This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: cTRaDduZEXVv/4Plkiyci4urt5kX7Mc2vJ0/Rx/dsxQ= Subject key identifier: AA:7B:D0:BD:9F:A4:75:06:5B:1D:03:00:6F:6F:1B:CA:1B:77:76:96 Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 01CB Signing time: Thu 25 Dec 2025 02:00:32 +0000 Manifest this update: Thu 25 Dec 2025 02:00:32 +0000 Manifest next update: Thu 01 Jan 2026 02:00:32 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: HdUGRJEO7tSr8CCukMKtDCGIr3r+TIOBWajQ6fY6+RU=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: iHabIHEz/PTHKVI4qhPpj+ZDCYtCE+FTF89syGeIFww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 02:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Dec 25 02:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=694c9ac0-8f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:92:34:5a:36:7e:b3:da:fc:bc:28:59:b8: 55:69:8e:f8:dc:a1:02:1d:5f:04:de:42:0b:56:4f: 2f:59:d0:55:14:c8:1f:4d:dc:ce:1c:15:73:48:dd: d3:e1:8b:7f:c9:0c:0f:eb:8f:4a:7b:6f:56:2e:6d: e6:f5:91:06:55:15:b2:97:80:09:ab:03:05:d3:d6: f9:95:81:85:37:84:be:76:39:47:58:87:dd:02:cf: e3:db:03:35:16:e9:71:82:a8:a6:57:b5:2d:26:9d: 02:08:9c:66:4a:c1:0a:a7:e9:4b:05:73:23:ea:d9: 16:f8:88:29:d2:42:f3:32:9e:c8:7c:11:b5:7c:e8: 67:e7:d6:d7:92:ef:93:5e:58:ba:76:12:48:55:48: ac:8f:3a:b9:11:8d:b1:41:68:4f:b1:de:0a:26:d1: 24:fa:88:ee:6d:71:cf:b3:a5:9a:a2:7d:f0:47:74: 0c:00:65:b7:ec:2f:76:be:72:74:d7:e2:e5:57:a4: 12:16:f4:0d:9f:81:1a:c7:22:a9:97:cd:82:57:49: bf:1b:bf:76:52:9e:37:52:61:ef:82:d5:36:05:0a: 10:81:f3:a9:e2:e5:78:e8:66:2e:6e:37:2f:0a:79: 68:ac:b0:da:ce:4a:bf:74:5d:a0:ca:4f:62:5f:c7: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7B:D0:BD:9F:A4:75:06:5B:1D:03:00:6F:6F:1B:CA:1B:77:76:96 X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:16:c2:43:f3:20:b0:42:b9:56:e3:81:71:29:52:f6:d8:4f: 19:e4:3b:9d:4c:e6:c7:a8:56:2d:9e:32:5d:96:06:fc:d8:c4: 53:da:ee:64:d2:c0:af:33:a6:8f:85:7a:7d:8c:ab:d7:b5:f2: 36:66:6c:b8:09:f8:a0:fc:51:01:21:b0:5f:47:25:d7:97:82: 05:47:e7:59:12:4d:ad:1b:49:07:56:a7:a4:d5:8d:7e:f1:4a: 94:33:0c:32:c0:0d:58:c3:a4:ef:ea:bb:2f:5c:b5:51:38:3d: f2:c8:8f:02:57:5f:68:92:c6:e5:24:2d:b9:a6:19:d3:16:04: 9e:7b:ce:20:43:6c:10:a3:c9:0e:09:3b:02:e4:21:ed:f3:4c: 67:c4:b2:b9:bb:9b:f1:2c:ea:e8:ce:d3:af:b7:85:c1:75:20: 41:ce:b1:86:ba:7f:75:11:7d:e9:c2:ab:7d:0a:25:b7:bc:e5: f3:d5:ff:31:cb:57:47:53:00:ce:ec:68:c8:92:bb:eb:10:ca: 27:71:34:25:f7:be:eb:30:17:96:b7:6e:3f:81:f4:78:fc:ed: e3:06:4c:f8:bb:15:9d:70:86:df:4b:c6:44:a5:37:63:d9:87: b6:b8:7a:aa:9e:5c:3c:4e:53:67:b6:6f:bf:08:b8:ee:d8:4c: 70:b8:d2:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjUxMjI1MDIwMDMyWhcNMjYwMTAxMDIwMDMyWjAYMRYwFAYD VQQDDA02OTRjOWFjMC04ZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjqSNFo2frPa/LwoWbhVaY743KECHV8E3kILVk8vWdBVFMgfTdzOHBVzSN3T 4Yt/yQwP649Ke29WLm3m9ZEGVRWyl4AJqwMF09b5lYGFN4S+djlHWIfdAs/j2wM1 FulxgqimV7UtJp0CCJxmSsEKp+lLBXMj6tkW+Igp0kLzMp7IfBG1fOhn59bXku+T Xli6dhJIVUisjzq5EY2xQWhPsd4KJtEk+ojubXHPs6Waon3wR3QMAGW37C92vnJ0 1+LlV6QSFvQNn4EaxyKpl82CV0m/G792Up43UmHvgtU2BQoQgfOp4uV46GYubjcv CnlorLDazkq/dF2gyk9iX8c5LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKp70L2f pHUGWx0DAG9vG8obd3aWMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiFsJD8yCwQrlW44FxKVL22E8Z5DudTObHqFYtnjJdlgb82MRT2u5k 0sCvM6aPhXp9jKvXtfI2Zmy4Cfig/FEBIbBfRyXXl4IFR+dZEk2tG0kHVqek1Y1+ 8UqUMwwywA1Yw6Tv6rsvXLVROD3yyI8CV19oksblJC25phnTFgSee84gQ2wQo8kO CTsC5CHt80xnxLK5u5vxLOroztOvt4XBdSBBzrGGun91EX3pwqt9CiW3vOXz1f8x y1dHUwDO7GjIkrvrEMoncTQl977rMBeWt24/gfR4/O3jBkz4uxWdcIbfS8ZEpTdj 2Ye2uHqqnlw8TlNntm+/CLju2ExwuNJG -----END CERTIFICATE-----Generated at Thu Dec 25 16:00:19 2025 by rpki-client