This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: dKGRDdi8/ojHd3lIbc43kLWMzZmzTyuVbrgdUswHzNs= Subject key identifier: 00:36:4D:40:DC:C7:BA:F9:E5:9D:EB:2B:0C:F9:EF:21:A5:C5:17:70 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 0479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 045C Signing time: Thu 18 Dec 2025 23:32:33 +0000 Manifest this update: Thu 18 Dec 2025 23:32:32 +0000 Manifest next update: Thu 25 Dec 2025 23:32:32 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: ygtagpqJ6W/j1smnpB4fVO/nlo4QHaxmIxOQT7Y4Bdc=) 2: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: qmwN8rcAR3vpucG22PWqt5m5wyg2eb8IRpdszpsFVNQ=) 3: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: SaWX6hkIcJ4pgsrGygV8fgQyGHt1YhbbUvZTPYJ4JwU=) 4: EF33F6CCD16911F08AEFD95BC4F9AE02.roa (hash: AgsRF6p4UteSopIb7cnx5B7Juyq+ola/RIaCBtlF3KQ=) 5: 4B167396E74111EC80E35542C4F9AE02.roa (hash: m7bVPzA+H6T0BPfqPAwWK53E3FJsQccTswfglW7TmvM=) 6: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: 0U8T0RS4mF6dClIl1xSb8fK6zofTOSe8/dMSQaDIi34=) 7: EFAA6C1CD16911F08A99D95BC4F9AE02.roa (hash: cgcaSIqIOhLCa5iTVKO9pJcq6xRCHOFoE69sC8NIq7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1145 (0x479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Dec 18 23:32:32 2025 GMT Not After : Dec 25 23:32:32 2025 GMT Subject: CN=69448f10-b18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:8b:67:ec:4e:bf:fb:7c:ca:17:4c:68:13: 69:87:88:e5:00:a2:ff:f9:3a:e3:3f:e9:40:c6:b2: b1:b1:ef:91:92:d4:d8:d0:cb:6e:80:0a:d4:2f:f9: fd:01:f8:44:9b:fb:69:44:79:c6:4f:94:5c:83:94: ff:64:99:aa:9d:43:39:1f:1c:b8:76:0f:76:4f:4d: 30:d5:ce:c7:ad:b4:94:3a:73:f0:bf:3c:26:cc:a9: ff:ac:9a:b9:7b:51:37:5d:19:b2:08:75:17:db:d8: e5:09:8c:01:77:2d:48:40:53:d6:25:2f:ef:e3:77: ae:bd:2e:20:45:21:df:29:ed:9a:f8:20:6a:41:89: b5:64:07:2f:3f:d4:41:62:ad:15:af:50:ea:96:f3: 31:14:01:3c:e3:0e:ba:c0:91:4a:0c:41:ae:f4:84: f6:3f:79:ea:56:2c:c1:b3:45:37:fa:b6:69:7a:98: da:bf:96:8d:83:8e:19:a7:28:66:70:07:94:4d:0b: 5f:5a:7f:0b:8d:e5:85:c8:0d:97:fa:bf:33:e5:b4: fe:60:6e:42:92:61:13:7f:82:27:f6:ba:dd:a4:3f: df:87:3e:c2:79:02:93:6c:9d:b3:83:72:e5:c6:15: 22:e8:66:5a:10:cc:3f:22:b8:a0:c8:f4:10:ae:fa: d1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:36:4D:40:DC:C7:BA:F9:E5:9D:EB:2B:0C:F9:EF:21:A5:C5:17:70 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ff:9d:73:2c:18:01:5b:7b:f7:30:48:9f:60:c5:f7:b2:16: 46:02:fe:f6:97:0e:77:21:7b:b7:4c:8d:ab:81:67:4e:2d:50: b7:6f:d6:41:19:06:f8:ce:4f:58:ab:6c:68:8b:90:2a:ea:5c: 09:ef:b3:1f:a3:a5:d1:35:00:3a:21:a4:88:cf:96:70:bc:67: 29:b3:3a:7e:c8:3a:06:83:7d:af:bc:58:1a:5b:c1:71:58:98: 29:d9:ad:4f:75:2d:3d:ea:49:f8:e1:2e:4b:d7:c3:79:06:a7: fb:d0:09:67:79:25:45:d7:72:f3:4c:b3:38:17:cf:cd:88:a1: 7d:38:a1:f0:e2:e5:ce:23:f8:ae:63:b7:fc:b3:ad:f8:d4:40: 1a:b0:86:22:09:e3:36:40:df:06:31:5a:29:01:cc:a6:fa:82: 82:da:fc:04:70:a5:7a:23:0d:aa:cd:b4:a9:31:87:3b:1c:b4: 24:f0:c4:7c:56:13:75:91:c7:32:f4:38:f0:11:05:cd:fc:f7: e9:f3:69:62:97:0b:a9:91:42:fd:6c:89:fd:96:42:43:cd:24: 0c:75:53:41:38:0b:55:23:96:1b:a7:f6:b1:0d:48:07:90:ef: 92:60:6e:bd:73:47:5d:d9:3e:e8:79:e6:74:c9:5c:85:f9:1a: c1:a3:a6:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjUxMjE4MjMzMjMyWhcNMjUxMjI1MjMzMjMyWjAYMRYwFAYD VQQDDA02OTQ0OGYxMC1iMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfCLZ+xOv/t8yhdMaBNph4jlAKL/+TrjP+lAxrKxse+RktTY0MtugArUL/n9 AfhEm/tpRHnGT5Rcg5T/ZJmqnUM5Hxy4dg92T00w1c7HrbSUOnPwvzwmzKn/rJq5 e1E3XRmyCHUX29jlCYwBdy1IQFPWJS/v43euvS4gRSHfKe2a+CBqQYm1ZAcvP9RB Yq0Vr1DqlvMxFAE84w66wJFKDEGu9IT2P3nqVizBs0U3+rZpepjav5aNg44Zpyhm cAeUTQtfWn8LjeWFyA2X+r8z5bT+YG5CkmETf4In9rrdpD/fhz7CeQKTbJ2zg3Ll xhUi6GZaEMw/IrigyPQQrvrRCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAA2TUDc x7r55Z3rKwz57yGlxRdwMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF/51zLBgBW3v3MEifYMX3shZGAv72lw53IXu3TI2rgWdOLVC3b9ZB GQb4zk9Yq2xoi5Aq6lwJ77Mfo6XRNQA6IaSIz5ZwvGcpszp+yDoGg32vvFgaW8Fx WJgp2a1PdS096kn44S5L18N5Bqf70AlneSVF13LzTLM4F8/NiKF9OKHw4uXOI/iu Y7f8s6341EAasIYiCeM2QN8GMVopAcym+oKC2vwEcKV6Iw2qzbSpMYc7HLQk8MR8 VhN1kccy9DjwEQXN/Pfp82lilwupkUL9bIn9lkJDzSQMdVNBOAtVI5Ybp/axDUgH kO+SYG69c0dd2T7oeeZ0yVyF+RrBo6bc -----END CERTIFICATE-----Generated at Sat Dec 20 19:50:58 2025 by rpki-client