This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft File: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft (raw, json) Hash identifier: NAsZ0CC/KXytThtbw93ui51zXMParGUd4btWMVUbee4= Subject key identifier: 37:94:39:D1:AD:A7:FC:12:8E:DC:EF:91:C7:D0:3E:C5:95:B3:5F:8C Authority key identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 Certificate issuer: /CN=A91A2C5D/serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft Manifest number: 01CF Signing time: Fri 05 Dec 2025 01:58:24 +0000 Manifest this update: Fri 05 Dec 2025 01:58:24 +0000 Manifest next update: Fri 12 Dec 2025 01:58:24 +0000 Files and hashes: 1: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl (hash: glU2ElKm0EEw4z3hglgLfHCl6DsoUxGLaVZ7wqzRyzc=) 2: 218937DC5E5011F0B9404662C4F9AE02.roa (hash: AYUrmB0VmSIUZcI9YP+6cvDLUzAB6YwYDgaBWNY/PRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Validity Not Before: Dec 5 01:58:24 2025 GMT Not After : Dec 12 01:58:24 2025 GMT Subject: CN=69323c40-2f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:07:ec:4d:35:94:12:9c:90:a7:21:0f:a7:5a: 7a:12:34:96:3a:12:84:ab:f2:27:71:49:ab:0f:6e: 61:fc:ed:aa:3b:a6:11:a0:66:87:1f:76:5e:02:42: 9f:68:3b:91:c1:76:32:ec:3a:3e:96:4a:b7:0c:53: 1d:d1:a7:28:02:f9:dd:de:e1:32:31:48:6e:1a:66: ad:e5:d4:8c:6f:2f:41:55:7d:35:80:b7:ad:ca:69: 6d:a2:f9:e8:e2:49:73:86:7b:e6:15:ea:8b:d3:f5: 87:b3:85:73:c3:4c:40:c4:aa:f2:b3:f7:aa:69:e6: ef:aa:fd:84:4f:50:fe:f0:1f:9b:61:3f:7c:b4:2e: 97:fd:21:c5:99:30:85:51:8d:0d:a0:cd:e4:86:a1: 28:24:e4:1c:63:db:f7:84:55:1e:d9:69:2e:11:38: 54:7a:97:a1:ca:b1:36:7f:0c:c3:af:08:41:da:76: 30:10:58:26:c8:38:13:15:d7:94:b3:db:e1:b4:c6: d6:e9:89:54:06:b8:c4:5e:28:40:ed:dd:a3:4f:90: ba:c0:0d:e8:13:5e:9f:d7:3b:1b:9d:c9:d5:10:8b: 6c:23:08:be:1d:ef:3c:84:db:1e:a7:94:60:2b:11: a1:87:4d:a9:78:86:7d:53:e6:c4:c7:26:28:b8:d7: b5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:94:39:D1:AD:A7:FC:12:8E:DC:EF:91:C7:D0:3E:C5:95:B3:5F:8C X509v3 Authority Key Identifier: keyid:08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:95:18:2d:f3:21:19:a6:2f:c1:81:2f:a1:4b:da:ee:9f:3b: 37:d7:aa:f2:76:b4:e0:77:81:0d:f9:02:d0:a8:f2:ab:f7:dd: 91:7a:fe:9a:57:80:af:8e:0c:f8:61:58:db:75:65:62:d3:18: 69:d7:70:5e:66:0d:61:08:7f:42:2c:39:90:5a:e8:81:a1:e0: 2b:3b:0a:81:98:17:79:04:de:b9:42:ca:c6:47:97:b1:5e:e4: b3:0a:be:68:9a:6c:05:de:03:9f:f7:e7:fc:d9:15:e6:da:22: 2e:44:6b:47:27:49:df:bf:29:c4:ee:93:b8:40:ea:4d:b8:33: 1c:50:ea:ad:b6:fb:d8:27:5b:26:19:54:50:23:74:f8:f3:68: b6:cc:cd:46:c0:e4:dd:a6:14:ca:77:c4:a0:f1:cd:3c:10:42: b4:de:f5:cc:ae:b8:39:3a:87:1d:92:1e:e0:62:ac:f7:db:81: c6:a9:9c:23:7c:1c:b9:10:18:19:2a:93:bc:28:47:20:20:cb: b2:85:2e:1d:cf:40:68:c3:76:e1:e4:64:ba:34:dd:66:08:1f: 88:88:5a:a8:5b:fd:9d:f0:d2:61:80:1e:85:a8:08:4c:56:34: d7:c0:f9:1a:c0:cc:55:64:29:b6:70:2f:e3:64:3c:cb:75:c4: 3a:6d:e1:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MkM1RDExMC8GA1UEBRMoMDg3NzdGQTM4MUJGMjU4RTBDQUMzN0Q1MDlFRjBCQUM3 MDY2NDg0NDAeFw0yNTEyMDUwMTU4MjRaFw0yNTEyMTIwMTU4MjRaMBgxFjAUBgNV BAMTDTY5MzIzYzQwLTJmNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsB+xNNZQSnJCnIQ+nWnoSNJY6EoSr8idxSasPbmH87ao7phGgZocfdl4CQp9o O5HBdjLsOj6WSrcMUx3RpygC+d3e4TIxSG4aZq3l1IxvL0FVfTWAt63KaW2i+eji SXOGe+YV6ovT9YezhXPDTEDEqvKz96pp5u+q/YRPUP7wH5thP3y0Lpf9IcWZMIVR jQ2gzeSGoSgk5Bxj2/eEVR7ZaS4ROFR6l6HKsTZ/DMOvCEHadjAQWCbIOBMV15Sz 2+G0xtbpiVQGuMReKEDt3aNPkLrADegTXp/XOxudydUQi2wjCL4d7zyE2x6nlGAr EaGHTal4hn1T5sTHJii417WvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN5Q50a2n /BKO3O+Rx9A+xZWzX4wwHwYDVR0jBBgwFoAUCHd/o4G/JY4MrDfVCe8LrHBmSEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyQzVELzNCOURENDEwOTJD NDExRUVCNTIxQkI0OUM0RjlBRTAyL0NIZF9vNEdfSlk0TXJEZlZDZThMckhCbVNF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0hkX280R19KWTRNckRmVkNlOExySEJtU0VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy QzVELzNCOURENDEwOTJDNDExRUVCNTIxQkI0OUM0RjlBRTAyL0NIZF9vNEdfSlk0 TXJEZlZDZThMckhCbVNFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADyVGC3zIRmmL8GBL6FL2u6fOzfXqvJ2tOB3gQ35AtCo8qv33ZF6/ppX gK+ODPhhWNt1ZWLTGGnXcF5mDWEIf0IsOZBa6IGh4Cs7CoGYF3kE3rlCysZHl7Fe 5LMKvmiabAXeA5/35/zZFebaIi5Ea0cnSd+/KcTuk7hA6k24MxxQ6q22+9gnWyYZ VFAjdPjzaLbMzUbA5N2mFMp3xKDxzTwQQrTe9cyuuDk6hx2SHuBirPfbgcapnCN8 HLkQGBkqk7woRyAgy7KFLh3PQGjDduHkZLo03WYIH4iIWqhb/Z3w0mGAHoWoCExW NNfA+RrAzFVkKbZwL+NkPMt1xDpt4YU= -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:40 2025 by rpki-client