This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier: UdjCj/qI0lTi0nxSwqJgrnopYDgpzqOCQQHuXwm+yaw=
Subject key identifier: D5:0A:E7:08:6C:53:F0:FA:0A:50:F1:00:13:2B:F6:91:10:51:70:22
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial: 1C5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number: 1C3A
Signing time: Sun 14 Dec 2025 16:05:48 +0000
Manifest this update: Sun 14 Dec 2025 16:05:47 +0000
Manifest next update: Sun 21 Dec 2025 16:05:47 +0000
Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: cO7+LVeN3OBuwgDhuULliXXbKu951WNZQyH6YgjxAvs=)
2: A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (hash: Lvu6iSz0EDxGsSvl67CYssjZj8LfNsaL4+wrYELLSYM=)
3: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: /yvn8ijOa8FBDJ5ASQ/Lery7dqjE4HE5gFGgvkPmpE0=)
4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 06vkEMgrkkkWPxaN6n0p0hSzGNVGXFIfC5HD0mArdMk=)
5: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: l1Lp6717izpzzjuLJ/WIAZ1x52OL2D3LQu0E5xm6nH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 16:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7261 (0x1c5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Validity
Not Before: Dec 14 16:05:47 2025 GMT
Not After : Dec 21 16:05:47 2025 GMT
Subject: CN=693ee05b-624e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:9f:97:5a:f6:6c:b6:32:ad:5d:43:9e:6a:
a8:e4:36:54:41:d1:37:50:b1:0e:a6:f8:d5:30:3b:
8e:c2:aa:8a:f0:bc:41:6e:72:22:22:ae:1e:bc:39:
ac:39:98:15:d3:dd:e9:89:d2:e4:f9:d1:ed:9d:8a:
07:2c:92:2c:c2:0c:64:83:2c:29:a3:83:29:be:69:
d9:d3:2e:12:a2:ae:fb:ab:6e:f2:a6:a9:19:fd:5b:
40:dd:7f:20:04:a8:85:0f:e1:23:35:4e:ae:1e:a7:
ac:bf:a5:84:43:21:f4:1e:be:8c:85:49:8c:dd:dc:
13:ef:3e:3a:64:f8:45:62:e1:7f:70:43:6e:81:46:
96:ab:ff:5f:9a:7d:ca:f7:98:05:ca:64:46:8d:53:
14:3c:6c:ed:cb:19:77:80:dc:61:a7:46:6a:f9:2e:
47:f0:27:05:b0:41:69:c7:d1:61:69:2d:74:2d:e0:
e2:7c:3c:2b:c8:50:8b:ff:dc:19:34:0e:36:51:c2:
5c:fe:21:a2:46:15:89:bb:9c:70:a8:06:ec:ed:e6:
ef:99:9b:2a:cd:f8:41:c0:af:86:34:c3:7b:cd:bc:
b9:61:bd:d2:b8:69:7e:df:a5:c5:3a:90:e2:04:d0:
07:22:1e:7d:b6:2c:b0:96:e2:0e:2a:24:c4:fa:b8:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0A:E7:08:6C:53:F0:FA:0A:50:F1:00:13:2B:F6:91:10:51:70:22
X509v3 Authority Key Identifier:
keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:a5:8d:56:c0:dc:30:83:d9:b3:72:03:00:b7:4d:f5:41:38:
e8:3a:cd:51:59:87:67:70:5b:31:0a:02:8a:76:4a:4c:75:55:
fa:27:11:71:62:9d:44:5d:61:3c:9e:0c:15:ed:8d:45:38:89:
ed:cf:57:31:2f:49:bb:39:dc:f6:d6:4f:74:a5:cf:75:ad:5e:
8e:71:f1:5f:22:9e:71:a9:9a:5e:f8:10:aa:b0:30:10:9b:e3:
28:d7:0e:6d:eb:7f:cd:46:9b:25:90:aa:39:1e:ef:87:fd:0a:
2b:8e:69:39:4d:f4:ba:a3:da:8d:21:48:1c:87:6c:6e:61:89:
70:e6:97:65:40:4f:29:7d:37:d5:18:dd:77:5b:90:3d:80:6f:
3a:90:ed:c2:aa:fb:60:7f:67:f2:20:d4:45:69:c4:8b:40:45:
ba:19:42:10:54:6c:51:20:f3:38:ea:99:18:16:04:52:29:d4:
c7:18:d9:4a:4d:c7:10:84:6e:4a:5f:e9:70:a7:20:e4:e8:bc:
28:23:bf:2f:ee:5a:71:92:52:9e:d2:65:03:25:f5:f8:03:2e:
8a:31:1c:12:75:4f:97:77:06:18:1a:49:a4:b0:e5:15:d3:de:
19:7e:62:32:b8:a2:66:53:12:c9:e3:f1:c3:2b:67:17:51:13:
c8:0f:72:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 05:01:04 2025 by rpki-client