This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft File: rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json) Hash identifier: PAeqak/pUo+lLeqh0yNsSXRzw7nbuyvpLYTgSpyOXto= Subject key identifier: C4:BF:8C:B2:22:C6:2C:8B:DA:04:72:96:35:E0:9E:D3:24:DB:DA:E9 Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Certificate serial: 02EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft Manifest number: 02EA Signing time: Tue 23 Dec 2025 00:16:26 +0000 Manifest this update: Tue 23 Dec 2025 00:16:25 +0000 Manifest next update: Tue 30 Dec 2025 00:16:25 +0000 Files and hashes: 1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: Ep4t2pwuUosb/5Vz2DuanXgHqbEx2Fg/R8T3YLqqo90=) 2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: XQQlM6hNFAUKcUE8JK0r1I7v7DiMWYg0+Wov0CdSVM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Validity Not Before: Dec 23 00:16:25 2025 GMT Not After : Dec 30 00:16:25 2025 GMT Subject: CN=6949df5a-1dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:b5:fd:a5:2e:db:2b:88:7f:09:8b:73:cd: cc:2c:0c:44:b4:40:a0:15:e5:a4:35:6e:aa:d7:30: 60:dd:b2:b2:e6:68:12:71:fb:cf:fb:1d:22:8b:3c: b3:c6:e0:0d:9d:c9:69:18:56:0f:d2:34:11:63:27: fc:05:04:09:25:76:f1:25:49:24:cf:71:d3:0c:f5: 74:ea:76:27:7c:da:5c:f4:75:8b:c1:68:c9:8f:cd: ac:e2:fd:1b:1e:27:e2:27:57:e0:51:55:a3:a6:9c: 21:35:8a:af:e3:df:83:f3:17:72:fd:bd:f7:9d:32: 2a:cb:d2:89:56:b3:2c:be:d3:9f:7a:98:64:46:93: 4c:82:01:9b:60:de:91:2e:54:44:cc:21:c0:24:a3: 5d:68:ec:46:f8:cf:ba:e2:4c:86:17:36:f6:34:51: 95:76:09:aa:1f:d9:2a:a9:63:6d:b8:6d:31:6c:1a: d4:d6:3b:cf:e2:34:35:1b:31:87:03:26:d4:e1:76: 02:6b:fe:46:7a:21:e9:b1:3c:d7:1b:65:b7:2f:52: 0c:20:26:ec:34:a7:5b:b8:3d:2d:aa:bd:70:df:e2: ce:cc:c2:58:c9:2f:ac:ae:cd:41:d6:3b:45:be:b4: 3a:20:fe:4d:30:05:7f:6d:36:95:32:5c:73:4b:db: 4e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BF:8C:B2:22:C6:2C:8B:DA:04:72:96:35:E0:9E:D3:24:DB:DA:E9 X509v3 Authority Key Identifier: keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d0:ed:a8:48:9d:6f:08:28:45:02:43:cc:fa:aa:7b:34:57: a2:fa:77:74:5d:c4:66:6a:d2:af:ef:15:6c:f1:ae:a4:77:f6: 56:e9:e3:f3:6e:7e:ef:26:82:08:76:7b:78:c8:d9:fb:90:8b: 69:b5:24:ce:69:68:2b:64:7b:b9:63:d8:89:53:05:04:08:9f: 1c:50:e6:11:de:47:49:cc:dd:cb:a5:e4:14:84:37:a0:81:ff: 81:0a:fb:4b:39:ac:8f:66:06:43:87:5f:98:7a:4b:4f:c4:f9: 74:72:31:96:5f:8c:05:9e:9d:02:f3:68:ab:86:cc:5d:06:4d: 08:1a:7e:81:c5:5c:f6:8c:4c:47:6f:03:39:a3:f5:50:f9:93: 19:5b:15:6f:02:3c:40:2c:b2:50:32:2e:d4:33:78:9c:d7:91: bc:7d:7a:9d:61:c4:cc:2f:44:c1:42:47:fc:52:99:c2:71:84: 21:0d:b4:31:bb:d2:6f:78:a2:bd:c9:e0:72:e5:6b:4c:7a:8a: 90:59:db:e1:27:0d:e2:05:24:f1:d7:8c:b4:df:2d:d6:e9:51: a4:c2:12:9c:5c:d8:f9:21:79:4c:eb:b5:9b:ad:5d:96:e1:33: 09:4b:6a:f4:f9:ed:8f:9b:51:31:4d:1b:53:d9:66:e2:ac:c9: 1d:0a:e2:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1ODYxMTAvBgNVBAUTKEFDMjNGNTREMzAxNTBCNDYwMDlDMUEwMjlFNUVFQ0RC NkUwNTU2NTYwHhcNMjUxMjIzMDAxNjI1WhcNMjUxMjMwMDAxNjI1WjAYMRYwFAYD VQQDDA02OTQ5ZGY1YS0xZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6h21/aUu2yuIfwmLc83MLAxEtECgFeWkNW6q1zBg3bKy5mgScfvP+x0iizyz xuANnclpGFYP0jQRYyf8BQQJJXbxJUkkz3HTDPV06nYnfNpc9HWLwWjJj82s4v0b HifiJ1fgUVWjppwhNYqv49+D8xdy/b33nTIqy9KJVrMsvtOfephkRpNMggGbYN6R LlREzCHAJKNdaOxG+M+64kyGFzb2NFGVdgmqH9kqqWNtuG0xbBrU1jvP4jQ1GzGH AybU4XYCa/5GeiHpsTzXG2W3L1IMICbsNKdbuD0tqr1w3+LOzMJYyS+srs1B1jtF vrQ6IP5NMAV/bTaVMlxzS9tOXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS/jLIi xiyL2gRyljXgntMk29rpMB8GA1UdIwQYMBaAFKwj9U0wFQtGAJwaAp5e7NtuBVZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTU4Ni8wRDYxOTE2ODA5 OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMwWUFuQm9Dbmw3czIyNEZW bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDUDFUVEFWQzBZQW5Cb0NubDdzMjI0RlZsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTU4Ni8wRDYxOTE2ODA5OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMw WUFuQm9Dbmw3czIyNEZWbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy0O2oSJ1vCChFAkPM+qp7NFei+nd0XcRmatKv7xVs8a6kd/ZW6ePz bn7vJoIIdnt4yNn7kItptSTOaWgrZHu5Y9iJUwUECJ8cUOYR3kdJzN3LpeQUhDeg gf+BCvtLOayPZgZDh1+YektPxPl0cjGWX4wFnp0C82irhsxdBk0IGn6BxVz2jExH bwM5o/VQ+ZMZWxVvAjxALLJQMi7UM3ic15G8fXqdYcTML0TBQkf8UpnCcYQhDbQx u9JveKK9yeBy5WtMeoqQWdvhJw3iBSTx14y03y3W6VGkwhKcXNj5IXlM67WbrV2W 4TMJS2r0+e2Pm1ExTRtT2WbirMkdCuKE -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:00 2025 by rpki-client