This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: fOim1d8GezASrceCezVWcxAWqV6N19au6weTNO32szk= Subject key identifier: A9:E2:FB:42:D7:3D:81:B7:AC:51:CD:41:57:71:8A:E1:31:CE:1E:7B Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 05B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0598 Signing time: Mon 08 Dec 2025 21:53:48 +0000 Manifest this update: Mon 08 Dec 2025 21:53:48 +0000 Manifest next update: Mon 15 Dec 2025 21:53:48 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: mo+TRWB7hM4oU6HKlWbArQURloiwasIOHPH0ZfTmzAg=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 2jt6Xm58KXfWaDCwoL1QNNF6hftEV3g4TXU+Cro75w8=) 3: EDC6896617B611F08E260814C4F9AE02.roa (hash: bppqSZ8PSCotLg3otrjVRqyexBIsOl6v9mc32VyO/nY=) 4: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: osBPg0SLfRG0eb1YC88FnRgXyZmnCWV1UAz6jQOFPa8=) 5: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: mLHQ8FPso+ZmAaHO2o/MCAMgyAvNWTYy5WsKEiwbpt0=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: tUYKyj51w8FY5qrfQOEMkIv2L7xe24UEi8KjbC1Ydgg=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: Px42Wf8a/plz9LcLndqURmspCg6cQtfr3BUR2GqJiJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 21:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1464 (0x5b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Dec 8 21:53:48 2025 GMT Not After : Dec 15 21:53:48 2025 GMT Subject: CN=693748ec-cf8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:f4:1d:4f:86:20:0e:57:f0:d0:9c:6f:00: 33:c3:36:e2:17:ce:f6:22:ea:19:59:c4:d5:1d:fa: 51:5a:17:e5:ef:b0:38:94:5f:a0:ae:f9:92:c0:fb: 35:ad:61:d8:4c:c6:48:a3:e7:a6:84:70:07:37:84: c7:a8:1b:e2:2f:5e:f3:6b:50:d0:74:b7:22:58:53: dd:ee:c9:58:20:f1:8f:aa:5c:7f:cb:77:5d:80:06: 2a:39:e3:52:d5:6d:00:4d:b6:23:3b:20:0e:6a:cd: d8:19:e1:6e:d7:5a:b7:75:22:3d:87:64:04:f9:d8: 82:2b:57:49:24:35:62:65:72:f0:64:48:7f:c3:6c: c2:cc:16:b6:0f:62:f1:9b:80:dd:51:bd:1d:04:5b: 86:4a:10:5d:0b:64:23:e6:2a:97:e6:39:bb:49:80: d7:a0:ee:24:d3:18:45:54:65:ac:be:a5:17:2f:d6: 58:ad:63:27:dd:b2:e9:46:72:dd:06:f9:22:de:2c: ad:5e:0a:28:66:c0:cd:9e:c7:23:98:3d:4e:9d:a7: 81:65:99:19:73:64:40:58:ee:63:c3:96:5a:35:22: 6a:bf:ea:69:01:45:c2:a0:90:e6:ec:5b:78:e4:40: 97:76:69:f2:6d:8d:f8:6c:17:ad:d0:cf:8a:25:ec: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E2:FB:42:D7:3D:81:B7:AC:51:CD:41:57:71:8A:E1:31:CE:1E:7B X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d6:cd:fa:cd:16:c1:a2:02:46:d9:fa:bb:4f:4b:9f:67:93: a0:02:6d:05:6b:9b:24:2d:04:23:85:fa:8d:9c:26:d3:c0:b1: fc:bf:6d:11:d9:c8:c6:b2:42:87:82:90:f0:af:32:5c:2b:1e: 35:c5:cd:f8:01:43:a7:5a:1d:d6:71:d3:2d:6b:22:57:88:ab: 72:a8:9d:17:16:f1:e0:b7:ef:8d:e9:41:48:aa:fa:2e:18:af: db:d4:b2:15:c1:80:95:c2:7c:4e:d6:be:60:58:6c:f5:33:bb: 90:a4:e7:75:19:0c:02:5e:33:26:d8:98:5a:a5:09:70:66:cf: ed:7c:ec:1e:0c:0e:a9:ec:c2:a8:17:b7:6c:fe:38:d1:31:20: 7c:b4:f2:d4:ba:98:ba:cd:29:08:22:a2:f3:c0:59:69:c9:df: 4f:54:e0:f9:ed:e2:13:7b:32:c9:cf:dc:32:5a:2d:42:d5:33: 4e:3e:11:f1:aa:a9:ab:9f:98:b2:0d:c3:ae:28:11:26:63:68: 9f:36:59:24:76:ce:76:1c:1e:3c:cc:7a:21:4f:1e:ff:dc:bd: 55:b9:b5:98:4c:27:4d:e0:c0:a1:42:d7:bc:b5:3f:fb:e9:a7: 54:16:01:55:ae:e8:fa:61:3f:82:f1:13:a1:88:3b:3e:ae:33: 0c:e3:2a:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUxMjA4MjE1MzQ4WhcNMjUxMjE1MjE1MzQ4WjAYMRYwFAYD VQQDEw02OTM3NDhlYy1jZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwL0HU+GIA5X8NCcbwAzwzbiF872IuoZWcTVHfpRWhfl77A4lF+grvmSwPs1 rWHYTMZIo+emhHAHN4THqBviL17za1DQdLciWFPd7slYIPGPqlx/y3ddgAYqOeNS 1W0ATbYjOyAOas3YGeFu11q3dSI9h2QE+diCK1dJJDViZXLwZEh/w2zCzBa2D2Lx m4DdUb0dBFuGShBdC2Qj5iqX5jm7SYDXoO4k0xhFVGWsvqUXL9ZYrWMn3bLpRnLd Bvki3iytXgooZsDNnscjmD1OnaeBZZkZc2RAWO5jw5ZaNSJqv+ppAUXCoJDm7Ft4 5ECXdmnybY34bBet0M+KJezYlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKni+0LX PYG3rFHNQVdxiuExzh57MB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb1s36zRbBogJG2fq7T0ufZ5OgAm0Fa5skLQQjhfqNnCbTwLH8v20R 2cjGskKHgpDwrzJcKx41xc34AUOnWh3WcdMtayJXiKtyqJ0XFvHgt++N6UFIqvou GK/b1LIVwYCVwnxO1r5gWGz1M7uQpOd1GQwCXjMm2JhapQlwZs/tfOweDA6p7MKo F7ds/jjRMSB8tPLUupi6zSkIIqLzwFlpyd9PVOD57eITezLJz9wyWi1C1TNOPhHx qqmrn5iyDcOuKBEmY2ifNlkkds52HB48zHohTx7/3L1VubWYTCdN4MChQte8tT/7 6adUFgFVruj6YT+C8ROhiDs+rjMM4yqP -----END CERTIFICATE-----Generated at Wed Dec 10 07:57:17 2025 by rpki-client