This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json) Hash identifier: dN4fjUCn77BLiZCUEYaT8Y00Flr9wYtJj9Nbz/src4Q= Subject key identifier: 33:E9:B3:9C:B8:BC:D1:CD:B6:51:72:AC:EF:6B:71:77:D7:89:9A:0F Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Certificate serial: 1C59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft Manifest number: 1C36 Signing time: Sat 06 Dec 2025 15:53:31 +0000 Manifest this update: Sat 06 Dec 2025 15:53:30 +0000 Manifest next update: Sat 13 Dec 2025 15:53:30 +0000 Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: ZvyTwzkLgoG+V9g1D87VK67jbJRejpdDHiaVbSBx7gw=) 2: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: l1Lp6717izpzzjuLJ/WIAZ1x52OL2D3LQu0E5xm6nH8=) 3: A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (hash: Lvu6iSz0EDxGsSvl67CYssjZj8LfNsaL4+wrYELLSYM=) 4: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: /yvn8ijOa8FBDJ5ASQ/Lery7dqjE4HE5gFGgvkPmpE0=) 5: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 06vkEMgrkkkWPxaN6n0p0hSzGNVGXFIfC5HD0mArdMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7257 (0x1c59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Validity Not Before: Dec 6 15:53:30 2025 GMT Not After : Dec 13 15:53:30 2025 GMT Subject: CN=6934517a-0cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:6b:2a:61:6c:fd:92:1d:42:0f:27:21:24: ef:77:d9:f9:59:1b:4a:e5:0f:92:b2:cf:de:52:f3: 1f:fc:6f:be:1b:4e:4d:1b:05:2a:1d:de:f9:02:1c: 41:c0:1f:ef:db:05:98:25:16:db:48:17:52:c8:10: db:6a:14:d8:f8:ec:89:4a:38:cc:bb:e6:e8:06:2e: aa:df:ed:56:ca:b3:33:e7:2c:ce:dd:66:e2:fd:5d: f0:95:86:db:b7:1c:1f:10:de:ad:6a:9f:8d:c8:15: 6a:d6:e3:1a:56:9c:f9:3b:57:9b:9e:df:8c:22:ea: 08:02:30:c1:9a:bc:52:80:ee:d3:e0:eb:50:7d:72: 69:84:25:99:2e:28:21:4d:be:d0:9b:dc:1c:62:b8: c5:14:96:4e:38:ad:7b:fc:26:20:e2:78:4f:66:0e: 97:15:82:e8:be:5f:c4:b7:48:b7:34:06:42:88:0f: 9a:22:99:8b:c4:c2:f0:78:be:24:a1:26:0d:e2:3e: c9:9a:48:9e:1d:4c:8c:dc:08:3d:a4:91:5c:09:86: 9b:42:92:2b:97:fe:a4:98:3d:02:b2:60:e8:fb:e4: a8:c7:35:de:17:8d:80:a2:dc:13:77:ac:ec:8b:46: c7:a0:63:af:09:59:f0:5f:ea:c2:7e:ff:ad:86:96: d1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E9:B3:9C:B8:BC:D1:CD:B6:51:72:AC:EF:6B:71:77:D7:89:9A:0F X509v3 Authority Key Identifier: keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7a:70:0a:f3:e0:0f:2e:59:4f:1b:1b:f6:df:b7:fe:8b:72: 10:f9:50:5a:17:c4:c6:92:64:43:88:1b:ae:94:d9:b0:80:17: 78:17:31:cb:4f:41:84:ea:8b:4f:d2:6a:f0:45:b0:a0:07:aa: 64:2b:23:a2:42:18:c1:62:e6:6f:a9:45:47:7b:f9:39:2b:62: bd:21:a5:17:b5:36:f7:1c:60:a5:48:26:42:72:b8:e1:91:28: 8b:96:18:94:90:cd:82:40:d0:48:0a:1a:1a:d9:c7:63:69:de: 37:5d:06:50:42:e3:bd:74:04:a4:33:32:9d:63:cb:9c:81:bd: f3:82:f8:9f:33:c3:8c:50:c2:7c:07:d3:ea:b5:99:41:3f:22: b3:84:2e:89:ad:1c:bd:b7:39:08:aa:2a:a3:bc:58:bb:65:83: ff:bf:cb:90:d6:b5:dd:05:d2:45:49:e3:53:27:ba:34:4b:bc: bc:ed:09:49:62:4e:5f:e7:4d:af:63:c2:d7:b6:45:23:81:81: 79:3b:fe:0b:22:9a:cc:6a:61:39:4e:d5:b8:ce:f8:2c:f7:58: 4e:7f:aa:5c:34:1d:c3:16:2b:88:eb:65:3e:87:d0:a9:d3:5b: af:4b:fa:2a:8f:c6:c7:3d:39:af:7d:d3:a8:53:9e:6e:89:bd: 04:cc:6f:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw MDNFNEJCNzUwHhcNMjUxMjA2MTU1MzMwWhcNMjUxMjEzMTU1MzMwWjAYMRYwFAYD VQQDEw02OTM0NTE3YS0wY2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gJrKmFs/ZIdQg8nISTvd9n5WRtK5Q+Sss/eUvMf/G++G05NGwUqHd75AhxB wB/v2wWYJRbbSBdSyBDbahTY+OyJSjjMu+boBi6q3+1WyrMz5yzO3Wbi/V3wlYbb txwfEN6tap+NyBVq1uMaVpz5O1ebnt+MIuoIAjDBmrxSgO7T4OtQfXJphCWZLigh Tb7Qm9wcYrjFFJZOOK17/CYg4nhPZg6XFYLovl/Et0i3NAZCiA+aIpmLxMLweL4k oSYN4j7JmkieHUyM3Ag9pJFcCYabQpIrl/6kmD0CsmDo++SoxzXeF42AotwTd6zs i0bHoGOvCVnwX+rCfv+thpbRaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPps5y4 vNHNtlFyrO9rcXfXiZoPMB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1 M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE3OC82OEQzMzQ5MEZENjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0Nj UFFieVNSblBySDRBUGt1M1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcenAK8+APLllPGxv237f+i3IQ+VBaF8TGkmRDiBuulNmwgBd4FzHL T0GE6otP0mrwRbCgB6pkKyOiQhjBYuZvqUVHe/k5K2K9IaUXtTb3HGClSCZCcrjh kSiLlhiUkM2CQNBIChoa2cdjad43XQZQQuO9dASkMzKdY8ucgb3zgvifM8OMUMJ8 B9PqtZlBPyKzhC6JrRy9tzkIqiqjvFi7ZYP/v8uQ1rXdBdJFSeNTJ7o0S7y87QlJ Yk5f502vY8LXtkUjgYF5O/4LIprMamE5TtW4zvgs91hOf6pcNB3DFiuI62U+h9Cp 01uvS/oqj8bHPTmvfdOoU55uib0EzG/Q -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:46 2025 by rpki-client