This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: zbv2JnGRb6n/bSkyNM43g7Hh/OiYT2e7Pq4BZcCpfl8= Subject key identifier: 00:E6:87:60:46:DC:87:4F:21:F9:D0:19:73:B0:EF:A5:51:3A:9B:C4 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 059D Signing time: Thu 18 Dec 2025 22:36:50 +0000 Manifest this update: Thu 18 Dec 2025 22:36:50 +0000 Manifest next update: Thu 25 Dec 2025 22:36:50 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: Amr3tOhe27k9qMtRjKOWixxO5l5wqPEqIx43nz2ozjQ=) 2: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: mLHQ8FPso+ZmAaHO2o/MCAMgyAvNWTYy5WsKEiwbpt0=) 3: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: osBPg0SLfRG0eb1YC88FnRgXyZmnCWV1UAz6jQOFPa8=) 4: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: Px42Wf8a/plz9LcLndqURmspCg6cQtfr3BUR2GqJiJs=) 5: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 2jt6Xm58KXfWaDCwoL1QNNF6hftEV3g4TXU+Cro75w8=) 6: EDC6896617B611F08E260814C4F9AE02.roa (hash: bppqSZ8PSCotLg3otrjVRqyexBIsOl6v9mc32VyO/nY=) 7: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: tUYKyj51w8FY5qrfQOEMkIv2L7xe24UEi8KjbC1Ydgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Dec 18 22:36:50 2025 GMT Not After : Dec 25 22:36:50 2025 GMT Subject: CN=69448202-9413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f7:99:ef:1a:38:59:42:4d:99:6f:33:03:68: 5e:6d:5d:02:69:6a:62:cf:49:35:b3:eb:7e:bb:18: 85:ff:c5:cd:73:14:76:c5:7a:fe:cb:af:22:34:f8: 63:57:20:4d:7d:3b:8c:ad:83:d2:6d:73:51:b3:1f: 76:2c:e9:32:36:8c:03:ae:ba:e6:53:99:eb:36:83: 54:4b:ce:ae:e4:10:cb:69:29:1b:12:34:ea:b8:aa: 99:93:da:7d:ce:ea:dd:e7:12:f3:32:cb:bb:03:37: 44:1a:8a:f7:05:8b:ee:40:fa:00:48:20:5b:bd:6d: 32:a3:51:67:cf:84:56:3d:85:17:9c:d7:c8:8f:6b: 6b:11:40:46:a8:07:71:66:d9:bd:9e:90:d8:26:ec: 57:e5:4d:94:3c:0c:ca:a7:83:67:60:e0:f8:3b:21: 6f:b4:01:37:19:c4:91:67:fb:49:04:bf:57:4f:c2: 17:54:c4:4c:59:20:76:9e:14:17:d8:9e:f8:a7:30: 70:43:d1:42:43:e0:b2:43:86:c5:f4:f3:ec:cd:07: 32:89:93:f4:3e:c0:2c:76:65:10:6d:d1:06:2f:60: 34:d8:59:d8:ed:d5:82:e3:2c:76:92:86:d1:d5:84: 03:58:74:11:fc:3b:9f:cd:6f:10:fd:79:c6:03:40: ab:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E6:87:60:46:DC:87:4F:21:F9:D0:19:73:B0:EF:A5:51:3A:9B:C4 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:cf:b9:e4:77:b4:70:83:1e:be:e4:75:6b:ea:c1:d2:60:42: 94:93:24:74:50:2b:fd:64:b8:6a:69:02:50:e6:bf:3e:30:c9: 30:e7:dd:19:bc:f0:7d:d4:47:e7:0f:9c:1f:03:b9:b8:37:ac: fa:77:aa:e9:41:2c:9b:36:13:74:69:57:de:8b:c6:a3:9a:91: 38:f9:f0:56:47:c8:58:de:67:b4:ec:fe:78:e8:37:af:ed:dd: 22:0a:2c:4f:6a:43:d8:1b:62:19:b9:84:86:1e:bf:cd:28:1f: 05:c2:ca:54:f2:e8:98:90:75:48:87:4a:4f:f6:7c:d9:93:a7: 3a:c1:6b:2a:2e:b7:fc:b7:91:b6:b6:e4:35:19:e2:40:0e:98: 15:ba:89:18:e0:e8:33:e7:30:71:07:a7:03:a8:2c:8e:4d:4c: 4a:33:42:18:93:07:34:0d:78:45:ee:54:5d:90:5f:11:6e:ed: b1:1d:ec:80:0c:bb:12:f8:09:28:8c:d8:cc:f8:f9:36:35:a1: ca:44:c6:3f:d7:f3:1a:9a:f6:2b:90:c3:80:65:f7:a0:21:29: 22:5b:50:64:2f:ef:19:e7:0c:1b:14:64:68:6e:ee:51:2a:4a: b3:81:7c:08:0f:2c:c8:55:fb:bf:2f:00:29:c4:46:23:aa:f8: ef:8d:93:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUxMjE4MjIzNjUwWhcNMjUxMjI1MjIzNjUwWjAYMRYwFAYD VQQDDA02OTQ0ODIwMi05NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/eZ7xo4WUJNmW8zA2hebV0CaWpiz0k1s+t+uxiF/8XNcxR2xXr+y68iNPhj VyBNfTuMrYPSbXNRsx92LOkyNowDrrrmU5nrNoNUS86u5BDLaSkbEjTquKqZk9p9 zurd5xLzMsu7AzdEGor3BYvuQPoASCBbvW0yo1Fnz4RWPYUXnNfIj2trEUBGqAdx Ztm9npDYJuxX5U2UPAzKp4NnYOD4OyFvtAE3GcSRZ/tJBL9XT8IXVMRMWSB2nhQX 2J74pzBwQ9FCQ+CyQ4bF9PPszQcyiZP0PsAsdmUQbdEGL2A02FnY7dWC4yx2kobR 1YQDWHQR/DufzW8Q/XnGA0CrDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADmh2BG 3IdPIfnQGXOw76VROpvEMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtz7nkd7Rwgx6+5HVr6sHSYEKUkyR0UCv9ZLhqaQJQ5r8+MMkw590Z vPB91EfnD5wfA7m4N6z6d6rpQSybNhN0aVfei8ajmpE4+fBWR8hY3me07P546Dev 7d0iCixPakPYG2IZuYSGHr/NKB8FwspU8uiYkHVIh0pP9nzZk6c6wWsqLrf8t5G2 tuQ1GeJADpgVuokY4Ogz5zBxB6cDqCyOTUxKM0IYkwc0DXhF7lRdkF8Rbu2xHeyA DLsS+AkojNjM+Pk2NaHKRMY/1/MamvYrkMOAZfegISkiW1BkL+8Z5wwbFGRobu5R KkqzgXwIDyzIVfu/LwApxEYjqvjvjZO5 -----END CERTIFICATE-----Generated at Sat Dec 20 17:05:48 2025 by rpki-client