This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json) Hash identifier: Mb/PvLiJd6/VPgj5IqqWx6V7MdDYnDEiK1iYp4Dhx/4= Subject key identifier: 0F:12:CB:C0:93:9B:35:EF:8C:6C:E7:2D:87:06:D2:4E:03:B8:F0:4B Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft Manifest number: 60CF Signing time: Sat 20 Dec 2025 14:15:25 +0000 Manifest this update: Sat 20 Dec 2025 14:15:24 +0000 Manifest next update: Sat 27 Dec 2025 14:15:24 +0000 Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: rDYDrZxC9i3PplAbS7XkxIghQjoFYC/02UGSRRVP9bo=) 2: 813E372A946711F081C10711C4F9AE02.roa (hash: kExd4zSpp7AjmXFgOmX60/PfKSK3ZoaisYrs5b1dJbk=) 3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: Wde+/tbwO6emtqEAbVU9kd5LqQ/7rRJAB/r7M8LU5/8=) 4: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: hZakqVHe8O4RVi1dDA3NxvC3rtRxeZVjqvS+/bKAPhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Validity Not Before: Dec 20 14:15:24 2025 GMT Not After : Dec 27 14:15:24 2025 GMT Subject: CN=6946af7d-66f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:4a:28:d9:f3:9f:56:e2:d0:e8:db:f9:0a: e1:1f:f0:58:f9:2e:32:e1:22:02:15:14:14:1a:b8: ec:99:74:75:e3:ad:7f:4c:35:92:d4:18:a9:23:b5: 93:fe:45:00:a3:90:43:6c:d7:08:3d:45:b6:9d:a6: 86:a7:79:70:5f:12:98:26:d2:15:cf:8c:7f:bd:f7: 9e:9f:79:5b:3c:24:80:6f:ed:e6:3e:6e:0e:a4:99: 52:3e:88:d1:73:85:a1:c2:53:96:95:79:64:02:86: b9:93:3f:94:20:90:06:7c:72:8d:96:58:87:4d:07: b4:ec:5e:77:14:39:31:fa:9f:b7:83:9a:6e:a3:18: 86:45:0a:d7:35:b5:52:4e:bf:51:f6:96:16:9b:00: 67:b2:9b:08:3c:bf:ad:65:45:4f:24:7e:f7:83:89: 37:29:5b:c7:52:06:73:b9:f7:c5:52:e4:84:75:7d: 0e:da:e1:8a:8f:7d:e5:da:04:6c:7c:10:25:a0:80: 04:95:bf:7d:9e:1f:a1:9a:97:10:95:09:3b:6e:d6: 70:97:cc:62:b5:c9:17:b9:dc:9a:36:c3:4a:26:c6: bb:82:87:37:b6:45:1f:86:f2:cd:10:26:49:3b:be: 4e:4d:81:8c:07:48:49:fb:06:36:4b:a8:91:c3:a3: fc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:12:CB:C0:93:9B:35:EF:8C:6C:E7:2D:87:06:D2:4E:03:B8:F0:4B X509v3 Authority Key Identifier: keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:9f:ca:71:fd:f3:d4:17:50:14:72:2b:31:7e:6a:06:8a:4d: e2:81:bf:c2:54:05:5e:bf:ba:61:bf:4f:70:b9:f9:31:8f:c2: fb:12:1b:df:f4:81:32:ba:64:98:46:ca:c7:19:43:64:03:e7: 32:ba:96:ed:cc:7d:bf:4e:8a:b0:ae:4d:9d:b7:aa:b9:f6:6d: bc:d6:d1:86:72:ef:01:f7:b9:49:0e:17:ef:a9:c6:51:a8:90: df:39:92:e1:bc:22:b6:67:78:d8:94:95:62:a0:54:03:2e:1b: 53:28:08:ff:57:16:34:bf:96:2a:04:d4:64:bb:c2:b0:be:06: 8e:7d:b8:a6:02:24:80:1d:5f:ce:5f:30:55:fb:9d:9e:09:2d: 09:81:e9:c2:eb:3a:9b:4e:ac:7e:6f:a6:5d:e1:39:94:5f:ea: d2:40:d9:ad:97:1d:c4:e2:73:90:e5:ff:1f:db:92:b0:e4:d1: 6d:da:51:cb:02:4f:13:0c:46:39:81:56:55:9a:a8:2c:b9:8e: 07:fa:0a:d6:3d:5f:5a:2e:14:25:62:6c:04:0a:55:75:45:1d: 44:5c:8a:5a:f0:3c:44:3d:3d:92:bd:8e:fd:07:52:e9:70:17: c7:b5:7c:99:d1:77:50:5d:15:d7:e6:8e:4d:13:22:ef:05:8c: 99:fe:39:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE OEFFOEFDODcwHhcNMjUxMjIwMTQxNTI0WhcNMjUxMjI3MTQxNTI0WjAYMRYwFAYD VQQDDA02OTQ2YWY3ZC02NmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmdKKNnzn1bi0Ojb+QrhH/BY+S4y4SICFRQUGrjsmXR1461/TDWS1BipI7WT /kUAo5BDbNcIPUW2naaGp3lwXxKYJtIVz4x/vfeen3lbPCSAb+3mPm4OpJlSPojR c4WhwlOWlXlkAoa5kz+UIJAGfHKNlliHTQe07F53FDkx+p+3g5puoxiGRQrXNbVS Tr9R9pYWmwBnspsIPL+tZUVPJH73g4k3KVvHUgZzuffFUuSEdX0O2uGKj33l2gRs fBAloIAElb99nh+hmpcQlQk7btZwl8xitckXudyaNsNKJsa7goc3tkUfhvLNECZJ O75OTYGMB0hJ+wY2S6iRw6P8cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8Sy8CT mzXvjGznLYcG0k4DuPBLMB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz UDlvZFd1eEc0dkxZcm9ySWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhn8px/fPUF1AUcisxfmoGik3igb/CVAVev7phv09wufkxj8L7Ehvf 9IEyumSYRsrHGUNkA+cyupbtzH2/Toqwrk2dt6q59m281tGGcu8B97lJDhfvqcZR qJDfOZLhvCK2Z3jYlJVioFQDLhtTKAj/VxY0v5YqBNRku8KwvgaOfbimAiSAHV/O XzBV+52eCS0JgenC6zqbTqx+b6Zd4TmUX+rSQNmtlx3E4nOQ5f8f25Kw5NFt2lHL Ak8TDEY5gVZVmqgsuY4H+grWPV9aLhQlYmwEClV1RR1EXIpa8DxEPT2SvY79B1Lp cBfHtXyZ0XdQXRXX5o5NEyLvBYyZ/jnC -----END CERTIFICATE-----Generated at Sun Dec 21 22:57:38 2025 by rpki-client