This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: 0Y5D+nZbxj/umWaJaGR/IykbioeTVp3b9XevQC+wrZ4= Subject key identifier: 52:25:D7:51:CD:F1:29:4B:1F:42:0D:A7:FB:A5:7B:A2:F7:18:B7:62 Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 01C2 Signing time: Sun 07 Dec 2025 01:26:48 +0000 Manifest this update: Sun 07 Dec 2025 01:26:48 +0000 Manifest next update: Sun 14 Dec 2025 01:26:48 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: WYQT+yeuWtB+uaj3B7Tv/wiYzDR6aQebY6NtVLNA7mw=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: iHabIHEz/PTHKVI4qhPpj+ZDCYtCE+FTF89syGeIFww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Dec 7 01:26:48 2025 GMT Not After : Dec 14 01:26:48 2025 GMT Subject: CN=6934d7d8-daf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:44:7a:39:18:0d:2e:41:d7:c9:df:94:58:9f: 52:c7:44:33:c2:0a:12:b3:21:8d:ad:41:ab:20:da: 3d:90:27:39:62:5d:0a:3d:2d:93:45:55:51:a0:e4: 40:c5:4c:cd:4f:49:6f:16:09:1a:95:06:94:dc:36: 32:91:cc:fe:e3:44:97:53:4d:7f:a5:b7:ba:19:3d: 97:81:c5:a8:c4:d4:66:60:f2:8c:dd:6d:e9:2b:f5: 91:ea:5e:50:9f:b6:c2:e1:4e:b8:0d:7d:a4:82:6a: 6a:85:22:d4:c0:bd:9f:63:be:5b:1f:b3:9c:56:32: 3a:da:f8:dc:a1:3a:a8:3e:ab:1e:80:98:7e:3c:25: a3:6d:a6:22:37:bf:99:f7:ad:8e:af:2e:62:31:09: 98:bd:be:41:de:bd:29:de:75:3a:e6:8d:de:56:1f: 60:d2:c2:fa:77:7a:d8:9d:1a:34:6c:2f:9b:1c:71: 87:9c:b4:f6:30:1f:66:18:4b:1a:a8:b5:06:af:3b: 89:8d:0d:4e:04:0c:88:aa:13:e4:6e:42:31:b0:1f: 68:cd:cc:ce:f3:d5:12:e9:c8:99:87:e9:2c:04:72: f9:c8:77:8c:b8:6e:40:8c:c8:25:63:4f:f3:fc:2b: 3a:86:ed:57:a6:5e:2f:f5:8d:17:82:e4:24:c4:5a: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:25:D7:51:CD:F1:29:4B:1F:42:0D:A7:FB:A5:7B:A2:F7:18:B7:62 X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:96:e1:bb:df:ce:20:b9:88:19:5a:0e:ff:9b:e4:31:37:66: f9:4b:d3:7d:37:79:59:f7:4c:c6:27:71:6f:62:5d:71:e2:f8: 7c:b5:8c:81:97:52:c3:de:7f:20:aa:a1:a4:be:0b:60:0e:b5: 49:e7:b6:c9:e2:8f:b6:5b:fa:6c:b3:6d:68:2c:a1:5c:80:06: de:ba:eb:8a:31:0f:ae:fc:1a:69:1a:dd:87:8a:a6:5b:f4:8c: 56:5f:49:0d:63:61:f6:f9:5b:e3:d7:9b:72:6a:41:51:61:79: 90:19:0e:73:e8:95:06:77:6f:96:9b:b9:ac:e0:f1:bf:a8:a1: df:5b:05:d0:8f:2e:b9:95:c8:a7:94:88:ff:79:c7:f6:41:a6: da:1a:f1:94:95:29:3a:11:50:de:4d:48:31:0a:c9:92:a6:42: 1d:c3:02:51:dc:12:9a:9a:48:c9:da:97:cd:d6:32:63:18:5b: de:96:03:aa:bb:c4:c2:54:b7:28:58:e7:95:1b:d6:ba:78:1c: ec:c6:c8:aa:c4:1a:a1:8c:54:f2:9b:37:e3:30:ed:b2:67:fd: e9:50:5d:ce:19:35:46:43:03:92:90:af:0a:1e:b7:78:9e:47: 45:f7:11:47:55:7d:c8:a9:f2:5d:77:1c:4d:47:48:58:2e:07: c1:36:cc:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjUxMjA3MDEyNjQ4WhcNMjUxMjE0MDEyNjQ4WjAYMRYwFAYD VQQDEw02OTM0ZDdkOC1kYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UR6ORgNLkHXyd+UWJ9Sx0QzwgoSsyGNrUGrINo9kCc5Yl0KPS2TRVVRoORA xUzNT0lvFgkalQaU3DYykcz+40SXU01/pbe6GT2XgcWoxNRmYPKM3W3pK/WR6l5Q n7bC4U64DX2kgmpqhSLUwL2fY75bH7OcVjI62vjcoTqoPqsegJh+PCWjbaYiN7+Z 962Ory5iMQmYvb5B3r0p3nU65o3eVh9g0sL6d3rYnRo0bC+bHHGHnLT2MB9mGEsa qLUGrzuJjQ1OBAyIqhPkbkIxsB9ozczO89US6ciZh+ksBHL5yHeMuG5AjMglY0/z /Cs6hu1Xpl4v9Y0XguQkxFrMqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIl11HN 8SlLH0INp/ule6L3GLdiMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVluG7384guYgZWg7/m+QxN2b5S9N9N3lZ90zGJ3FvYl1x4vh8tYyB l1LD3n8gqqGkvgtgDrVJ57bJ4o+2W/pss21oLKFcgAbeuuuKMQ+u/BppGt2HiqZb 9IxWX0kNY2H2+Vvj15tyakFRYXmQGQ5z6JUGd2+Wm7ms4PG/qKHfWwXQjy65lcin lIj/ecf2QabaGvGUlSk6EVDeTUgxCsmSpkIdwwJR3BKamkjJ2pfN1jJjGFvelgOq u8TCVLcoWOeVG9a6eBzsxsiqxBqhjFTymzfjMO2yZ/3pUF3OGTVGQwOSkK8KHrd4 nkdF9xFHVX3IqfJddxxNR0hYLgfBNsxo -----END CERTIFICATE-----Generated at Mon Dec 8 06:19:25 2025 by rpki-client