This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json) Hash identifier: MwU77lDi409f7kSPTe4dcdalHDG/ZL8B07zlObvawHU= Subject key identifier: 67:69:BA:C7:9D:41:50:A6:D0:82:0F:19:58:98:F3:D0:63:35:71:6B Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft Manifest number: 01EE Signing time: Tue 09 Dec 2025 01:05:40 +0000 Manifest this update: Tue 09 Dec 2025 01:05:39 +0000 Manifest next update: Tue 16 Dec 2025 01:05:39 +0000 Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: 0TjtM8fzL3LwWbvOoicvOyEFFEQoV9rsO+3sGHfrzmM=) 2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: TD7salmLrRM34euIo8G4Ct9yO9PS+fagaxM6vGI2MEw=) 3: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: fSxpUr+WUEiMsQuXQ14Z3BJW2UDp3SS+KK2DrcMSuYE=) 4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: ihXElke8srSYYptYUqBX48/+59ysvth9EZ73na0o1PM=) 5: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: uvhIRu3Zl3QRrUhy2ZG8t4bZnlI9E1gwDxFwYKld2lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 01:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Dec 9 01:05:39 2025 GMT Not After : Dec 16 01:05:39 2025 GMT Subject: CN=693775e4-732e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a7:c7:0c:03:0b:37:10:83:13:aa:a0:9b:a6: a0:63:10:98:5c:22:cb:42:f4:28:49:32:8c:bc:b9: ea:34:80:6e:d1:20:e4:d5:62:9e:e4:3b:26:b4:54: fe:8a:09:80:52:3e:c5:86:34:01:e3:e0:02:a7:b8: da:bd:5e:ee:95:0f:8f:c8:c0:aa:f2:50:fd:f5:3f: 49:29:d5:3e:0c:70:13:56:2a:47:1e:06:0d:8e:51: ca:4e:f3:a8:84:2b:2c:ab:14:1a:91:76:fa:85:b2: a8:da:9e:65:0c:53:86:6d:f9:0d:82:1a:ce:61:2f: bd:fb:8c:b6:db:8a:1b:28:36:c2:2d:48:d4:0f:24: e8:0c:4c:0c:18:69:07:50:2f:10:4a:2c:ef:ac:9d: a8:ae:74:f3:69:b1:c4:12:6f:cd:fb:05:2a:8c:f2: 5e:db:f2:04:7e:9e:a3:58:c1:ee:1d:90:9e:d2:d6: c9:07:4d:85:b6:38:a5:fb:79:df:2a:15:b3:9a:b3: 6a:38:9c:9c:10:59:97:b7:1d:2c:dc:78:4c:48:58: f4:05:1b:88:52:bd:c3:ac:d2:08:80:b1:dd:d9:17: b4:f8:57:85:7d:f0:ed:c9:ca:8e:0e:82:c9:6f:3e: 10:73:2e:9e:be:03:b4:fc:98:75:2e:43:f3:9c:9e: f7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:69:BA:C7:9D:41:50:A6:D0:82:0F:19:58:98:F3:D0:63:35:71:6B X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:da:64:72:5f:80:a4:05:63:a6:55:45:d3:f6:2c:a2:c5:79: 2b:39:95:a4:90:d3:b4:30:95:11:f2:ee:3d:9c:e3:d9:a4:df: dc:39:5a:de:35:57:4b:9f:94:c2:d8:c1:6c:74:dd:e4:4b:86: 73:eb:09:93:99:9c:1e:a0:0b:3f:ca:cf:52:d5:04:d7:f3:2f: 39:94:bd:18:ab:43:8c:e4:17:00:42:82:28:60:18:2e:8c:e1: 71:7f:6e:0a:28:38:36:4d:13:b9:8f:7d:a4:63:92:6c:65:9d: 2a:8e:8e:97:83:8d:c6:da:4b:08:69:61:03:3b:f8:96:e4:e3: 42:5e:1c:11:7b:bc:76:39:86:e1:d3:0d:dd:44:89:81:b1:00: 21:6d:0b:15:af:17:3f:d8:0a:de:ab:a8:76:2d:83:32:e8:98: 10:7f:23:bf:73:b7:50:ec:4b:11:0c:ec:bd:97:08:5e:28:03: 80:73:e0:b0:26:be:70:e3:ce:a0:25:d7:49:a3:01:f6:18:67: 69:d6:c8:38:76:0f:e5:17:77:0d:35:6a:1a:67:27:d6:b8:8b: 94:29:b9:a2:4f:12:2e:57:4f:a0:33:49:12:93:3f:84:fd:88: 47:90:10:8c:32:11:99:32:7c:fb:cd:4b:7f:b4:ee:e1:ee:a3: a9:54:f3:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjUxMjA5MDEwNTM5WhcNMjUxMjE2MDEwNTM5WjAYMRYwFAYD VQQDEw02OTM3NzVlNC03MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlKfHDAMLNxCDE6qgm6agYxCYXCLLQvQoSTKMvLnqNIBu0SDk1WKe5DsmtFT+ igmAUj7FhjQB4+ACp7javV7ulQ+PyMCq8lD99T9JKdU+DHATVipHHgYNjlHKTvOo hCssqxQakXb6hbKo2p5lDFOGbfkNghrOYS+9+4y224obKDbCLUjUDyToDEwMGGkH UC8QSizvrJ2ornTzabHEEm/N+wUqjPJe2/IEfp6jWMHuHZCe0tbJB02Ftjil+3nf KhWzmrNqOJycEFmXtx0s3HhMSFj0BRuIUr3DrNIIgLHd2Re0+FeFffDtycqODoLJ bz4Qcy6evgO0/Jh1LkPznJ73mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdpused QVCm0IIPGViY89BjNXFrMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm ZC1TT0c3WGZLWktjNTllTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA22mRyX4CkBWOmVUXT9iyixXkrOZWkkNO0MJUR8u49nOPZpN/cOVre NVdLn5TC2MFsdN3kS4Zz6wmTmZweoAs/ys9S1QTX8y85lL0Yq0OM5BcAQoIoYBgu jOFxf24KKDg2TRO5j32kY5JsZZ0qjo6Xg43G2ksIaWEDO/iW5ONCXhwRe7x2OYbh 0w3dRImBsQAhbQsVrxc/2Areq6h2LYMy6JgQfyO/c7dQ7EsRDOy9lwheKAOAc+Cw Jr5w486gJddJowH2GGdp1sg4dg/lF3cNNWoaZyfWuIuUKbmiTxIuV0+gM0kSkz+E /YhHkBCMMhGZMnz7zUt/tO7h7qOpVPPM -----END CERTIFICATE-----Generated at Wed Dec 10 18:23:48 2025 by rpki-client