This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: BxjWi2QFLHHTMUOEJYgiW27hOnESjDk/A7NWbFRxXdY= Subject key identifier: EB:4A:D9:87:B4:81:23:AF:D2:B3:39:C9:EB:E7:B3:F2:A8:50:A3:08 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0597 Signing time: Sat 06 Dec 2025 22:04:45 +0000 Manifest this update: Sat 06 Dec 2025 22:04:45 +0000 Manifest next update: Sat 13 Dec 2025 22:04:45 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: 1iPJ86W1KMYqmgMpzw0a4enc7zXSj0CnCs3+Fzt+wLo=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 2jt6Xm58KXfWaDCwoL1QNNF6hftEV3g4TXU+Cro75w8=) 3: EDC6896617B611F08E260814C4F9AE02.roa (hash: bppqSZ8PSCotLg3otrjVRqyexBIsOl6v9mc32VyO/nY=) 4: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: osBPg0SLfRG0eb1YC88FnRgXyZmnCWV1UAz6jQOFPa8=) 5: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: mLHQ8FPso+ZmAaHO2o/MCAMgyAvNWTYy5WsKEiwbpt0=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: tUYKyj51w8FY5qrfQOEMkIv2L7xe24UEi8KjbC1Ydgg=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: Px42Wf8a/plz9LcLndqURmspCg6cQtfr3BUR2GqJiJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Dec 6 22:04:45 2025 GMT Not After : Dec 13 22:04:45 2025 GMT Subject: CN=6934a87d-1784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:73:8b:6b:5e:1c:47:41:ca:63:1e:83:77:14: ed:4f:4e:55:a5:fa:e0:bf:37:53:bd:03:08:57:5e: e9:cd:dc:f1:30:33:62:78:80:de:59:17:f7:ad:cf: 4a:3b:b3:ed:87:fb:2d:80:c7:84:70:90:80:78:2c: b4:e8:d5:6a:a2:e2:c7:8c:0d:44:06:b9:bb:e5:42: 5e:30:36:35:20:5a:85:3a:79:1b:e8:13:29:82:0c: bc:71:03:d6:e8:34:d0:2f:14:69:af:93:68:de:20: 53:ae:b5:2e:b6:e5:ac:a7:59:b0:68:03:50:6e:c8: da:f7:13:38:c4:06:0c:12:57:3f:b7:b1:25:53:af: c2:9f:b3:a3:6b:4b:de:76:c9:e0:a1:15:3f:62:fc: 07:79:3c:54:b5:60:03:ba:b4:86:9d:ed:57:b6:31: 8f:c0:23:24:93:9f:6f:6b:3b:fc:98:26:f2:f6:f1: be:8f:21:b8:35:0b:20:dc:b3:e4:0d:ae:5f:d3:f0: 64:5c:51:8f:1e:45:87:4c:45:6a:b1:03:4b:d3:65: 5a:31:8c:a1:02:a8:be:7a:9c:b7:75:01:1e:5f:55: f8:7c:f3:bc:a4:fa:6c:2d:82:ce:6d:d1:6b:52:c0: 08:30:f2:5d:2a:08:13:f9:ef:e8:63:d7:3f:9e:f1: 33:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4A:D9:87:B4:81:23:AF:D2:B3:39:C9:EB:E7:B3:F2:A8:50:A3:08 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:50:d6:4a:b0:5a:7d:77:29:09:8b:58:12:0b:04:84:2a:64: 8b:2e:71:c6:65:31:a3:9d:82:2e:96:01:e7:3e:5e:b0:bd:9f: 22:ea:3b:27:b8:b9:c8:c7:27:32:01:82:04:20:7a:69:30:01: 69:c1:06:f7:c9:2f:0e:95:a7:8c:20:cb:04:89:19:81:67:3c: 61:1d:ef:fc:94:b8:76:5b:3a:3f:c7:5f:d1:aa:cb:aa:a6:97: e8:c9:e4:53:3a:e7:21:10:98:28:17:75:bb:bf:62:91:86:9b: 22:0b:c2:e2:55:be:7d:19:74:5c:a4:66:fc:c6:d6:56:1c:14: a8:85:56:15:49:13:bd:73:6d:c4:46:f6:5e:46:40:ff:b6:a6: da:a7:e7:72:7e:95:4a:4e:5e:7e:c7:bf:ff:48:8b:58:54:3f: 67:9a:f6:1f:81:7c:82:1e:60:4e:b5:04:69:af:72:c2:d2:c6: e5:b8:eb:08:c3:17:04:2c:95:ea:a6:1d:d2:e5:83:7b:c6:47: 39:69:05:b2:1b:2a:76:09:d6:ad:38:3a:7a:2d:21:da:07:64: 08:12:81:2d:0d:af:d3:af:46:14:47:81:06:d9:74:fc:ed:66: 06:34:4a:ee:63:38:91:ab:2c:ae:36:ca:85:67:4f:8c:b3:05: 94:51:80:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUxMjA2MjIwNDQ1WhcNMjUxMjEzMjIwNDQ1WjAYMRYwFAYD VQQDEw02OTM0YTg3ZC0xNzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXOLa14cR0HKYx6DdxTtT05VpfrgvzdTvQMIV17pzdzxMDNieIDeWRf3rc9K O7Pth/stgMeEcJCAeCy06NVqouLHjA1EBrm75UJeMDY1IFqFOnkb6BMpggy8cQPW 6DTQLxRpr5No3iBTrrUutuWsp1mwaANQbsja9xM4xAYMElc/t7ElU6/Cn7Oja0ve dsngoRU/YvwHeTxUtWADurSGne1XtjGPwCMkk59vazv8mCby9vG+jyG4NQsg3LPk Da5f0/BkXFGPHkWHTEVqsQNL02VaMYyhAqi+epy3dQEeX1X4fPO8pPpsLYLObdFr UsAIMPJdKggT+e/oY9c/nvEzUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtK2Ye0 gSOv0rM5yevns/KoUKMIMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZUNZKsFp9dykJi1gSCwSEKmSLLnHGZTGjnYIulgHnPl6wvZ8i6jsn uLnIxycyAYIEIHppMAFpwQb3yS8OlaeMIMsEiRmBZzxhHe/8lLh2Wzo/x1/Rqsuq ppfoyeRTOuchEJgoF3W7v2KRhpsiC8LiVb59GXRcpGb8xtZWHBSohVYVSRO9c23E RvZeRkD/tqbap+dyfpVKTl5+x7//SItYVD9nmvYfgXyCHmBOtQRpr3LC0sbluOsI wxcELJXqph3S5YN7xkc5aQWyGyp2CdatODp6LSHaB2QIEoEtDa/Tr0YUR4EG2XT8 7WYGNEruYziRqyyuNsqFZ0+MswWUUYC3 -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:05 2025 by rpki-client