This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json) Hash identifier: shPd0t2C4mxdAeCHJipCf+9KVUZl1AsN8+A9LZs0eEE= Subject key identifier: 63:EA:C2:77:AA:28:AF:1A:72:16:F8:02:1E:8A:44:F7:39:4E:B2:85 Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Certificate serial: 1C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft Manifest number: 1C3D Signing time: Sat 20 Dec 2025 16:02:01 +0000 Manifest this update: Sat 20 Dec 2025 16:02:00 +0000 Manifest next update: Sat 27 Dec 2025 16:02:00 +0000 Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: hGTck7vHpNYqiT6qBAg0qnUJwQUJCJytq1FQ1w3Y9/c=) 2: A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (hash: Lvu6iSz0EDxGsSvl67CYssjZj8LfNsaL4+wrYELLSYM=) 3: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 06vkEMgrkkkWPxaN6n0p0hSzGNVGXFIfC5HD0mArdMk=) 4: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: /yvn8ijOa8FBDJ5ASQ/Lery7dqjE4HE5gFGgvkPmpE0=) 5: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: l1Lp6717izpzzjuLJ/WIAZ1x52OL2D3LQu0E5xm6nH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7264 (0x1c60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Validity Not Before: Dec 20 16:02:00 2025 GMT Not After : Dec 27 16:02:00 2025 GMT Subject: CN=6946c879-9f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:25:66:d0:1c:80:1a:94:da:82:43:9b:1a: 3e:84:b4:eb:e9:c4:99:91:78:ec:dd:08:17:53:bf: 85:1f:c9:a9:a2:54:08:37:5d:71:fb:ad:89:6d:e4: e2:aa:70:d8:75:eb:b0:73:d1:b0:41:12:b3:fa:29: 99:8f:64:0e:dc:ed:06:74:83:33:0e:b1:3d:63:67: a4:28:de:fe:86:d6:0a:ad:31:ae:56:e0:2b:9d:6f: 77:39:2b:1a:81:01:93:57:2c:9e:f1:e3:be:f9:5f: 61:0d:fb:bc:dd:1b:3d:7a:9a:da:a4:78:1e:da:05: 98:6c:ce:da:4f:5e:d0:84:2e:ea:7c:f5:64:a3:ea: db:ff:af:5a:ab:69:50:17:87:06:d3:78:bf:44:24: 4c:e1:8c:ec:3e:e6:bf:ce:53:4c:d4:5f:d8:b1:ee: 40:c9:0d:26:27:23:81:c4:bd:08:eb:d8:40:7e:f3: 25:d1:c2:68:d5:e1:f3:7c:50:3b:4d:5c:5c:bc:ae: 95:f3:ce:f7:26:23:31:5f:f3:4b:26:7f:d1:bc:ee: 13:3b:6d:d8:4f:65:b1:c8:c8:98:ea:44:32:9a:73: 40:ac:51:af:a7:49:43:17:a6:07:47:5b:b4:11:cd: 47:96:63:31:f1:8d:f1:a3:02:a7:d3:0b:3b:b7:df: 1d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EA:C2:77:AA:28:AF:1A:72:16:F8:02:1E:8A:44:F7:39:4E:B2:85 X509v3 Authority Key Identifier: keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:62:58:ae:b4:de:4e:4e:54:75:fc:d3:b8:a1:c7:b3:cb:e2: 18:8a:2b:e2:34:1c:ea:e0:1a:cf:26:da:5f:4c:73:ca:33:ea: be:b2:df:5e:d6:fb:de:4d:55:f7:ab:e7:99:fb:d4:df:e0:ca: 43:97:6f:9b:80:bc:1a:91:45:0a:b6:37:28:d6:50:78:2b:be: be:dd:2d:c2:c3:4b:f1:d5:18:52:6b:cc:62:e7:54:37:15:8c: 03:2d:62:30:8a:de:a2:d9:2c:2e:a9:c7:99:42:3e:fe:c2:6d: c9:57:8e:a8:ac:df:f3:6a:f5:c7:32:34:6b:c7:c5:cc:a4:22: 6e:9d:55:cf:30:df:90:6b:79:c9:11:ff:05:d1:12:ca:21:b7: a0:ff:dc:a6:21:d5:72:fb:a1:45:11:ce:23:b4:76:7d:c5:0c: d2:ff:2c:6a:de:bb:e6:c8:d5:3b:48:c3:5a:b8:d3:28:6d:b3: 71:76:78:a7:e6:fc:1e:c4:90:02:c7:cf:4d:db:26:bb:94:2d: 7e:14:4f:01:90:2c:a6:55:a3:a2:6f:e3:fd:ac:19:0c:f9:a7: ca:75:df:41:8b:c4:e6:41:9c:d3:19:c8:02:2f:8c:0a:8f:b8: e1:93:b7:d7:da:67:e0:43:f4:ce:42:2c:7e:93:e7:43:9b:9d: 82:56:c4:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw MDNFNEJCNzUwHhcNMjUxMjIwMTYwMjAwWhcNMjUxMjI3MTYwMjAwWjAYMRYwFAYD VQQDDA02OTQ2Yzg3OS05ZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqklZtAcgBqU2oJDmxo+hLTr6cSZkXjs3QgXU7+FH8mpolQIN11x+62JbeTi qnDYdeuwc9GwQRKz+imZj2QO3O0GdIMzDrE9Y2ekKN7+htYKrTGuVuArnW93OSsa gQGTVyye8eO++V9hDfu83Rs9eprapHge2gWYbM7aT17QhC7qfPVko+rb/69aq2lQ F4cG03i/RCRM4YzsPua/zlNM1F/Yse5AyQ0mJyOBxL0I69hAfvMl0cJo1eHzfFA7 TVxcvK6V8873JiMxX/NLJn/RvO4TO23YT2WxyMiY6kQymnNArFGvp0lDF6YHR1u0 Ec1HlmMx8Y3xowKn0ws7t98dwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPqwneq KK8achb4Ah6KRPc5TrKFMB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1 M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE3OC82OEQzMzQ5MEZENjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0Nj UFFieVNSblBySDRBUGt1M1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5YliutN5OTlR1/NO4ocezy+IYiiviNBzq4BrPJtpfTHPKM+q+st9e 1vveTVX3q+eZ+9Tf4MpDl2+bgLwakUUKtjco1lB4K76+3S3Cw0vx1RhSa8xi51Q3 FYwDLWIwit6i2SwuqceZQj7+wm3JV46orN/zavXHMjRrx8XMpCJunVXPMN+Qa3nJ Ef8F0RLKIbeg/9ymIdVy+6FFEc4jtHZ9xQzS/yxq3rvmyNU7SMNauNMobbNxdnin 5vwexJACx89N2ya7lC1+FE8BkCymVaOib+P9rBkM+afKdd9Bi8TmQZzTGcgCL4wK j7jhk7fX2mfgQ/TOQix+k+dDm52CVsSJ -----END CERTIFICATE-----Generated at Sun Dec 21 08:18:27 2025 by rpki-client