19:62:86:df:07:90:a8:8f:a0:9a: 6e:0c:c4:06:e3:89:ec:d8:25:fd:ee:38:cf:b5:19: 93:58:ae:53:f9:b1:67:97:f8:cd:39:cd:91:a8:93: f2:79:f7:ff:3e:36:fe:1d:b1:78:5c:b0:eb:d9:7f: 17:bc:a4:f1:c8:c4:80:dd:f8:0b:4f:72:3d:d9:ce: 2b:fb:cf:bb:a5:f0:e8:2e:31:36:cc:ef:a6:f1:32: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D5:79:43:8D:ED:E7:FE:3D:30:5D:E1:7D:90:F9:CF:85:BB:91:8E X509v3 Authority Key Identifier: keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a3:12:8f:ba:e8:e1:c8:74:f0:94:f8:6e:56:cc:da:aa:9a: c3:72:7d:d9:e7:f6:e5:a4:21:b9:1a:b4:52:3d:f9:08:5f:c7: 6b:4f:c5:81:bc:ff:53:33:1f:c8:9e:4a:a6:83:19:cc:13:c7: 93:63:68:46:c8:fb:de:01:1e:1e:6b:ed:ee:24:57:1d:9f:ac: 90:91:9f:d7:6c:51:73:74:64:c2:94:74:9e:54:3c:e3:d3:d5: 24:50:9f:23:00:75:4b:be:af:2e:94:78:4b:76:7f:cd:b4:48: 93:b9:3a:ae:c9:fa:56:14:eb:a3:14:72:28:dd:5c:88:5d:69: 2c:54:44:ea:7e:5f:1a:e9:f4:c4:ad:00:b3:1e:d4:a9:75:6e: 79:1e:56:29:fc:54:d5:c1:f0:c5:13:f8:19:7e:fa:3d:74:96: 8a:1f:a3:d5:ef:c2:8c:28:df:98:dd:8f:39:02:63:a9:94:39: d0:6d:fb:3f:ab:54:eb:f3:a7:6d:0a:3c:14:ea:e5:67:d1:5e: 64:a2:c8:17:ef:da:57:da:f3:d8:77:f8:e4:4c:22:47:81:14: ea:3c:58:08:0b:27:63:cd:79:8f:60:24:c9:50:5b:47:23:fd: ae:76:a3:2b:df:08:29:e1:63:a4:22:a3:09:aa:40:87:d9:33: 07:e2:30:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREQxMTAvBgNVBAUTKDE1RDYwRDYwRDZBNEY1MDA5MTA5OUE3MkUwRDA1RUVG M0VBRjc2RTkwHhcNMjUxMjE4MjI1NTM0WhcNMjUxMjI1MjI1NTM0WjAYMRYwFAYD VQQDDA02OTQ0ODY2Ni0wNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0b3nykzdO7MekKIcgutA/bWc2eyUzas7AdrFIPBvNKC2P/2Mi0g6uPwEYcn Bbk/tqXCOnZvi1zvj/4ciOGtGdPddbJ9wfuHd68BWxcrckqekS5vGkFoWlXaMTdt waqsxG/VLokFm9Qrzyz9fOC5tgDMtRGeGBdMwe829K5suJjBT5s/zljwIMXhwZie ea+cqC1gSye9vEgXE3hSWAqO3tdjhrYtkqSJGRliht8HkKiPoJpuDMQG44ns2CX9 7jjPtRmTWK5T+bFnl/jNOc2RqJPyeff/Pjb+HbF4XLDr2X8XvKTxyMSA3fgLT3I9 2c4r+8+7pfDoLjE2zO+m8TL4/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfVeUON 7ef+PTBd4X2Q+c+Fu5GOMB8GA1UdIwQYMBaAFBXWDWDWpPUAkQmacuDQXu8+r3bp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFERC83Qzc4RTJCQzMw OTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlRQ1JDWnB5NE5CZTd6NnZk dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkWU5ZTmFrOVFDUkNacHk0TkJlN3o2dmR1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFERC83Qzc4RTJCQzMwOTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlR Q1JDWnB5NE5CZTd6NnZkdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBoxKPuujhyHTwlPhuVszaqprDcn3Z5/blpCG5GrRSPfkIX8drT8WB vP9TMx/InkqmgxnME8eTY2hGyPveAR4ea+3uJFcdn6yQkZ/XbFFzdGTClHSeVDzj 09UkUJ8jAHVLvq8ulHhLdn/NtEiTuTquyfpWFOujFHIo3VyIXWksVETqfl8a6fTE rQCzHtSpdW55HlYp/FTVwfDFE/gZfvo9dJaKH6PV78KMKN+Y3Y85AmOplDnQbfs/ q1Tr86dtCjwU6uVn0V5kosgX79pX2vPYd/jkTCJHgRTqPFgICydjzXmPYCTJUFtH I/2udqMr3wgp4WOkIqMJqkCH2TMH4jC0 -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:38 2025 by rpki-client