This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: WqXyiMcF8i3pI/kbbGLsaUS4WTmpYxsbB4opzO5qm9U= Subject key identifier: 73:94:C1:FE:63:4E:61:6A:53:60:C5:92:8F:5F:3C:6C:04:1B:BD:B5 Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 0240 Signing time: Sun 07 Dec 2025 00:23:27 +0000 Manifest this update: Sun 07 Dec 2025 00:23:27 +0000 Manifest next update: Sun 14 Dec 2025 00:23:27 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: XK5kIGvh/7Zx1ddROAtCxByAfBW9+AkRnOLoanyxelM=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: OQgU1fqpb861fD2zmKo8rKBXP1JjJTjguqm2j7NIGDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: Dec 7 00:23:27 2025 GMT Not After : Dec 14 00:23:27 2025 GMT Subject: CN=6934c8ff-37f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:f2:66:84:54:46:2b:7f:72:70:24:ec:29: e6:ed:4e:c2:3d:bf:b5:fb:10:3e:04:7a:6a:9a:d9: 8d:aa:7f:34:d1:7b:3b:09:13:63:34:18:27:7a:fd: 53:e4:59:b9:d0:e7:a9:7a:b9:b2:11:bd:a5:32:79: 91:1d:63:f1:00:54:69:da:d1:e1:f3:70:00:d3:9e: 5f:6c:7d:d1:1c:d8:24:30:98:19:03:00:e8:2f:16: 6f:b5:4b:4c:f7:20:8e:f8:76:8b:38:81:bd:46:13: eb:4c:29:9d:62:24:cb:b4:07:61:43:e6:03:35:c4: 1f:69:c9:cf:41:7d:f8:a9:9e:74:5d:80:88:4b:17: 81:56:33:32:d0:4e:b3:ae:b0:c2:13:0f:a4:1e:ae: e1:14:6c:55:4c:6a:de:63:c2:5c:b6:3b:82:28:03: f9:86:f1:09:64:27:70:95:eb:19:5d:66:55:60:ae: 20:32:c7:2a:84:f7:8f:64:23:b3:94:4b:22:94:a1: ee:4f:58:dd:72:73:8f:62:75:d0:c7:51:c1:b9:e3: 83:68:1b:01:04:c6:da:9c:3c:e6:cb:e1:78:db:55: e3:dd:64:3b:b6:d4:d9:e2:7f:b9:83:2c:da:b8:63: b3:5b:4f:47:4b:9b:8d:b7:63:24:b4:66:3b:7a:ec: 71:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:94:C1:FE:63:4E:61:6A:53:60:C5:92:8F:5F:3C:6C:04:1B:BD:B5 X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c8:2d:fe:b1:7b:84:08:de:8e:0c:d1:ab:7d:27:a1:ce:20: 74:8c:79:50:5d:de:41:6e:16:a0:e2:fd:2a:f9:4c:61:aa:37: 56:1e:34:72:d8:5c:50:ef:db:85:3d:79:c3:f9:6f:8f:b4:9f: 43:ba:e8:e4:ce:dc:58:23:75:8b:15:bc:7d:75:e3:7d:43:7f: 70:a9:de:49:fe:8f:3e:0f:26:13:23:3c:8e:f7:61:f7:68:25: 3d:1a:a6:58:cc:37:63:97:e3:36:0f:15:c0:b8:08:1e:8a:3f: c6:08:91:1d:a2:a5:8a:c4:12:28:61:9c:bd:4a:85:d5:d4:37: 77:4f:a2:57:8e:50:7b:83:f3:6c:23:89:0b:c6:fb:ae:ff:70: af:d3:54:ca:6e:37:34:7b:c6:46:10:f5:4a:4d:9d:91:e1:6c: d3:7b:a3:fd:6f:3c:60:1c:9a:fd:b2:54:db:b1:94:60:95:8e: f4:d1:6b:7d:be:fa:29:47:02:c7:99:c5:e7:40:4f:dc:6d:0a: 8c:fd:89:f0:c8:54:5d:25:04:bc:72:d2:81:0b:26:10:e0:21: 50:7a:2a:fa:8b:6a:a9:2d:5d:cd:7f:53:c9:cb:35:a4:38:0c: 4c:da:07:65:2e:62:8c:98:83:5e:ab:98:5c:df:11:f3:da:1d: 97:9e:89:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjUxMjA3MDAyMzI3WhcNMjUxMjE0MDAyMzI3WjAYMRYwFAYD VQQDEw02OTM0YzhmZi0zN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswfyZoRURit/cnAk7Cnm7U7CPb+1+xA+BHpqmtmNqn800Xs7CRNjNBgnev1T 5Fm50OepermyEb2lMnmRHWPxAFRp2tHh83AA055fbH3RHNgkMJgZAwDoLxZvtUtM 9yCO+HaLOIG9RhPrTCmdYiTLtAdhQ+YDNcQfacnPQX34qZ50XYCISxeBVjMy0E6z rrDCEw+kHq7hFGxVTGreY8JctjuCKAP5hvEJZCdwlesZXWZVYK4gMscqhPePZCOz lEsilKHuT1jdcnOPYnXQx1HBueODaBsBBMbanDzmy+F421Xj3WQ7ttTZ4n+5gyza uGOzW09HS5uNt2MktGY7euxxrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOUwf5j TmFqU2DFko9fPGwEG721MB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwyC3+sXuECN6ODNGrfSehziB0jHlQXd5Bbhag4v0q+UxhqjdWHjRy 2FxQ79uFPXnD+W+PtJ9DuujkztxYI3WLFbx9deN9Q39wqd5J/o8+DyYTIzyO92H3 aCU9GqZYzDdjl+M2DxXAuAgeij/GCJEdoqWKxBIoYZy9SoXV1Dd3T6JXjlB7g/Ns I4kLxvuu/3Cv01TKbjc0e8ZGEPVKTZ2R4WzTe6P9bzxgHJr9slTbsZRglY700Wt9 vvopRwLHmcXnQE/cbQqM/YnwyFRdJQS8ctKBCyYQ4CFQeir6i2qpLV3Nf1PJyzWk OAxM2gdlLmKMmINeq5hc3xHz2h2Xnonr -----END CERTIFICATE-----Generated at Sun Dec 7 02:46:19 2025 by rpki-client