This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json) Hash identifier: ivQTikJh65+GNRt25FWgPGhWCjT+pkV0oujK1TrW95A= Subject key identifier: 49:E2:2F:42:15:3F:9D:2B:EF:05:D0:A5:F9:C5:66:C2:4C:FF:CB:11 Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft Manifest number: 011A Signing time: Fri 05 Dec 2025 02:53:25 +0000 Manifest this update: Fri 05 Dec 2025 02:53:25 +0000 Manifest next update: Fri 12 Dec 2025 02:53:25 +0000 Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: XKUs1TOaLDq/xy/S9hyaDhLpaxxpHvwxeQIA4xj6C0I=) 2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: GcLg66G+nJPqXwCpBzyC3D0WjujSmh3tIwuu+y3/BEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA5F, serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Validity Not Before: Dec 5 02:53:25 2025 GMT Not After : Dec 12 02:53:25 2025 GMT Subject: CN=69324925-c950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:53:49:43:10:0b:4d:6a:fc:fe:65:0b:22:0d: 9b:46:28:5e:b8:64:f0:5b:05:da:0e:62:cd:1c:ae: e9:01:15:ec:bf:90:1d:a2:3e:b4:4b:24:41:eb:2b: f4:e3:4c:50:76:0b:6d:17:a9:38:d1:af:d9:88:d9: f0:4d:04:8e:9d:48:3a:93:e9:2e:1c:49:6a:ff:fb: 78:7a:c7:be:c1:34:e2:7f:eb:07:51:46:55:20:c0: 1d:47:45:52:12:6c:81:4a:78:e4:18:33:ad:b6:01: ce:12:b7:65:d2:12:51:f4:8e:f5:17:e1:78:83:5e: 43:b0:7f:0d:bd:48:39:77:4e:61:c1:37:98:40:67: 02:8c:91:20:4a:6f:b5:a3:0a:d0:be:36:a4:d4:fe: f8:7c:dd:9d:a0:d1:a4:4c:1a:c1:cd:19:d7:f9:35: 4f:ca:53:c3:1e:54:01:79:90:70:78:22:b8:ec:39: 55:3a:73:af:e7:67:a2:3a:30:43:aa:e8:4a:ac:5d: c7:de:5d:b8:34:ac:0f:af:d5:b8:9f:54:83:9a:89: 6d:d9:3a:79:b8:32:9d:a2:4c:81:bc:4c:73:1e:15: bc:4b:8e:6b:a3:8c:d8:d4:96:2f:31:49:84:b7:75: 0d:b6:9f:f7:8d:74:43:2f:dc:a5:1e:f1:6c:54:ff: 00:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E2:2F:42:15:3F:9D:2B:EF:05:D0:A5:F9:C5:66:C2:4C:FF:CB:11 X509v3 Authority Key Identifier: keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:04:69:74:56:d4:96:d9:bc:f4:0f:02:91:0b:72:19:d6:a7: 23:37:e9:60:91:5c:17:ae:57:66:0f:0c:84:6c:f6:3c:a9:42: 9a:58:7f:f5:d6:d6:98:45:ed:03:c9:ff:c0:ca:eb:ee:cc:a8: b2:12:ac:2c:6d:dd:6f:bc:a2:39:3b:fb:f7:7c:eb:ea:9b:dd: e1:80:82:4a:f2:55:f9:d0:cc:7e:5b:4c:6c:49:5e:cf:fd:90: 62:a8:58:71:30:0b:30:c8:b1:3b:ba:aa:ff:5d:a5:67:e8:b9: 2f:cf:2b:f2:b0:4e:fd:bb:67:e2:e9:48:b2:57:bb:e5:a5:2c: 0f:f4:2d:2d:db:27:55:49:67:3e:1f:7b:74:57:36:a5:d0:d1: 1c:72:31:e9:d5:6e:a5:d9:8c:2c:c3:ca:be:e4:73:ef:23:d8: 55:3b:c1:4d:db:bb:68:7d:0a:6f:54:01:c5:9e:94:f6:12:0d: 42:d4:2f:6a:dd:94:bd:c8:f9:a2:71:76:da:13:57:26:e3:68: 9b:67:d6:db:3f:f9:d5:81:54:95:af:2b:88:6b:db:f1:ed:5e: 3d:a5:73:f4:2b:56:b9:aa:4e:e2:aa:0b:d4:4a:b3:43:e9:4b: 0a:4b:6b:6d:97:b4:3e:42:75:94:8c:d0:f7:ee:5e:39:15:cc: 11:33:06:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNUYxMTAvBgNVBAUTKDA5QzdEOUU3RjI2M0RCMEI4QjgyMDFFN0QyOTNDQURF Q0I5N0NGOEMwHhcNMjUxMjA1MDI1MzI1WhcNMjUxMjEyMDI1MzI1WjAYMRYwFAYD VQQDEw02OTMyNDkyNS1jOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lNJQxALTWr8/mULIg2bRiheuGTwWwXaDmLNHK7pARXsv5Adoj60SyRB6yv0 40xQdgttF6k40a/ZiNnwTQSOnUg6k+kuHElq//t4ese+wTTif+sHUUZVIMAdR0VS EmyBSnjkGDOttgHOErdl0hJR9I71F+F4g15DsH8NvUg5d05hwTeYQGcCjJEgSm+1 owrQvjak1P74fN2doNGkTBrBzRnX+TVPylPDHlQBeZBweCK47DlVOnOv52eiOjBD quhKrF3H3l24NKwPr9W4n1SDmolt2Tp5uDKdokyBvExzHhW8S45ro4zY1JYvMUmE t3UNtp/3jXRDL9ylHvFsVP8A3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEniL0IV P50r7wXQpfnFZsJM/8sRMB8GA1UdIwQYMBaAFAnH2efyY9sLi4IB59KTyt7Ll8+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE1Ri80QjU5MDZCODIz RUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3dUxnZ0huMHBQSzNzdVh6 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjZlo1X0pqMnd1TGdnSG4wcFBLM3N1WHo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE1Ri80QjU5MDZCODIzRUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3 dUxnZ0huMHBQSzNzdVh6NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQBGl0VtSW2bz0DwKRC3IZ1qcjN+lgkVwXrldmDwyEbPY8qUKaWH/1 1taYRe0Dyf/AyuvuzKiyEqwsbd1vvKI5O/v3fOvqm93hgIJK8lX50Mx+W0xsSV7P /ZBiqFhxMAswyLE7uqr/XaVn6LkvzyvysE79u2fi6UiyV7vlpSwP9C0t2ydVSWc+ H3t0Vzal0NEccjHp1W6l2Ywsw8q+5HPvI9hVO8FN27tofQpvVAHFnpT2Eg1C1C9q 3ZS9yPmicXbaE1cm42ibZ9bbP/nVgVSVryuIa9vx7V49pXP0K1a5qk7iqgvUSrND 6UsKS2ttl7Q+QnWUjND37l45FcwRMwY+ -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:02 2025 by rpki-client