This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: xClyvQFDXdTbovdVKcqpMiiFBnA24fx3OIp7H3zpdS0= Subject key identifier: 4A:F3:87:5D:1C:B1:B9:FF:47:6A:EE:5B:57:76:FE:AC:71:A7:8A:4F Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 01E7 Signing time: Fri 19 Dec 2025 01:52:36 +0000 Manifest this update: Fri 19 Dec 2025 01:52:36 +0000 Manifest next update: Fri 26 Dec 2025 01:52:36 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: h8YPCGYrb7Jh23td5+wy8nVs/N0Yc0v4DNVjHSbP4MM=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: UaxkzwEU7Uh70PtMMkf/dHGEWq655rIu4QsEPhurB3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Dec 19 01:52:36 2025 GMT Not After : Dec 26 01:52:36 2025 GMT Subject: CN=6944afe4-5c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:30:ec:b0:ac:d6:a1:02:01:88:f1:33:5d: 80:a4:52:83:fc:30:04:d4:02:67:0a:47:c9:99:5e: b0:a2:09:c2:7f:7f:75:1c:2b:8a:81:84:d8:c8:17: f4:ef:bd:44:9b:db:63:53:a7:53:4b:23:cc:bf:ae: 85:e2:02:7d:60:e1:98:8d:f2:20:76:81:a8:20:a9: 4b:04:d6:64:c0:b6:f4:b0:bf:36:9a:bf:1f:38:4f: 30:c3:f4:2c:40:33:06:b3:cf:1d:dd:c7:11:97:56: 3b:d3:4b:91:d9:52:17:2c:17:62:cd:cf:c4:3a:c2: 0a:60:f6:6f:0b:db:71:6f:32:8e:a9:17:ff:56:75: 29:63:ef:ad:5f:d0:c8:2f:52:08:40:c3:9d:7e:fa: 6f:5a:0f:ef:a7:04:1e:6a:5b:05:fe:df:1e:77:6a: 9f:b3:9a:15:79:c4:a8:b8:32:ea:d3:c7:77:f6:04: 45:b3:83:a4:9e:49:88:ab:f4:d3:23:73:0e:28:08: ee:09:67:f9:32:49:4e:36:49:5a:db:1d:bc:b5:d6: 4e:3a:3b:b5:18:18:77:ca:a8:97:37:61:f0:ee:7c: 0d:5a:3e:94:2c:37:5e:f6:7f:32:88:56:74:56:e5: 37:e8:37:6d:78:79:2b:c3:e2:1a:c1:82:ea:dc:27: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F3:87:5D:1C:B1:B9:FF:47:6A:EE:5B:57:76:FE:AC:71:A7:8A:4F X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c7:df:91:f7:bd:0a:c0:57:3b:1f:7f:9c:54:72:4d:92:c2: 21:ca:dd:7f:ff:5c:5b:0d:96:e0:4a:81:f1:18:2a:17:5e:be: b3:88:7b:69:1b:f8:89:b0:c4:1c:71:70:6a:e6:60:3d:80:16: 46:bd:cf:a8:5e:a9:26:82:57:40:62:e2:2f:5a:87:58:30:d9: 0a:e6:54:74:51:bd:c6:00:fc:52:e0:0e:ba:b9:74:cf:77:22: 8d:a8:2d:5a:0d:9c:a0:bf:62:43:52:cd:8f:a0:47:67:06:c7: 30:34:97:41:da:13:05:06:3d:c7:23:fa:d5:93:bf:e7:96:c7: ed:b4:bb:73:9f:af:33:a4:80:75:15:df:f7:d2:8b:99:f7:5c: 7e:05:60:2e:88:62:f0:61:56:0d:c1:80:50:33:16:ad:d4:e0: 24:ec:5c:10:39:24:96:ae:bd:5a:30:6e:a6:17:ba:78:1e:e8: 5a:be:5f:34:30:73:5e:db:97:61:cb:f0:3f:35:77:ad:e3:86: 3e:2b:7d:52:7b:27:fb:fd:59:5b:82:a6:7c:b7:02:5e:aa:46: a2:23:ae:b2:9c:de:1b:57:f7:81:73:c0:f1:8f:41:1d:b7:92: 97:07:d6:1c:a9:80:01:a5:e4:34:c2:ab:82:64:bc:51:64:32: c1:2f:67:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjUxMjE5MDE1MjM2WhcNMjUxMjI2MDE1MjM2WjAYMRYwFAYD VQQDDA02OTQ0YWZlNC01YzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzy8w7LCs1qECAYjxM12ApFKD/DAE1AJnCkfJmV6wognCf391HCuKgYTYyBf0 771Em9tjU6dTSyPMv66F4gJ9YOGYjfIgdoGoIKlLBNZkwLb0sL82mr8fOE8ww/Qs QDMGs88d3ccRl1Y700uR2VIXLBdizc/EOsIKYPZvC9txbzKOqRf/VnUpY++tX9DI L1IIQMOdfvpvWg/vpwQealsF/t8ed2qfs5oVecSouDLq08d39gRFs4OknkmIq/TT I3MOKAjuCWf5MklONkla2x28tdZOOju1GBh3yqiXN2Hw7nwNWj6ULDde9n8yiFZ0 VuU36DdteHkrw+IawYLq3Cd82wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErzh10c sbn/R2ruW1d2/qxxp4pPMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtx9+R970KwFc7H3+cVHJNksIhyt1//1xbDZbgSoHxGCoXXr6ziHtp G/iJsMQccXBq5mA9gBZGvc+oXqkmgldAYuIvWodYMNkK5lR0Ub3GAPxS4A66uXTP dyKNqC1aDZygv2JDUs2PoEdnBscwNJdB2hMFBj3HI/rVk7/nlsfttLtzn68zpIB1 Fd/30ouZ91x+BWAuiGLwYVYNwYBQMxat1OAk7FwQOSSWrr1aMG6mF7p4Huhavl80 MHNe25dhy/A/NXet44Y+K31Seyf7/VlbgqZ8twJeqkaiI66ynN4bV/eBc8Dxj0Ed t5KXB9YcqYABpeQ0wquCZLxRZDLBL2f5 -----END CERTIFICATE-----Generated at Sat Dec 20 13:17:48 2025 by rpki-client