This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft File: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft (raw, json) Hash identifier: epCbpGN8pDJ9HNAeVmYPHN0gNAQVBtQ6QT3AG/okRE4= Subject key identifier: BC:56:8C:33:2C:71:5A:2F:D4:05:FE:A8:DF:FD:66:EA:91:D8:35:E9 Authority key identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 Certificate issuer: /CN=A91A2C5D/serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft Manifest number: 01DF Signing time: Sun 21 Dec 2025 02:55:45 +0000 Manifest this update: Sun 21 Dec 2025 02:55:44 +0000 Manifest next update: Sun 28 Dec 2025 02:55:44 +0000 Files and hashes: 1: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl (hash: cV92c/1WY30A99uTvhMl/gcRHN9N5IkxV4u+esCmQ7o=) 2: 218937DC5E5011F0B9404662C4F9AE02.roa (hash: AYUrmB0VmSIUZcI9YP+6cvDLUzAB6YwYDgaBWNY/PRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Validity Not Before: Dec 21 02:55:44 2025 GMT Not After : Dec 28 02:55:44 2025 GMT Subject: CN=694761b0-9692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:40:18:09:d9:5f:6b:27:d8:e2:63:70:a4: b4:b4:b4:8a:96:80:ea:9b:c8:15:79:18:04:ca:73: 90:9b:d2:35:b0:c5:5b:eb:7f:48:81:b7:18:a4:6d: 74:87:77:4f:51:37:ae:94:d9:e0:59:c7:f5:e7:30: 3a:77:bd:7b:c9:20:27:74:ff:56:4e:2a:2e:f9:e2: 4d:0f:72:26:a3:1c:0e:6d:a8:01:e4:12:27:d7:d7: ae:4a:df:d0:9a:76:cb:aa:f5:ee:98:1d:7b:29:fb: f8:02:60:d2:da:02:fc:29:f6:84:38:dc:26:4c:14: e8:8d:b9:70:9b:4b:ea:9b:73:28:1f:ba:65:4b:6c: 83:60:ce:d9:f3:46:44:32:72:ef:5a:f3:04:2f:48: 25:96:26:00:b1:83:97:34:ac:a9:ec:71:5e:d0:f2: 03:81:89:25:c6:0f:52:81:d2:b0:ed:37:7c:05:c9: 59:75:93:85:25:35:28:87:ec:bc:71:13:aa:32:bf: ea:a3:ab:a2:ad:1e:96:4c:d5:43:6c:d2:d1:ee:b4: 50:38:e9:41:9e:86:c0:1d:68:22:50:c2:58:f5:76: 2a:eb:a3:20:94:a7:55:ce:ea:c4:b9:cb:d8:12:f0: 4f:f5:b3:47:cc:96:72:b4:b2:d3:71:6d:0a:d5:13: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:56:8C:33:2C:71:5A:2F:D4:05:FE:A8:DF:FD:66:EA:91:D8:35:E9 X509v3 Authority Key Identifier: keyid:08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:56:83:fc:ee:a0:57:50:6f:a7:da:7f:f7:d3:e0:76:b6:24: 53:97:9d:72:d5:ab:35:62:bc:da:a6:4a:45:b5:db:69:63:b2: c8:3b:46:e7:30:0c:d0:f2:cf:93:1b:7f:bc:a3:df:70:75:53: 1b:68:fb:69:c0:88:93:eb:26:5d:d9:95:08:6b:4a:d4:b9:53: 66:4f:d6:bd:35:c1:67:17:4e:7a:f3:ab:60:73:f9:28:f9:ad: 8c:9d:19:f3:33:b8:01:26:75:5e:cf:e8:43:99:0c:84:88:85: 55:da:d2:27:ce:87:20:d0:df:99:7a:82:89:89:a2:26:b5:c4: f8:da:59:97:fb:6d:8d:5a:d2:e9:74:6c:23:6f:b2:82:c9:ae: e5:47:7b:42:aa:4d:b6:52:18:76:fa:81:a0:dd:d8:83:4e:2d: 81:87:bb:d4:8f:ff:00:6c:26:b4:2a:ae:a1:ad:af:20:77:c2: 5b:9a:86:92:12:07:30:2e:b0:40:16:ee:7d:e2:94:31:51:5e: 2b:72:4b:bf:92:f0:13:6a:e0:e6:c8:66:62:15:e9:79:d5:f9: 2f:d4:cc:f4:05:20:e6:63:34:d9:d8:21:59:39:27:20:3e:1a: 07:2f:da:98:cd:dd:fc:b8:06:6b:bb:6d:04:e8:7d:de:f1:4d: 79:c6:9d:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MkM1RDExMC8GA1UEBRMoMDg3NzdGQTM4MUJGMjU4RTBDQUMzN0Q1MDlFRjBCQUM3 MDY2NDg0NDAeFw0yNTEyMjEwMjU1NDRaFw0yNTEyMjgwMjU1NDRaMBgxFjAUBgNV BAMMDTY5NDc2MWIwLTk2OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4M0AYCdlfayfY4mNwpLS0tIqWgOqbyBV5GATKc5Cb0jWwxVvrf0iBtxikbXSH d09RN66U2eBZx/XnMDp3vXvJICd0/1ZOKi754k0PciajHA5tqAHkEifX165K39Ca dsuq9e6YHXsp+/gCYNLaAvwp9oQ43CZMFOiNuXCbS+qbcygfumVLbINgztnzRkQy cu9a8wQvSCWWJgCxg5c0rKnscV7Q8gOBiSXGD1KB0rDtN3wFyVl1k4UlNSiH7Lxx E6oyv+qjq6KtHpZM1UNs0tHutFA46UGehsAdaCJQwlj1dirroyCUp1XO6sS5y9gS 8E/1s0fMlnK0stNxbQrVEzPPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvFaMMyxx Wi/UBf6o3/1m6pHYNekwHwYDVR0jBBgwFoAUCHd/o4G/JY4MrDfVCe8LrHBmSEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyQzVELzNCOURENDEwOTJD NDExRUVCNTIxQkI0OUM0RjlBRTAyL0NIZF9vNEdfSlk0TXJEZlZDZThMckhCbVNF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0hkX280R19KWTRNckRmVkNlOExySEJtU0VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy QzVELzNCOURENDEwOTJDNDExRUVCNTIxQkI0OUM0RjlBRTAyL0NIZF9vNEdfSlk0 TXJEZlZDZThMckhCbVNFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJJWg/zuoFdQb6faf/fT4Ha2JFOXnXLVqzVivNqmSkW122ljssg7Rucw DNDyz5Mbf7yj33B1Uxto+2nAiJPrJl3ZlQhrStS5U2ZP1r01wWcXTnrzq2Bz+Sj5 rYydGfMzuAEmdV7P6EOZDISIhVXa0ifOhyDQ35l6gomJoia1xPjaWZf7bY1a0ul0 bCNvsoLJruVHe0KqTbZSGHb6gaDd2INOLYGHu9SP/wBsJrQqrqGtryB3wluahpIS BzAusEAW7n3ilDFRXityS7+S8BNq4ObIZmIV6XnV+S/UzPQFIOZjNNnYIVk5JyA+ Ggcv2pjN3fy4Bmu7bQTofd7xTXnGnRM= -----END CERTIFICATE-----Generated at Sun Dec 21 06:46:11 2025 by rpki-client