This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: fcropIS8ugv34REmJM1VWFVfZiGdUSlDFl+GBToisL0= Subject key identifier: E7:7A:2A:64:F9:2D:7C:66:7D:DA:A2:4D:32:47:09:27:2A:C6:1C:2F Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 0248 Signing time: Tue 23 Dec 2025 00:50:09 +0000 Manifest this update: Tue 23 Dec 2025 00:50:09 +0000 Manifest next update: Tue 30 Dec 2025 00:50:09 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: o7CXhBZg/uDk7mMtaZCneFpkP1x+IdqB8gVunsXNnSg=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: OQgU1fqpb861fD2zmKo8rKBXP1JjJTjguqm2j7NIGDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: Dec 23 00:50:09 2025 GMT Not After : Dec 30 00:50:09 2025 GMT Subject: CN=6949e741-5bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a9:3d:61:52:d4:e0:c3:85:78:1b:d6:eb:48: 2d:be:bb:a9:78:56:3d:24:4d:ae:3d:8b:a5:75:20: fc:49:5b:42:91:b9:5d:b8:a3:8b:b0:68:54:b2:0a: 14:1d:c0:ef:a1:c5:b1:f5:50:b7:6c:61:1a:6b:10: 0b:7a:a5:c2:68:d2:bf:3b:1d:16:a2:da:d4:b3:65: d7:3d:6e:4f:3c:35:f2:a7:34:fa:fd:13:ad:e2:0f: f8:5f:70:9c:f8:8d:50:b3:cd:d9:34:1f:4e:31:05: 27:2e:a3:8d:18:fc:e7:ed:52:ce:75:d1:1f:c3:1d: 17:ce:fe:a7:6c:f8:5b:65:c7:f1:06:25:59:01:e5: 5b:10:e1:a3:d7:56:0b:31:fc:a2:3d:8f:ef:40:91: ca:65:d2:b2:73:e3:fb:27:5c:0e:a3:88:93:75:7f: c6:70:f9:9a:85:8d:02:e1:43:f0:cb:ca:64:cf:3e: 40:b7:8a:69:1a:e1:64:2f:df:2b:24:65:29:7c:bb: 8a:54:5e:c3:cd:a9:05:2a:b3:c4:4b:4c:9c:56:71: b7:74:84:e3:16:6b:cc:15:95:b2:02:98:ee:3d:b2: fb:74:71:89:ab:84:3c:e6:9e:9e:17:b8:ba:25:d7: 23:9b:06:97:74:fc:b4:cb:0c:7f:5a:5a:6a:c5:a0: 5f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7A:2A:64:F9:2D:7C:66:7D:DA:A2:4D:32:47:09:27:2A:C6:1C:2F X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:6b:69:c9:1a:d1:99:4f:c7:0c:69:87:66:17:c8:91:40:59: c3:d7:7d:d4:9b:ca:73:a9:17:21:c2:e1:2f:49:0a:78:31:00: d3:f0:2a:a9:fb:8a:5e:55:38:9e:94:5d:bc:68:91:ac:37:a5: 48:c5:94:a0:19:cb:3e:68:8d:4d:67:b2:a9:e3:d9:64:d2:e7: ab:a3:a4:8d:9b:57:f0:90:8a:29:f9:fc:cd:cf:6a:2d:92:e5: 5f:85:a0:db:c9:fb:64:c2:9e:c0:28:6a:6d:a2:5a:00:a0:2b: 6e:3c:c6:9f:e1:84:16:ca:de:d7:05:3c:df:40:a2:9c:98:69: 04:ea:18:a8:2f:b3:c9:ab:35:82:8f:01:02:95:3f:1e:5e:7f: e6:1f:2d:fa:1b:eb:ab:a7:12:b2:33:6b:c0:f7:2e:a8:25:68: be:49:b3:27:cd:0a:e5:c4:97:68:71:5f:c4:81:dd:a4:25:44: 16:fb:ed:8b:5d:1e:8d:e6:c2:7e:a0:21:6c:0f:2d:c5:89:96: 99:0c:f1:4c:2d:c1:e6:59:a8:ea:e4:b3:0e:9f:08:ec:ec:da: fb:6e:00:97:89:64:05:4a:72:aa:30:26:48:36:56:43:62:63: ab:f9:af:2a:97:06:78:0a:41:ae:f9:47:ee:f6:8b:c5:f5:2c: a3:fa:ca:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjUxMjIzMDA1MDA5WhcNMjUxMjMwMDA1MDA5WjAYMRYwFAYD VQQDDA02OTQ5ZTc0MS01YmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnak9YVLU4MOFeBvW60gtvrupeFY9JE2uPYuldSD8SVtCkblduKOLsGhUsgoU HcDvocWx9VC3bGEaaxALeqXCaNK/Ox0WotrUs2XXPW5PPDXypzT6/ROt4g/4X3Cc +I1Qs83ZNB9OMQUnLqONGPzn7VLOddEfwx0Xzv6nbPhbZcfxBiVZAeVbEOGj11YL MfyiPY/vQJHKZdKyc+P7J1wOo4iTdX/GcPmahY0C4UPwy8pkzz5At4ppGuFkL98r JGUpfLuKVF7DzakFKrPES0ycVnG3dITjFmvMFZWyApjuPbL7dHGJq4Q85p6eF7i6 JdcjmwaXdPy0ywx/WlpqxaBffQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd6KmT5 LXxmfdqiTTJHCScqxhwvMB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCya2nJGtGZT8cMaYdmF8iRQFnD133Um8pzqRchwuEvSQp4MQDT8Cqp +4peVTielF28aJGsN6VIxZSgGcs+aI1NZ7Kp49lk0uero6SNm1fwkIop+fzNz2ot kuVfhaDbyftkwp7AKGptoloAoCtuPMaf4YQWyt7XBTzfQKKcmGkE6hioL7PJqzWC jwEClT8eXn/mHy36G+urpxKyM2vA9y6oJWi+SbMnzQrlxJdocV/Egd2kJUQW++2L XR6N5sJ+oCFsDy3FiZaZDPFMLcHmWajq5LMOnwjs7Nr7bgCXiWQFSnKqMCZINlZD YmOr+a8qlwZ4CkGu+Ufu9ovF9Syj+spt -----END CERTIFICATE-----Generated at Tue Dec 23 15:52:58 2025 by rpki-client