This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json) Hash identifier: M4vJYUq83ww0pEmaQSy4ysAXCG4xockrWmj6YIv1FZg= Subject key identifier: E5:B1:EE:35:E8:83:8F:6A:D2:8C:E3:7A:A3:F5:D0:80:32:9E:CA:12 Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft Manifest number: 01EC Signing time: Fri 05 Dec 2025 01:09:27 +0000 Manifest this update: Fri 05 Dec 2025 01:09:26 +0000 Manifest next update: Fri 12 Dec 2025 01:09:26 +0000 Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: OlLtaCaR+2T1VZp6uS9NHYzI33xqCqSAcBPr878zu5Q=) 2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: TD7salmLrRM34euIo8G4Ct9yO9PS+fagaxM6vGI2MEw=) 3: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: fSxpUr+WUEiMsQuXQ14Z3BJW2UDp3SS+KK2DrcMSuYE=) 4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: ihXElke8srSYYptYUqBX48/+59ysvth9EZ73na0o1PM=) 5: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: uvhIRu3Zl3QRrUhy2ZG8t4bZnlI9E1gwDxFwYKld2lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Dec 5 01:09:26 2025 GMT Not After : Dec 12 01:09:26 2025 GMT Subject: CN=693230c7-69d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:9e:49:02:66:04:b2:ed:d3:49:67:8a:9b: ef:5e:65:17:b7:62:f6:ec:0e:4c:e1:03:97:69:61: 72:f7:1f:b7:27:0f:82:d5:c7:45:6f:41:3c:24:09: ca:5e:c4:13:4a:e2:68:b8:49:79:cb:27:ec:af:11: 41:82:04:58:6c:37:cf:f4:cf:2e:94:f9:d8:e8:5a: 8d:3b:63:d6:b5:31:27:c3:69:ab:d2:52:ce:03:b8: 7a:91:2a:7e:e4:e8:23:75:83:03:e3:1b:13:55:3e: e1:d3:a1:46:68:db:cd:72:49:1e:bf:ef:e3:07:39: 36:2e:9a:c7:49:a9:ca:5f:05:f5:9f:d4:c7:f8:fe: f6:40:53:39:c6:b8:6a:70:f5:28:a7:7e:5c:01:62: 88:5d:d3:ac:b9:93:fd:ac:2b:6a:db:18:7c:f2:6f: e3:8e:3d:54:07:2e:64:51:6f:10:eb:d0:d9:0f:b3: da:57:66:38:62:7b:fe:d7:39:2e:13:09:b8:be:22: 24:18:47:9b:19:d3:a7:53:d3:f4:77:ff:7d:0c:cd: d8:0d:7c:b5:5d:89:1b:aa:ab:71:e7:af:ff:59:98: 3d:c6:52:76:6a:5f:fc:a5:68:63:35:ef:93:63:40: 79:5a:ee:e0:50:d6:72:9c:ce:8b:ad:36:18:97:c3: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B1:EE:35:E8:83:8F:6A:D2:8C:E3:7A:A3:F5:D0:80:32:9E:CA:12 X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:41:15:97:fd:83:c5:db:96:29:4e:38:cc:bf:d7:a3:65:de: 52:f2:7b:dc:54:6c:da:1d:be:7b:8d:bb:53:05:df:34:5d:38: d8:41:a7:12:a4:c6:a8:9f:8c:fe:14:15:8e:24:27:85:f8:ad: 3e:65:3e:ed:35:75:2f:97:6b:c0:56:52:84:1e:42:fc:17:6f: 14:a1:e9:26:c4:00:3d:ff:e1:7e:31:3b:bd:f3:c4:e3:a9:54: 29:08:79:8a:df:5b:38:36:da:98:fe:e0:cf:14:28:9e:8e:4e: ea:17:5e:c4:d8:03:69:a4:8d:4c:b6:97:45:a5:e2:99:d9:2b: 1d:fe:10:7f:00:a8:65:37:fe:a5:ca:af:b5:6d:46:f0:4c:a2: 85:73:af:f4:26:a6:ec:e6:22:59:a1:1b:3a:35:31:c4:e1:d4: c0:ec:eb:42:ac:90:59:33:fc:df:72:52:b7:4a:3b:dc:f5:a8: 12:a7:47:69:b5:d4:37:65:97:d4:c9:55:02:be:08:69:2c:31: a5:6e:bc:cb:8a:4f:22:21:38:0b:7d:67:04:32:f4:d3:bb:d9: 4e:90:d7:41:dc:a5:c7:b0:ea:2f:23:3a:16:30:fc:d8:c7:47: 1c:8c:e6:94:85:ad:57:80:b5:aa:3b:aa:48:b0:39:e9:2d:95: 25:f8:34:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjUxMjA1MDEwOTI2WhcNMjUxMjEyMDEwOTI2WjAYMRYwFAYD VQQDEw02OTMyMzBjNy02OWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/WeSQJmBLLt00lnipvvXmUXt2L27A5M4QOXaWFy9x+3Jw+C1cdFb0E8JAnK XsQTSuJouEl5yyfsrxFBggRYbDfP9M8ulPnY6FqNO2PWtTEnw2mr0lLOA7h6kSp+ 5OgjdYMD4xsTVT7h06FGaNvNckkev+/jBzk2LprHSanKXwX1n9TH+P72QFM5xrhq cPUop35cAWKIXdOsuZP9rCtq2xh88m/jjj1UBy5kUW8Q69DZD7PaV2Y4Ynv+1zku Ewm4viIkGEebGdOnU9P0d/99DM3YDXy1XYkbqqtx56//WZg9xlJ2al/8pWhjNe+T Y0B5Wu7gUNZynM6LrTYYl8NqlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWx7jXo g49q0ozjeqP10IAynsoSMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm ZC1TT0c3WGZLWktjNTllTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPQRWX/YPF25YpTjjMv9ejZd5S8nvcVGzaHb57jbtTBd80XTjYQacS pMaon4z+FBWOJCeF+K0+ZT7tNXUvl2vAVlKEHkL8F28UoekmxAA9/+F+MTu988Tj qVQpCHmK31s4NtqY/uDPFCiejk7qF17E2ANppI1MtpdFpeKZ2Ssd/hB/AKhlN/6l yq+1bUbwTKKFc6/0Jqbs5iJZoRs6NTHE4dTA7OtCrJBZM/zfclK3Sjvc9agSp0dp tdQ3ZZfUyVUCvghpLDGlbrzLik8iITgLfWcEMvTTu9lOkNdB3KXHsOovIzoWMPzY x0ccjOaUha1XgLWqO6pIsDnpLZUl+DSv -----END CERTIFICATE-----Generated at Sat Dec 6 16:08:14 2025 by rpki-client