This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: glIXx/apTc934m3QtXR7Raa5/XwxYYq20Otjlwk63zc= Subject key identifier: BD:34:E0:D6:31:AA:0E:9E:43:2A:32:EF:D0:85:29:B1:1D:A3:0C:46 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 01E0 Signing time: Fri 05 Dec 2025 01:00:54 +0000 Manifest this update: Fri 05 Dec 2025 01:00:53 +0000 Manifest next update: Fri 12 Dec 2025 01:00:53 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: Z0ytPVi5k3sb4i6VTLTEK3MZle4T3tNl0X/Qd8/zDVw=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: UaxkzwEU7Uh70PtMMkf/dHGEWq655rIu4QsEPhurB3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Dec 5 01:00:53 2025 GMT Not After : Dec 12 01:00:53 2025 GMT Subject: CN=69322ec5-06a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d3:4b:d7:8e:c1:72:81:e9:59:9a:3e:2a:59: fa:fb:d8:bf:9d:b4:74:48:48:c5:5c:bd:42:bd:95: 42:a5:c5:eb:a7:04:28:92:f6:fe:bf:d4:62:4f:7d: 01:36:92:b5:96:05:e1:2a:d2:c0:92:c7:26:cd:06: f9:05:97:6d:a0:4a:82:62:fd:ee:51:0b:27:f6:e6: 48:5f:41:07:fb:ea:e5:2d:3e:58:23:fa:db:e3:7c: c6:e1:8e:2b:b3:91:f6:1a:6f:08:6b:86:d5:21:dc: ba:06:42:31:ff:88:3a:b7:3f:49:9d:1d:69:17:db: 3a:6a:d5:16:3f:6c:04:71:82:77:11:96:be:74:5f: 34:a3:a3:6d:a5:31:a0:af:f6:ff:f4:cf:3d:ca:71: 65:71:89:4f:5e:3b:bf:94:29:a4:9c:ac:0d:c2:ed: d6:23:27:e8:fb:a1:67:92:4b:73:3c:7d:ea:61:9e: 98:e6:d8:67:41:b5:f4:65:f3:b2:f3:de:e7:3d:ef: be:84:86:09:3d:58:b8:2b:60:48:db:4a:e9:28:5a: 91:59:21:03:2a:8d:64:f1:0a:6c:be:cd:8f:10:9e: 61:26:5f:c8:49:2c:6d:9a:11:7f:b0:96:11:b4:04: 61:f9:34:c7:5a:60:68:2b:6e:cf:75:ae:ba:59:da: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:34:E0:D6:31:AA:0E:9E:43:2A:32:EF:D0:85:29:B1:1D:A3:0C:46 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:07:7e:6a:0e:af:0c:b5:98:cd:16:6d:08:87:08:21:a8:e8: ad:59:21:06:89:a1:fe:9b:de:44:39:a5:cb:37:78:91:4b:34: d8:23:87:b6:96:93:d4:a1:cd:7e:27:52:91:68:49:1b:d3:04: f7:c2:4f:f9:4f:41:07:59:d5:4a:e7:b3:9c:fc:e8:08:eb:17: b9:88:d4:2e:67:d7:50:f1:9e:5c:62:ee:7f:c4:a6:07:3b:20: 95:6b:ee:28:53:2b:ae:46:53:a6:05:48:48:84:8f:1f:b7:31: 95:4d:aa:ed:aa:29:c1:c3:82:ea:34:48:6c:41:58:0e:45:d3: a9:26:bd:a2:a3:53:f1:e4:a4:0f:85:13:44:77:5f:b8:be:19: e8:cc:c3:8b:d3:ee:11:c7:b6:a1:01:a3:fd:61:19:52:8a:f3: bc:31:1b:33:ef:b8:2c:2a:c0:b0:95:f8:dd:23:17:3c:70:a0: fa:2f:64:25:19:46:03:6a:59:0d:02:19:84:8b:65:15:f6:82: 63:12:75:94:76:e1:ec:1f:cf:f8:cb:1d:56:3c:d6:60:d3:5e: c3:5c:72:69:72:17:38:34:29:87:5d:44:11:2f:d2:13:8b:03: a9:d8:96:a9:38:0c:94:9b:6a:ce:8a:86:43:45:a1:7b:10:ef: 7e:7b:d5:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjUxMjA1MDEwMDUzWhcNMjUxMjEyMDEwMDUzWjAYMRYwFAYD VQQDEw02OTMyMmVjNS0wNmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdNL147BcoHpWZo+Kln6+9i/nbR0SEjFXL1CvZVCpcXrpwQokvb+v9RiT30B NpK1lgXhKtLAkscmzQb5BZdtoEqCYv3uUQsn9uZIX0EH++rlLT5YI/rb43zG4Y4r s5H2Gm8Ia4bVIdy6BkIx/4g6tz9JnR1pF9s6atUWP2wEcYJ3EZa+dF80o6NtpTGg r/b/9M89ynFlcYlPXju/lCmknKwNwu3WIyfo+6FnkktzPH3qYZ6Y5thnQbX0ZfOy 897nPe++hIYJPVi4K2BI20rpKFqRWSEDKo1k8Qpsvs2PEJ5hJl/ISSxtmhF/sJYR tARh+TTHWmBoK27Pda66WdprWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL004NYx qg6eQyoy79CFKbEdowxGMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlB35qDq8MtZjNFm0IhwghqOitWSEGiaH+m95EOaXLN3iRSzTYI4e2 lpPUoc1+J1KRaEkb0wT3wk/5T0EHWdVK57Oc/OgI6xe5iNQuZ9dQ8Z5cYu5/xKYH OyCVa+4oUyuuRlOmBUhIhI8ftzGVTartqinBw4LqNEhsQVgORdOpJr2io1Px5KQP hRNEd1+4vhnozMOL0+4Rx7ahAaP9YRlSivO8MRsz77gsKsCwlfjdIxc8cKD6L2Ql GUYDalkNAhmEi2UV9oJjEnWUduHsH8/4yx1WPNZg017DXHJpchc4NCmHXUQRL9IT iwOp2JapOAyUm2rOioZDRaF7EO9+e9We -----END CERTIFICATE-----Generated at Sun Dec 7 02:04:18 2025 by rpki-client