This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: SbB44kmCjDWgeH7OMuZf2i6nrWdRKrq7eOSXN1t/7Xo= Subject key identifier: 81:2C:F2:34:58:42:B0:3A:96:E2:99:53:1A:11:8D:5A:80:67:5D:D1 Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: 0120 Signing time: Sun 21 Dec 2025 03:54:54 +0000 Manifest this update: Sun 21 Dec 2025 03:54:53 +0000 Manifest next update: Sun 28 Dec 2025 03:54:53 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: tYrWKnPtGeEVnWwR+1oO04vMCt+nJhJr3D6CcSFuczg=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: 2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Dec 21 03:54:53 2025 GMT Not After : Dec 28 03:54:53 2025 GMT Subject: CN=69476f8e-5269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:e1:a4:0b:1d:bb:4a:24:57:b3:3c:a2:93: 75:a2:9d:64:1f:dd:38:e6:a6:c3:c3:6b:31:d1:ca: 35:67:2b:08:24:90:d8:3e:a1:90:a7:49:2f:11:a7: 73:64:4f:2d:54:5a:77:a1:51:1c:1b:a9:92:90:2d: 01:b4:16:a1:82:0e:48:cc:7b:fe:33:9e:1c:0a:a9: 3f:ee:7f:61:9e:3d:a9:bc:ac:35:c9:ae:d4:05:b4: ba:54:0f:d9:da:b9:48:0b:39:a8:c7:3d:96:35:83: 54:1a:6f:8b:3b:aa:9c:68:f8:7b:e0:75:c2:53:4c: 2c:83:ee:f0:aa:94:b4:20:45:da:d3:c0:1f:3f:fc: b7:17:aa:79:89:c5:41:53:82:67:37:19:02:e5:fd: 34:1d:c6:38:d6:2d:5e:a2:af:f0:08:a6:74:4d:17: 55:d8:d9:03:f8:17:4e:6f:e3:a8:2b:57:26:de:05: 7b:bb:ea:c1:a3:96:a1:c9:87:4a:21:1f:33:b7:e6: 7c:98:95:a0:19:e0:e8:bc:8f:dd:35:38:cd:81:e7: b7:66:d3:fc:46:fd:06:36:65:0a:fd:c7:12:1f:c4: 53:33:6d:bb:48:04:d9:81:61:c8:bb:0d:f2:cb:45: d7:fe:0a:41:b7:8b:79:3a:73:d9:47:4d:26:bb:00: cb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2C:F2:34:58:42:B0:3A:96:E2:99:53:1A:11:8D:5A:80:67:5D:D1 X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:3c:3c:20:cb:88:1e:34:aa:ba:b5:31:2b:c2:3e:91:d2:f4: 4f:47:55:ea:2e:89:35:a3:e8:a9:60:37:03:bd:62:8c:37:3b: 09:c7:17:a9:d7:34:62:b3:6e:ae:39:4f:3d:87:aa:a8:59:b2: 79:97:eb:5d:a0:47:b3:fa:5c:c5:a2:57:b0:ce:58:60:89:1c: 30:88:b5:d9:b7:f3:45:2a:d5:ce:df:b1:d7:07:1d:ae:cb:32: 70:31:1f:a4:4a:cc:cb:74:e6:3a:6d:63:8e:38:b1:83:ab:09: 9b:5c:91:96:68:69:ff:32:d2:0b:98:8e:2a:52:bd:69:6c:f7: 76:dd:92:3d:94:f4:70:ee:75:80:c3:54:91:fa:04:2f:9b:98: 69:8e:d4:1f:5f:26:16:be:38:4b:11:7b:80:62:1f:7c:f1:84: 3d:a5:7f:b6:81:e4:06:47:47:a4:50:2a:09:8e:3f:ef:0c:94: a9:ee:f9:40:3d:f6:e6:88:8e:3f:e1:70:d7:da:f2:e1:a5:7d: a8:e2:dd:32:de:67:c3:20:15:ae:66:b9:76:9b:06:f8:90:6b: 59:8b:bd:1b:f8:bd:73:d7:ef:d5:16:38:b3:52:50:7b:48:31: 15:c9:00:6d:20:a9:47:4d:b7:58:d8:e6:3f:16:b0:0f:02:9c: d1:90:f6:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjUxMjIxMDM1NDUzWhcNMjUxMjI4MDM1NDUzWjAYMRYwFAYD VQQDDA02OTQ3NmY4ZS01MjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkojhpAsdu0okV7M8opN1op1kH9045qbDw2sx0co1ZysIJJDYPqGQp0kvEadz ZE8tVFp3oVEcG6mSkC0BtBahgg5IzHv+M54cCqk/7n9hnj2pvKw1ya7UBbS6VA/Z 2rlICzmoxz2WNYNUGm+LO6qcaPh74HXCU0wsg+7wqpS0IEXa08AfP/y3F6p5icVB U4JnNxkC5f00HcY41i1eoq/wCKZ0TRdV2NkD+BdOb+OoK1cm3gV7u+rBo5ahyYdK IR8zt+Z8mJWgGeDovI/dNTjNgee3ZtP8Rv0GNmUK/ccSH8RTM227SATZgWHIuw3y y0XX/gpBt4t5OnPZR00muwDLVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEs8jRY QrA6luKZUxoRjVqAZ13RMB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy9BMzk3QTNFNDI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktn UVVmNTF5SUwyNmpWSmRGV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEPDwgy4geNKq6tTErwj6R0vRPR1XqLok1o+ipYDcDvWKMNzsJxxep 1zRis26uOU89h6qoWbJ5l+tdoEez+lzFolewzlhgiRwwiLXZt/NFKtXO37HXBx2u yzJwMR+kSszLdOY6bWOOOLGDqwmbXJGWaGn/MtILmI4qUr1pbPd23ZI9lPRw7nWA w1SR+gQvm5hpjtQfXyYWvjhLEXuAYh988YQ9pX+2geQGR0ekUCoJjj/vDJSp7vlA PfbmiI4/4XDX2vLhpX2o4t0y3mfDIBWuZrl2mwb4kGtZi70b+L1z1+/VFjizUlB7 SDEVyQBtIKlHTbdY2OY/FrAPApzRkPbT -----END CERTIFICATE-----Generated at Sun Dec 21 09:10:04 2025 by rpki-client