This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: 4lGk71FTev2rxq9YgVCoDQ5mEB6zLR+dBQp17DzcBvI= Subject key identifier: BA:CE:95:C4:59:1B:24:94:30:ED:C5:13:A4:8C:F7:3F:3B:CC:C6:35 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1F1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1EB3 Signing time: Sat 20 Dec 2025 15:53:30 +0000 Manifest this update: Sat 20 Dec 2025 15:53:30 +0000 Manifest next update: Sat 27 Dec 2025 15:53:30 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: 3cdanfU6t29QmyXNAh5ZOAAi6GtbDEKRRFdyblJld/s=) 2: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: gvLX79QC0oneTHE76I8R6q00s45CXy5f3BN+aeOdaHY=) 3: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: y7U7IUcCA6tESox2ZQnKwXyYuQzSkLk1/ptcpy/PoWo=) 4: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: MnJKAsOUe7fhYarq5YRYi6VyPa/ceYkVqy0DJJvEpAc=) 5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 12wcy6kglMD+Y/CrXGL0WyA5a+t7P6F61MDYVPldBpg=) 6: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: k8fdwv5rzTaDtXtBZsqiUkV8XC7b+OcfzE/ub6rKQck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7962 (0x1f1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Dec 20 15:53:30 2025 GMT Not After : Dec 27 15:53:30 2025 GMT Subject: CN=6946c67a-fda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8c:54:e4:f2:00:4f:43:5a:ee:63:67:66:9c: 25:63:a2:f2:1b:7c:17:42:7b:e8:aa:c5:4a:cf:c4: 03:80:eb:99:ca:53:06:90:8b:aa:3d:5a:9d:da:93: 5e:ba:25:0b:41:a9:17:0d:21:8a:6d:bf:e2:52:d8: 7f:4d:c8:df:67:f9:d1:f0:2c:4a:45:84:0f:f4:8c: cd:e0:de:d0:c4:7b:4f:5a:8a:c4:b0:17:ce:b9:3c: aa:76:85:0d:8e:21:30:16:bd:e5:83:b6:19:3c:20: c9:e0:62:fa:cb:00:05:11:9c:8f:3d:8d:28:a4:c8: 81:5f:69:97:28:99:90:0c:64:32:8d:36:d2:de:b8: 07:9c:8c:33:f9:53:70:7b:63:7c:27:fc:85:dc:1b: 7d:75:6f:90:ba:bb:5b:75:93:87:31:fb:5a:5a:cc: 78:03:ae:2d:7a:5a:a2:2e:36:77:60:b2:f3:92:eb: 0c:7a:d1:15:1c:ae:4c:54:3b:bf:92:11:b0:7f:b9: 2d:40:91:25:88:d1:cf:ca:11:51:dc:04:fd:56:1e: 99:07:1b:9a:a2:30:a0:f8:bd:71:97:ab:09:89:f4: da:fa:9c:2e:1a:10:12:44:d1:65:2f:d3:f8:59:fb: e6:ba:9b:dc:bf:d5:00:84:7c:48:aa:26:4e:e7:95: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CE:95:C4:59:1B:24:94:30:ED:C5:13:A4:8C:F7:3F:3B:CC:C6:35 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c5:61:bb:93:b5:b8:4b:f6:62:16:8c:dd:74:f9:80:c8:4a: cc:52:90:24:85:b9:1e:7a:42:81:fd:f6:da:36:fe:ca:ae:fe: d1:d9:b4:15:ed:4d:d3:40:7a:89:51:a1:96:aa:59:82:05:be: 0c:a1:b9:f2:8e:d8:26:9e:e7:f0:b4:ef:99:54:bb:d1:62:a3: f4:c6:22:bd:9c:0b:4b:eb:2d:c4:0c:30:7f:04:d6:02:d4:7b: 78:92:5d:3e:1a:a8:f2:f6:ec:22:55:e0:8f:ec:97:a7:2e:bb: ea:18:72:df:2c:37:07:60:b8:44:4c:d5:36:8f:bc:a6:02:ba: 00:cc:59:53:6c:cc:1d:6c:dd:0a:5b:85:6d:d7:54:68:cf:96: 6f:cb:09:55:65:4c:20:9a:a9:0a:f2:2b:5b:a6:8f:e2:7c:93: 71:c3:ad:dc:f6:42:d7:92:0a:8c:bc:83:f9:14:0e:bf:67:49: b6:96:c9:b4:f3:63:e2:b6:74:50:59:4a:59:0c:35:2f:b9:af: 3a:f2:94:2b:01:0c:63:91:e3:c5:91:22:b1:47:46:25:f8:61: 90:db:4f:28:31:b0:09:28:4f:0e:85:36:74:22:65:42:cf:30: 74:91:7e:6f:8a:64:5b:2c:56:da:bb:3b:d9:81:fd:61:a0:fa: 84:04:ef:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUxMjIwMTU1MzMwWhcNMjUxMjI3MTU1MzMwWjAYMRYwFAYD VQQDDA02OTQ2YzY3YS1mZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oxU5PIAT0Na7mNnZpwlY6LyG3wXQnvoqsVKz8QDgOuZylMGkIuqPVqd2pNe uiULQakXDSGKbb/iUth/TcjfZ/nR8CxKRYQP9IzN4N7QxHtPWorEsBfOuTyqdoUN jiEwFr3lg7YZPCDJ4GL6ywAFEZyPPY0opMiBX2mXKJmQDGQyjTbS3rgHnIwz+VNw e2N8J/yF3Bt9dW+QurtbdZOHMftaWsx4A64telqiLjZ3YLLzkusMetEVHK5MVDu/ khGwf7ktQJEliNHPyhFR3AT9Vh6ZBxuaojCg+L1xl6sJifTa+pwuGhASRNFlL9P4 Wfvmupvcv9UAhHxIqiZO55XHPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrOlcRZ GySUMO3FE6SM9z87zMY1MB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArxWG7k7W4S/ZiFozddPmAyErMUpAkhbkeekKB/fbaNv7Krv7R2bQV 7U3TQHqJUaGWqlmCBb4MobnyjtgmnufwtO+ZVLvRYqP0xiK9nAtL6y3EDDB/BNYC 1Ht4kl0+Gqjy9uwiVeCP7JenLrvqGHLfLDcHYLhETNU2j7ymAroAzFlTbMwdbN0K W4Vt11Roz5ZvywlVZUwgmqkK8itbpo/ifJNxw63c9kLXkgqMvIP5FA6/Z0m2lsm0 82PitnRQWUpZDDUvua868pQrAQxjkePFkSKxR0Yl+GGQ208oMbAJKE8OhTZ0ImVC zzB0kX5vimRbLFbauzvZgf1hoPqEBO8k -----END CERTIFICATE-----Generated at Sat Dec 20 19:05:41 2025 by rpki-client