This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json) Hash identifier: z3E7j/eRxU9mEyxoz7w8lJANcbNlvwOjmg4feqzMZo4= Subject key identifier: E3:4C:53:27:FE:99:0A:9C:AB:6F:F5:DD:BB:4C:4E:B0:35:70:7A:42 Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft Manifest number: CB Signing time: Fri 05 Dec 2025 03:46:44 +0000 Manifest this update: Fri 05 Dec 2025 03:46:44 +0000 Manifest next update: Fri 12 Dec 2025 03:46:44 +0000 Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: BPWbFNFQH8RAAkLmnXd25soLxhcA1zYD95CSDJ+xL0c=) 2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: R/R3bvAWrcSSG+m64YLueklpEnFBLTnh4IWHEsstmx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Validity Not Before: Dec 5 03:46:44 2025 GMT Not After : Dec 12 03:46:44 2025 GMT Subject: CN=693255a4-a882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:82:78:67:d0:bb:86:19:04:4e:e4:ed:fa: 9e:6d:cf:b5:f5:ae:39:e4:96:69:65:b9:85:84:d1: d5:1c:1b:a5:ba:96:ac:4d:d9:39:ea:b9:5f:b2:1b: 89:6b:7f:bc:98:d2:bf:d7:3c:e4:6e:c0:7d:66:8c: c1:e6:f8:4f:b4:bb:d7:fa:51:8d:65:e2:e0:f6:a5: 78:69:82:f8:15:48:8a:a8:57:ca:77:22:aa:0c:a6: 02:b3:45:e5:78:6b:03:81:1e:80:09:a4:e4:6f:f8: 40:fa:2e:81:3b:d7:83:bb:1b:75:66:50:47:95:d3: b4:ff:f4:ba:cc:25:e6:62:6a:5d:e1:a6:55:29:17: fc:bf:87:bc:71:a1:67:dc:0b:ca:5f:a3:c3:64:a5: ca:df:95:1e:07:9f:24:69:e8:fc:3f:3c:32:c4:63: 61:b2:51:96:ef:1e:18:d6:f1:fe:73:9e:12:a3:71: 8e:e1:82:13:cf:d4:5e:2a:5f:45:89:32:63:b4:bd: ac:9a:ed:db:06:bd:5b:28:aa:c2:8f:b9:60:a1:47: 66:11:83:44:81:a9:eb:46:56:7a:77:45:39:b4:ac: 5d:5b:e8:8f:83:db:82:53:04:41:02:b0:1f:27:86: 03:06:8f:ad:cb:a8:fe:00:68:4e:66:c7:25:79:d5: 92:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4C:53:27:FE:99:0A:9C:AB:6F:F5:DD:BB:4C:4E:B0:35:70:7A:42 X509v3 Authority Key Identifier: keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:90:ed:6a:ec:91:58:10:92:de:33:34:57:df:6a:11:d6:15: da:3d:f0:a4:28:aa:36:d2:56:91:82:ba:0d:01:5b:b5:9a:f2: 74:3d:f2:6a:fe:f4:29:34:bc:16:18:0d:eb:09:43:8c:14:54: c1:c2:54:71:3d:17:fa:f6:bd:75:8e:eb:6b:c5:db:fb:63:8a: 2c:38:77:c3:86:44:5e:4a:6e:be:bc:99:9e:71:6d:ec:b8:b0: a2:ba:a9:41:75:a4:58:8e:da:9e:02:c8:4c:9e:ae:02:18:d6: 66:73:10:a9:c8:42:45:b4:d4:e2:f4:9f:b0:ef:46:6d:df:2a: 39:6f:8c:e8:b2:9a:f4:98:49:aa:71:46:9c:d9:1d:68:62:b4: 0a:19:c9:27:af:27:b6:ca:86:2d:a9:f4:0a:42:1d:06:5b:7b: 7d:c6:5b:e0:90:e7:b7:25:c5:99:a5:ff:ea:51:00:45:87:20: 77:88:a9:af:98:28:d8:ce:5a:ed:42:15:07:51:24:06:e5:38: 86:c5:6e:79:8a:88:e3:23:90:22:63:b1:e5:03:e2:7a:9d:a5: 27:46:a1:e2:50:99:d1:43:db:fa:e9:04:0c:4d:ff:89:bd:7b: 77:55:24:49:9d:65:fa:6b:ed:a6:20:b6:be:83:48:08:ec:68: 9a:69:8e:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBNDYxMTAvBgNVBAUTKEFDMjhEQzJBNTU0QjRFMzM5QTM5OUM5NjQyQjRDRTAy NjhBOERGQjAwHhcNMjUxMjA1MDM0NjQ0WhcNMjUxMjEyMDM0NjQ0WjAYMRYwFAYD VQQDEw02OTMyNTVhNC1hODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpmCeGfQu4YZBE7k7fqebc+19a455JZpZbmFhNHVHBulupasTdk56rlfshuJ a3+8mNK/1zzkbsB9ZozB5vhPtLvX+lGNZeLg9qV4aYL4FUiKqFfKdyKqDKYCs0Xl eGsDgR6ACaTkb/hA+i6BO9eDuxt1ZlBHldO0//S6zCXmYmpd4aZVKRf8v4e8caFn 3AvKX6PDZKXK35UeB58kaej8PzwyxGNhslGW7x4Y1vH+c54So3GO4YITz9ReKl9F iTJjtL2smu3bBr1bKKrCj7lgoUdmEYNEganrRlZ6d0U5tKxdW+iPg9uCUwRBArAf J4YDBo+ty6j+AGhOZscledWSmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONMUyf+ mQqcq2/13btMTrA1cHpCMB8GA1UdIwQYMBaAFKwo3CpVS04zmjmclkK0zgJoqN+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9EQkRBMkNDNDlD MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRqT2FPWnlXUXJUT0FtaW8z N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE0Ni9EQkRBMkNDNDlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRq T2FPWnlXUXJUT0FtaW8zN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqkO1q7JFYEJLeMzRX32oR1hXaPfCkKKo20laRgroNAVu1mvJ0PfJq /vQpNLwWGA3rCUOMFFTBwlRxPRf69r11jutrxdv7Y4osOHfDhkReSm6+vJmecW3s uLCiuqlBdaRYjtqeAshMnq4CGNZmcxCpyEJFtNTi9J+w70Zt3yo5b4zospr0mEmq cUac2R1oYrQKGcknrye2yoYtqfQKQh0GW3t9xlvgkOe3JcWZpf/qUQBFhyB3iKmv mCjYzlrtQhUHUSQG5TiGxW55iojjI5AiY7HlA+J6naUnRqHiUJnRQ9v66QQMTf+J vXt3VSRJnWX6a+2mILa+g0gI7GiaaY5p -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:38 2025 by rpki-client