This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: 3C4CPgkPEsxsIxwbnPudZw/MczSflxWCu7Z6w5Ou4oU= Subject key identifier: D3:C2:A5:F4:B9:C2:C4:FD:3E:1B:58:24:B1:94:3D:B6:BD:67:4F:FD Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1F13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1EAC Signing time: Sat 06 Dec 2025 15:45:44 +0000 Manifest this update: Sat 06 Dec 2025 15:45:43 +0000 Manifest next update: Sat 13 Dec 2025 15:45:43 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: W0PK+CWlDf1twsYUTcQS5c+8rqzLLco1u8eubWIAeP8=) 2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: k8fdwv5rzTaDtXtBZsqiUkV8XC7b+OcfzE/ub6rKQck=) 3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: gvLX79QC0oneTHE76I8R6q00s45CXy5f3BN+aeOdaHY=) 4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: y7U7IUcCA6tESox2ZQnKwXyYuQzSkLk1/ptcpy/PoWo=) 5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 12wcy6kglMD+Y/CrXGL0WyA5a+t7P6F61MDYVPldBpg=) 6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: MnJKAsOUe7fhYarq5YRYi6VyPa/ceYkVqy0DJJvEpAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7955 (0x1f13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Dec 6 15:45:43 2025 GMT Not After : Dec 13 15:45:43 2025 GMT Subject: CN=69344fa7-78b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:cd:5e:aa:43:de:cc:ee:41:a4:fc:4e:46: d4:d9:36:f4:98:51:e6:45:34:48:96:38:31:62:1b: 9d:fa:1f:be:58:6d:a4:ea:31:a4:53:95:29:da:5c: 09:76:9d:7f:b3:ba:07:be:41:4f:25:cb:7b:ec:cd: 38:09:40:01:8a:93:43:9a:d8:5d:63:6c:9f:68:97: 33:f7:03:dc:c8:3b:27:bf:ae:b2:18:b9:f8:d6:93: 0d:4d:17:67:50:e2:0d:57:73:aa:e2:a9:dd:67:59: 65:1d:1f:65:98:c6:33:ec:ae:d7:57:e1:9d:7a:69: d8:8f:30:a6:96:27:53:65:8e:f3:12:b8:40:db:61: f7:e5:d8:8a:b2:47:31:8c:68:08:9f:9c:d5:da:78: e0:8e:f7:f9:01:aa:00:82:bb:a5:38:16:78:84:82: b9:2f:20:55:fe:21:56:1a:3e:9d:2e:63:cb:f8:9b: eb:dd:5e:6b:ef:1e:89:ec:b5:aa:22:44:41:f2:ca: 4f:2d:6a:19:28:1b:6e:a4:bc:ec:41:1c:2a:55:02: f4:8b:99:a3:fc:ab:c8:a3:b4:82:20:80:fe:0f:65: a8:a2:f6:a0:49:62:21:94:3c:4e:31:ab:b3:9c:f2: a0:30:c3:86:22:f5:f1:b3:1a:c9:25:ea:f5:96:ca: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C2:A5:F4:B9:C2:C4:FD:3E:1B:58:24:B1:94:3D:B6:BD:67:4F:FD X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ac:5d:e2:8c:1d:0a:18:06:8c:a4:85:ab:f2:f1:d0:e6:a3: b3:55:40:95:4c:73:26:1d:7d:0d:c5:99:4a:10:64:bd:36:42: e1:9a:f7:b1:9c:31:7a:dd:39:22:a8:e7:fe:0e:b0:46:d0:be: b9:50:29:78:e1:f8:b4:dc:06:d1:d0:a8:a5:a7:69:05:27:a7: 11:24:bd:03:e9:8d:31:78:c1:ba:41:38:75:bb:e1:1c:6d:74: 8b:b9:55:be:50:44:4f:f2:df:32:6c:c3:e5:09:d3:21:5e:c1: 19:40:3b:62:af:53:70:43:d2:04:11:e4:74:a6:5e:be:0e:b5: dc:2b:d1:2e:a7:bd:9f:8b:57:27:d3:b7:e3:77:ad:1b:66:a3: 6d:41:69:6d:78:80:59:7e:7e:a0:d7:e1:3e:57:f7:b7:aa:09: ef:df:5c:82:d5:4b:6a:ce:da:92:d7:5a:5c:70:e9:76:b7:36: 3c:e3:4b:66:82:81:8b:10:b8:cd:ef:17:1c:5c:06:3c:cf:ba: 2f:a6:8b:3f:3e:6c:28:0f:9b:ad:9c:4f:c4:ef:83:80:19:ec: 12:b9:68:77:4c:cb:eb:4d:e6:e5:d0:cc:b7:93:ce:49:ed:03: 6f:23:f1:95:6b:fd:af:b6:4d:36:3c:01:43:bc:94:d6:43:ce: 43:b3:57:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUxMjA2MTU0NTQzWhcNMjUxMjEzMTU0NTQzWjAYMRYwFAYD VQQDEw02OTM0NGZhNy03OGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPLNXqpD3szuQaT8TkbU2Tb0mFHmRTRIljgxYhud+h++WG2k6jGkU5Up2lwJ dp1/s7oHvkFPJct77M04CUABipNDmthdY2yfaJcz9wPcyDsnv66yGLn41pMNTRdn UOINV3Oq4qndZ1llHR9lmMYz7K7XV+GdemnYjzCmlidTZY7zErhA22H35diKskcx jGgIn5zV2njgjvf5AaoAgrulOBZ4hIK5LyBV/iFWGj6dLmPL+Jvr3V5r7x6J7LWq IkRB8spPLWoZKBtupLzsQRwqVQL0i5mj/KvIo7SCIID+D2WoovagSWIhlDxOMauz nPKgMMOGIvXxsxrJJer1lsoPlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPCpfS5 wsT9PhtYJLGUPba9Z0/9MB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBErF3ijB0KGAaMpIWr8vHQ5qOzVUCVTHMmHX0NxZlKEGS9NkLhmvex nDF63TkiqOf+DrBG0L65UCl44fi03AbR0Kilp2kFJ6cRJL0D6Y0xeMG6QTh1u+Ec bXSLuVW+UERP8t8ybMPlCdMhXsEZQDtir1NwQ9IEEeR0pl6+DrXcK9Eup72fi1cn 07fjd60bZqNtQWlteIBZfn6g1+E+V/e3qgnv31yC1UtqztqS11pccOl2tzY840tm goGLELjN7xccXAY8z7ovpos/PmwoD5utnE/E74OAGewSuWh3TMvrTebl0My3k85J 7QNvI/GVa/2vtk02PAFDvJTWQ85Ds1dw -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:16 2025 by rpki-client