This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: WVmdeu9d7xwt1YQdvZ+asHKOGVOR8G+dIBtmy1Na5rs= Subject key identifier: 04:A3:96:F6:EF:21:46:E6:1B:F2:D8:BF:00:6D:06:AB:1F:0A:88:77 Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 0247 Signing time: Sun 21 Dec 2025 01:03:47 +0000 Manifest this update: Sun 21 Dec 2025 01:03:46 +0000 Manifest next update: Sun 28 Dec 2025 01:03:46 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: rdMd0aM4Q1gimJvwvAB+oyU62D5dHfugNDc1RSYZvg4=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: OQgU1fqpb861fD2zmKo8rKBXP1JjJTjguqm2j7NIGDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: Dec 21 01:03:46 2025 GMT Not After : Dec 28 01:03:46 2025 GMT Subject: CN=69474772-c05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:2a:02:3b:04:d6:83:32:ac:d0:bc:ce:ba: 11:90:0a:13:4f:79:69:60:c2:ec:b5:e5:cb:64:8b: dc:68:c5:7f:1b:af:27:89:5f:af:14:de:e2:20:4f: e3:31:87:ee:7c:a7:1a:1c:34:9a:5f:a3:7c:95:5a: e5:62:76:2c:82:a7:15:04:81:40:6b:ac:fd:16:4e: 96:cd:23:e6:4c:42:59:1c:9f:29:60:a7:03:59:2c: 35:f0:4c:dc:72:0c:7b:df:6b:4e:7d:63:07:c1:74: 5f:63:6f:7a:38:64:ce:4a:40:c9:ec:8e:43:17:5f: 6b:66:f0:a8:0d:3b:4b:6c:0f:b5:11:7f:e5:17:85: 2c:45:0b:7f:b6:19:c2:98:86:b3:0b:4c:21:21:36: b5:c4:20:78:a8:66:aa:07:86:12:b5:4f:13:78:e0: 01:81:11:9e:18:ae:ad:8f:16:b4:a4:15:c9:1a:e2: 2b:f6:d1:0f:23:4d:8a:4e:ec:bc:b8:43:81:5d:da: 37:11:ed:4c:a9:94:59:e8:e1:13:11:57:ea:82:6c: c6:46:b9:bf:f5:c7:3e:42:82:ce:73:fe:3b:bf:20: 6d:c3:76:29:4c:9c:76:c5:7f:68:1d:7e:d9:c7:64: c4:8e:fc:3c:ac:8f:de:45:e0:26:11:82:20:9d:b7: 6a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A3:96:F6:EF:21:46:E6:1B:F2:D8:BF:00:6D:06:AB:1F:0A:88:77 X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:03:83:fb:f7:9a:9c:ec:38:27:db:fb:e4:60:dd:2f:ca:f8: 11:32:ec:98:f1:fd:ad:28:1e:9f:37:2e:c1:f6:be:fa:5e:87: 40:c1:75:d4:d0:48:a4:b8:05:8c:c9:bf:fe:3f:31:a8:13:ba: 6d:35:bc:ba:e0:48:0a:6a:cf:1f:2c:80:64:80:25:81:d1:9b: a2:a0:51:f6:9b:6f:c0:38:a7:e3:29:fc:7f:07:58:83:39:c3: dc:b8:fb:82:7d:c8:d1:33:17:ac:bd:46:93:e5:e4:7c:45:a6: c9:ec:fe:a5:85:57:4f:f8:7b:77:1f:25:e1:64:26:ce:7c:aa: 5e:e2:73:e4:b9:fe:6d:24:34:02:b3:5e:27:4b:c8:5c:b4:54: 20:20:5d:5f:5b:41:fc:c0:44:6a:a2:08:f6:06:36:d5:77:e8: 6a:21:af:12:15:48:83:3f:e2:1e:b1:5f:cb:02:ff:e0:63:87: 85:09:9e:ad:44:33:4d:d8:ce:16:d1:29:99:0b:1d:33:30:37: 07:19:bd:4e:61:61:2c:9e:12:5b:d9:ac:2a:2c:f3:94:03:c3: 39:33:d1:bf:5f:7c:be:fc:7c:70:b3:67:ca:5f:fe:11:bd:67: 4b:36:7c:6a:5d:1d:8f:b6:55:f2:94:f9:12:6a:d2:d5:9f:82: 4c:72:ef:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjUxMjIxMDEwMzQ2WhcNMjUxMjI4MDEwMzQ2WjAYMRYwFAYD VQQDDA02OTQ3NDc3Mi1jMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjacqAjsE1oMyrNC8zroRkAoTT3lpYMLsteXLZIvcaMV/G68niV+vFN7iIE/j MYfufKcaHDSaX6N8lVrlYnYsgqcVBIFAa6z9Fk6WzSPmTEJZHJ8pYKcDWSw18Ezc cgx732tOfWMHwXRfY296OGTOSkDJ7I5DF19rZvCoDTtLbA+1EX/lF4UsRQt/thnC mIazC0whITa1xCB4qGaqB4YStU8TeOABgRGeGK6tjxa0pBXJGuIr9tEPI02KTuy8 uEOBXdo3Ee1MqZRZ6OETEVfqgmzGRrm/9cc+QoLOc/47vyBtw3YpTJx2xX9oHX7Z x2TEjvw8rI/eReAmEYIgnbdqywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASjlvbv IUbmG/LYvwBtBqsfCoh3MB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFA4P795qc7Dgn2/vkYN0vyvgRMuyY8f2tKB6fNy7B9r76XodAwXXU 0EikuAWMyb/+PzGoE7ptNby64EgKas8fLIBkgCWB0ZuioFH2m2/AOKfjKfx/B1iD OcPcuPuCfcjRMxesvUaT5eR8RabJ7P6lhVdP+Ht3HyXhZCbOfKpe4nPkuf5tJDQC s14nS8hctFQgIF1fW0H8wERqogj2BjbVd+hqIa8SFUiDP+IesV/LAv/gY4eFCZ6t RDNN2M4W0SmZCx0zMDcHGb1OYWEsnhJb2awqLPOUA8M5M9G/X3y+/Hxws2fKX/4R vWdLNnxqXR2PtlXylPkSatLVn4JMcu9U -----END CERTIFICATE-----Generated at Sun Dec 21 22:10:07 2025 by rpki-client