This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json) Hash identifier: iAZ3BSttvg2UjnMUtT+wJoU0xfQk2ZYZX+N9dtiqbCo= Subject key identifier: 40:25:BC:7C:70:68:9A:C6:8A:DB:BC:DE:B8:C8:AE:AA:71:C9:1F:CF Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Certificate serial: 084B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft Manifest number: 60C5 Signing time: Wed 10 Dec 2025 14:15:18 +0000 Manifest this update: Wed 10 Dec 2025 14:15:18 +0000 Manifest next update: Wed 17 Dec 2025 14:15:18 +0000 Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: 3CY23duT8g6Gajv4FMnWjmNq+AkElSzgEc8Caf/wjtI=) 2: 813E372A946711F081C10711C4F9AE02.roa (hash: kExd4zSpp7AjmXFgOmX60/PfKSK3ZoaisYrs5b1dJbk=) 3: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: hZakqVHe8O4RVi1dDA3NxvC3rtRxeZVjqvS+/bKAPhU=) 4: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: Wde+/tbwO6emtqEAbVU9kd5LqQ/7rRJAB/r7M8LU5/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 14:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Validity Not Before: Dec 10 14:15:18 2025 GMT Not After : Dec 17 14:15:18 2025 GMT Subject: CN=69398076-9f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:cf:6c:c6:c3:bd:85:09:d6:d7:8a:08:1c: 16:e8:9f:86:33:36:a7:e2:5a:61:da:8e:f7:9a:46: 1c:40:15:60:4a:86:73:4c:32:cb:f0:fd:9d:32:34: 2a:b1:69:22:dc:a1:1f:fe:b4:9d:09:96:8a:18:cb: 55:48:ba:ec:18:85:f3:d6:9d:fd:43:c1:d8:95:62: a9:b0:14:bf:b7:8f:75:00:73:81:ab:d8:66:6c:95: 15:9b:ad:22:88:17:41:df:d5:79:95:ab:e8:e1:5c: 5a:76:bc:c0:22:e8:4d:a5:61:46:4c:a8:6d:75:a9: b0:69:1d:76:f7:9c:81:da:a5:91:7b:ba:df:a2:53: 30:6b:e5:73:cf:e1:09:24:2c:6d:30:39:46:0c:38: 84:24:73:67:a2:31:75:5a:7f:b2:77:b8:cc:77:56: 61:a0:d1:e4:e9:eb:2e:0f:ad:c1:af:82:01:d2:6b: ed:9a:af:75:5f:59:c2:6a:43:f0:86:26:f7:e7:8d: cb:4e:b8:73:8b:04:6e:b5:2a:cb:cd:a7:57:3c:9d: 94:03:8d:52:e2:1b:f4:08:6e:80:c1:ec:ca:11:f9: 73:3b:4f:d9:d2:74:de:5b:b4:9e:dd:6d:89:63:95: dc:ff:04:75:bd:85:8f:a6:73:d1:e2:a6:1e:bc:91: 14:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:25:BC:7C:70:68:9A:C6:8A:DB:BC:DE:B8:C8:AE:AA:71:C9:1F:CF X509v3 Authority Key Identifier: keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:91:f4:f0:cd:c8:7e:3e:42:bf:cb:22:47:61:bc:d9:4d:5e: 5a:70:e2:b6:a5:18:dc:df:ec:cb:9b:ad:73:e7:44:77:0a:be: f4:c9:3a:ec:89:22:57:fb:46:74:bb:5c:ac:10:f9:b7:99:bf: cc:fa:f1:e9:77:52:a7:3b:24:ac:d3:13:fb:62:76:59:a9:e9: 96:bd:21:1f:93:30:e7:fe:47:9b:9d:7d:9b:4f:17:0b:eb:7d: 58:3d:7c:1f:fc:af:3d:64:13:d6:63:77:57:35:1d:e6:1a:4b: 3a:47:f5:03:8a:81:ec:b0:bf:49:5a:29:90:9b:33:3e:13:d1: 07:2b:97:f9:d4:eb:b6:06:8e:5a:41:db:94:96:d4:70:dc:50: 01:3f:9c:49:7b:58:33:b1:30:09:fc:ef:a4:aa:15:de:29:18: dc:fa:00:13:86:a9:21:80:a5:15:77:b7:b6:c7:67:e9:a0:c5: 21:b9:48:14:8a:b5:8b:49:c2:cd:7f:ea:a9:ca:75:ba:b4:30: 90:b6:04:65:3a:cb:0f:ab:c9:16:f1:5c:d1:20:9b:db:a0:91: 86:d2:b2:dc:3c:39:a6:cd:3b:c6:76:ae:2a:5e:62:f8:a6:b1: 53:b5:d6:f2:2d:85:4d:e9:31:c7:72:b7:d6:82:67:c7:d0:e1: 09:be:60:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE OEFFOEFDODcwHhcNMjUxMjEwMTQxNTE4WhcNMjUxMjE3MTQxNTE4WjAYMRYwFAYD VQQDEw02OTM5ODA3Ni05ZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2vPbMbDvYUJ1teKCBwW6J+GMzan4lph2o73mkYcQBVgSoZzTDLL8P2dMjQq sWki3KEf/rSdCZaKGMtVSLrsGIXz1p39Q8HYlWKpsBS/t491AHOBq9hmbJUVm60i iBdB39V5lavo4VxadrzAIuhNpWFGTKhtdamwaR1295yB2qWRe7rfolMwa+Vzz+EJ JCxtMDlGDDiEJHNnojF1Wn+yd7jMd1ZhoNHk6esuD63Br4IB0mvtmq91X1nCakPw hib3543LTrhziwRutSrLzadXPJ2UA41S4hv0CG6AwezKEflzO0/Z0nTeW7Se3W2J Y5Xc/wR1vYWPpnPR4qYevJEUewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAlvHxw aJrGitu83rjIrqpxyR/PMB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz UDlvZFd1eEc0dkxZcm9ySWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCkfTwzch+PkK/yyJHYbzZTV5acOK2pRjc3+zLm61z50R3Cr70yTrs iSJX+0Z0u1ysEPm3mb/M+vHpd1KnOySs0xP7YnZZqemWvSEfkzDn/kebnX2bTxcL 631YPXwf/K89ZBPWY3dXNR3mGks6R/UDioHssL9JWimQmzM+E9EHK5f51Ou2Bo5a QduUltRw3FABP5xJe1gzsTAJ/O+kqhXeKRjc+gAThqkhgKUVd7e2x2fpoMUhuUgU irWLScLNf+qpynW6tDCQtgRlOssPq8kW8VzRIJvboJGG0rLcPDmmzTvGdq4qXmL4 prFTtdbyLYVN6THHcrfWgmfH0OEJvmCt -----END CERTIFICATE-----Generated at Wed Dec 10 17:22:01 2025 by rpki-client