This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft File: RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json) Hash identifier: XSvcEAVnWr9a+cwiSLNsrZpQKylS3d0CzmWOqy+BAFk= Subject key identifier: 11:B1:39:8C:0C:3B:A4:16:17:AB:45:CA:96:F7:AA:CF:55:7A:D5:D9 Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Certificate serial: 030C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft Manifest number: 0307 Signing time: Thu 04 Dec 2025 23:33:23 +0000 Manifest this update: Thu 04 Dec 2025 23:33:23 +0000 Manifest next update: Thu 11 Dec 2025 23:33:23 +0000 Files and hashes: 1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: 07K29Hunhl3xUZqVuLmQHrZ/Tl7ijf1iJY8n1z9Euig=) 2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: c4/EYmjgVUl4pjL+vaUj1o6O7r/FlcrHh8JpcWomXpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 780 (0x30c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Validity Not Before: Dec 4 23:33:23 2025 GMT Not After : Dec 11 23:33:23 2025 GMT Subject: CN=69321a43-cdf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d3:9a:db:70:00:82:8c:fd:8e:1a:eb:f9:65: b0:66:27:00:30:c3:72:1d:b6:c0:7e:85:42:3a:95: fb:57:e2:15:c0:34:02:ad:2d:68:7b:3e:c1:e0:84: 15:6b:9f:24:9b:ea:35:d6:3b:94:99:51:89:b3:98: 7f:a7:7a:21:46:eb:2e:fc:c5:2c:42:5f:55:ea:7d: 0d:40:04:a1:8d:10:9c:c1:93:65:17:89:e4:08:40: ed:88:d8:6d:8a:5d:a7:dc:b8:1d:a2:38:ec:5b:bb: c6:0e:4e:a7:57:2d:e2:bd:d6:5e:13:1e:a0:04:ea: 92:77:64:1d:59:a4:d2:58:e0:04:d1:c1:7f:ee:d0: 9c:6b:0e:b8:5a:45:31:1d:86:92:3b:f8:c2:57:d0: 28:a9:ea:94:c5:90:30:fe:f1:a3:1c:aa:b1:51:db: 82:f6:6d:f5:54:3e:11:a9:46:99:0a:81:61:f3:3c: 10:76:4e:48:54:9f:dd:f0:73:ad:b3:55:a2:39:df: 7d:54:4b:eb:a5:e7:3b:9a:09:26:12:41:d0:98:3f: 63:a2:9a:41:ee:10:57:dd:e0:70:6c:4c:73:7c:80: 65:a5:17:d3:a0:da:2f:03:fd:e7:40:01:d7:1a:5a: d5:98:1d:14:e3:75:6e:91:02:46:53:f1:92:e1:25: d7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B1:39:8C:0C:3B:A4:16:17:AB:45:CA:96:F7:AA:CF:55:7A:D5:D9 X509v3 Authority Key Identifier: keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:1a:e7:be:24:12:b0:d3:11:e2:86:6d:a0:92:57:11:72:c6: f9:45:01:c3:1c:fe:29:19:7c:a8:88:7b:7c:93:6c:2c:a9:4d: b7:c7:6c:16:b2:da:40:a3:9b:10:d4:85:9d:aa:71:f7:4a:03: 1c:46:af:e7:fa:b1:c8:79:51:9e:c9:34:7d:cc:80:e5:bd:52: 13:0e:2e:72:50:56:4c:ca:24:1c:70:a8:d5:2f:30:d5:33:7f: 8b:b8:83:bc:f6:78:dc:07:03:5f:13:a9:95:c1:e3:25:98:61: 6c:44:99:81:8e:2d:f5:d1:2c:2f:89:cb:89:5b:7d:f4:d2:83: 0f:8b:9e:57:28:1f:f1:3f:3e:4e:dc:9c:19:13:21:72:e1:97: a5:cf:69:92:ba:0c:c1:5d:a2:fc:1d:c8:76:d6:1f:cb:d2:e7: de:30:e1:47:32:0e:07:ab:5a:a3:c8:20:78:11:88:43:64:70: 9b:e4:3d:57:93:e2:da:78:56:88:df:05:39:13:2c:0a:2a:44: de:d3:96:3a:02:00:d5:5e:6d:b1:19:cc:4f:fe:3e:ec:fe:d2: 9f:d5:a0:30:eb:9d:fb:42:5e:50:d6:4c:5c:3f:f9:b7:56:f6: 95:56:a3:4a:54:8c:08:22:2a:9a:70:a7:9b:e4:66:6e:1f:38: 4e:60:a1:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ0MkExMTAvBgNVBAUTKDQ0MjFGM0E5RDdFNDFENkY0N0I3ODZGREQzRTdBODhE RTQyQjA3QjkwHhcNMjUxMjA0MjMzMzIzWhcNMjUxMjExMjMzMzIzWjAYMRYwFAYD VQQDEw02OTMyMWE0My1jZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9Oa23AAgoz9jhrr+WWwZicAMMNyHbbAfoVCOpX7V+IVwDQCrS1oez7B4IQV a58km+o11juUmVGJs5h/p3ohRusu/MUsQl9V6n0NQAShjRCcwZNlF4nkCEDtiNht il2n3LgdojjsW7vGDk6nVy3ivdZeEx6gBOqSd2QdWaTSWOAE0cF/7tCcaw64WkUx HYaSO/jCV9AoqeqUxZAw/vGjHKqxUduC9m31VD4RqUaZCoFh8zwQdk5IVJ/d8HOt s1WiOd99VEvrpec7mgkmEkHQmD9joppB7hBX3eBwbExzfIBlpRfToNovA/3nQAHX GlrVmB0U43VukQJGU/GS4SXXIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGxOYwM O6QWF6tFypb3qs9VetXZMB8GA1UdIwQYMBaAFEQh86nX5B1vR7eG/dPnqI3kKwe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDQyQS9BQjRFNTI0NEZD MzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hXOUh0NGI5MC1lb2plUXJC N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JDSHpxZGZrSFc5SHQ0YjkwLWVvamVRckI3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDQyQS9BQjRFNTI0NEZDMzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hX OUh0NGI5MC1lb2plUXJCN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjGue+JBKw0xHihm2gklcRcsb5RQHDHP4pGXyoiHt8k2wsqU23x2wW stpAo5sQ1IWdqnH3SgMcRq/n+rHIeVGeyTR9zIDlvVITDi5yUFZMyiQccKjVLzDV M3+LuIO89njcBwNfE6mVweMlmGFsRJmBji310SwvicuJW3300oMPi55XKB/xPz5O 3JwZEyFy4Zelz2mSugzBXaL8Hch21h/L0ufeMOFHMg4Hq1qjyCB4EYhDZHCb5D1X k+LaeFaI3wU5EywKKkTe05Y6AgDVXm2xGcxP/j7s/tKf1aAw6537Ql5Q1kxcP/m3 VvaVVqNKVIwIIiqacKeb5GZuHzhOYKHV -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:48 2025 by rpki-client