This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json) Hash identifier: I7hd48H00WUghMVQSmT9w7f6xt1schv6/ltiiRMz59s= Subject key identifier: D2:CC:C4:79:AA:A0:6F:B6:B1:00:73:E2:1B:28:0D:34:F2:04:9E:DC Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft Manifest number: 0123 Signing time: Tue 23 Dec 2025 03:43:12 +0000 Manifest this update: Tue 23 Dec 2025 03:43:12 +0000 Manifest next update: Tue 30 Dec 2025 03:43:12 +0000 Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: hLkDyYrbMx0lMfDuPk9oI4JsGmS6sX5bNa2zV6xR4ek=) 2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: GcLg66G+nJPqXwCpBzyC3D0WjujSmh3tIwuu+y3/BEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA5F, serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Validity Not Before: Dec 23 03:43:12 2025 GMT Not After : Dec 30 03:43:12 2025 GMT Subject: CN=694a0fd0-3752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cc:b1:bf:cb:09:83:06:e2:8e:9a:61:4a:80: 43:71:54:fe:88:a3:48:1a:41:62:a5:34:d5:77:c6: 70:04:cd:8c:bc:72:db:88:6c:1b:49:13:63:de:b2: ac:22:c4:01:6f:da:5d:5d:72:1e:66:1b:41:2d:87: 73:d2:3b:55:0f:8a:f4:8f:fb:f9:22:e5:07:5f:c5: c7:77:ff:71:c0:a2:cc:4d:76:61:4d:9e:9d:bd:1f: 9e:a7:2e:23:76:dc:6c:d5:05:15:8a:07:e2:b8:66: 5e:05:94:4d:b6:06:b1:44:1d:76:53:1d:fd:01:ad: c4:38:4f:2a:60:7a:65:91:7a:94:f4:fb:1c:99:da: be:48:5a:d7:e7:71:09:59:eb:b1:dc:b0:f4:a9:70: bd:78:79:f2:1c:e5:76:e7:2d:ce:a8:a0:c9:4f:c2: de:95:dc:5c:1e:52:72:87:fd:25:d2:d4:e6:34:18: e8:e9:fc:2f:e6:88:c1:bd:36:58:9c:87:a0:88:b0: 50:0c:2a:1e:e5:cf:1e:23:04:f0:87:ca:e1:71:1d: cc:79:ec:fa:4a:ba:70:b2:4e:77:76:9c:99:a5:e1: 67:3d:d2:4b:1b:d2:e2:05:98:3f:f6:37:7a:86:89: 1c:1b:b8:6b:84:13:1d:74:ce:f8:5f:c7:76:7e:d8: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CC:C4:79:AA:A0:6F:B6:B1:00:73:E2:1B:28:0D:34:F2:04:9E:DC X509v3 Authority Key Identifier: keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:25:ef:d5:e3:ab:53:15:58:2d:09:24:82:8f:5d:45:5b:8e: 22:df:18:9a:10:27:2e:23:b3:8d:da:c7:09:47:ef:b6:d8:45: 11:fa:65:ba:20:d6:31:70:ca:4f:7c:b4:68:fa:7c:d0:90:2d: ca:ab:07:0c:33:34:3f:07:6c:87:08:8a:39:75:d5:70:fd:a6: 53:4f:0e:96:d3:01:fb:5e:14:26:0c:bf:6c:99:d0:cc:b7:8d: b3:98:d1:de:7a:0b:ca:b1:66:12:5e:df:8a:c5:ce:32:a8:62: f1:e7:21:d4:16:f7:3f:63:77:70:4d:9b:b7:68:f3:a5:f8:3d: 46:1a:4d:32:9f:1b:66:ec:52:11:59:22:83:0d:d7:f6:5a:38: 31:75:42:3f:fe:ae:27:bf:e8:8a:18:45:f1:4a:86:68:d9:71: 99:5f:26:dd:55:93:92:f1:98:54:36:68:cb:31:db:0a:00:c0: de:9d:88:0a:14:d7:67:7a:0c:c3:e9:16:7e:c3:4d:f4:46:7e: 06:b8:2a:70:50:70:a5:fe:60:85:fd:fe:99:1d:7f:c1:95:55: 4c:e2:c4:ac:c2:3c:65:30:dd:60:be:33:97:dd:ff:7d:5f:ce: a9:fd:9e:49:ea:58:a3:e2:a0:3e:dc:85:14:e0:da:5d:66:36: a0:f0:43:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNUYxMTAvBgNVBAUTKDA5QzdEOUU3RjI2M0RCMEI4QjgyMDFFN0QyOTNDQURF Q0I5N0NGOEMwHhcNMjUxMjIzMDM0MzEyWhcNMjUxMjMwMDM0MzEyWjAYMRYwFAYD VQQDDA02OTRhMGZkMC0zNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8yxv8sJgwbijpphSoBDcVT+iKNIGkFipTTVd8ZwBM2MvHLbiGwbSRNj3rKs IsQBb9pdXXIeZhtBLYdz0jtVD4r0j/v5IuUHX8XHd/9xwKLMTXZhTZ6dvR+epy4j dtxs1QUVigfiuGZeBZRNtgaxRB12Ux39Aa3EOE8qYHplkXqU9Pscmdq+SFrX53EJ Weux3LD0qXC9eHnyHOV25y3OqKDJT8LeldxcHlJyh/0l0tTmNBjo6fwv5ojBvTZY nIegiLBQDCoe5c8eIwTwh8rhcR3Meez6Srpwsk53dpyZpeFnPdJLG9LiBZg/9jd6 hokcG7hrhBMddM74X8d2ftj5dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLMxHmq oG+2sQBz4hsoDTTyBJ7cMB8GA1UdIwQYMBaAFAnH2efyY9sLi4IB59KTyt7Ll8+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE1Ri80QjU5MDZCODIz RUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3dUxnZ0huMHBQSzNzdVh6 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjZlo1X0pqMnd1TGdnSG4wcFBLM3N1WHo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE1Ri80QjU5MDZCODIzRUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3 dUxnZ0huMHBQSzNzdVh6NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAJe/V46tTFVgtCSSCj11FW44i3xiaECcuI7ON2scJR++22EUR+mW6 INYxcMpPfLRo+nzQkC3KqwcMMzQ/B2yHCIo5ddVw/aZTTw6W0wH7XhQmDL9smdDM t42zmNHeegvKsWYSXt+Kxc4yqGLx5yHUFvc/Y3dwTZu3aPOl+D1GGk0ynxtm7FIR WSKDDdf2WjgxdUI//q4nv+iKGEXxSoZo2XGZXybdVZOS8ZhUNmjLMdsKAMDenYgK FNdnegzD6RZ+w030Rn4GuCpwUHCl/mCF/f6ZHX/BlVVM4sSswjxlMN1gvjOX3f99 X86p/Z5J6lij4qA+3IUU4NpdZjag8EO7 -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:06 2025 by rpki-client