This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft File: x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft (raw, json) Hash identifier: jvd/eEQ4GaASD53ZSLGkgJLP02B6C+HP8R0gFjyJNWk= Subject key identifier: 1C:FE:D6:E4:8A:1C:EF:8A:75:56:44:F6:76:06:EF:10:49:14:32:9B Authority key identifier: C7:AD:63:B1:47:E4:99:54:D6:57:51:EF:FC:62:73:F1:C7:70:52:CD Certificate issuer: /CN=A912434D/serialNumber=C7AD63B147E49954D65751EFFC6273F1C77052CD Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft Manifest number: 51 Signing time: Fri 05 Dec 2025 05:07:11 +0000 Manifest this update: Fri 05 Dec 2025 05:07:10 +0000 Manifest next update: Fri 12 Dec 2025 05:07:10 +0000 Files and hashes: 1: x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl (hash: A0PdSbcwWQsKs76QkDKKUgA3+0D8bJwlmVqAKPFpY54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=C7AD63B147E49954D65751EFFC6273F1C77052CD Validity Not Before: Dec 5 05:07:10 2025 GMT Not After : Dec 12 05:07:10 2025 GMT Subject: CN=6932687f-e990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:4f:f2:2f:db:de:55:f3:e0:96:69:6e:30: da:ce:57:db:71:f2:db:77:e4:c4:ea:3a:81:0a:2c: a4:50:14:10:44:4e:80:5c:2c:e0:00:2f:bd:06:47: 41:26:e7:fa:0c:b1:29:f0:ea:4c:77:f1:0a:a5:b5: d7:ea:97:18:40:28:84:fd:6b:5e:97:98:81:4d:c1: fe:0e:bb:a2:f3:e3:78:94:3a:69:09:ef:e6:2a:01: 14:e7:7c:a9:a0:53:df:4c:ec:18:0a:9a:eb:8d:e7: 1f:8c:3f:17:06:e6:b2:51:8c:32:47:60:7f:11:e8: 51:9f:f4:f3:87:ee:0b:45:b6:4d:88:c2:f6:b0:3e: db:ef:3c:9a:a0:60:ab:48:e5:b2:0b:8e:21:9e:9b: 73:c0:05:81:59:b8:43:f5:31:f5:7b:f3:9c:05:bc: 3d:39:25:a8:93:da:37:f5:fd:74:f3:9e:65:34:2c: 11:f3:b5:24:51:70:a2:53:2f:f8:76:b5:30:fc:27: 3c:15:fa:8b:a8:78:09:a0:38:cb:91:f3:42:63:9f: e2:55:c0:98:89:0d:ed:bc:81:24:3c:18:62:2a:b8: 3b:fe:f1:a5:97:71:e0:d0:33:26:be:41:f8:22:37: 78:01:45:40:7f:21:0d:5c:47:49:e2:92:97:c7:7a: c5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FE:D6:E4:8A:1C:EF:8A:75:56:44:F6:76:06:EF:10:49:14:32:9B X509v3 Authority Key Identifier: keyid:C7:AD:63:B1:47:E4:99:54:D6:57:51:EF:FC:62:73:F1:C7:70:52:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:a8:65:de:3b:7b:0d:76:d8:3d:3c:2c:a8:a5:1d:a6:ad:78: 1b:ef:42:cf:92:12:44:75:42:ab:6f:6c:1a:77:6a:bf:2c:32: ca:ab:92:e2:c1:dd:87:4b:c6:25:ea:e7:ee:c3:d6:1d:78:6c: 23:f9:82:70:e9:24:bf:81:a9:bd:ce:22:41:7e:68:9f:33:56: 71:dd:30:db:d9:d5:54:9d:5d:e4:2d:e3:29:d7:da:3d:ba:89: af:a3:fe:73:2d:96:8c:90:2b:22:c1:3d:b7:8a:9a:1b:76:77: 36:18:00:86:54:db:fa:08:e5:e3:86:1f:86:c0:95:87:99:3e: e2:f3:a2:71:7a:88:47:71:7f:c7:93:f7:40:e4:d3:89:d0:21: fb:cf:bf:2f:da:98:b1:6a:4a:45:1c:d8:2e:b1:67:d3:89:d6: 39:b8:10:6e:4e:f2:a2:09:7c:f5:7e:24:cc:59:d8:5c:7c:05: c2:b4:23:df:80:be:65:ae:84:bf:e0:29:26:89:fa:4c:6c:44: 90:1a:34:81:68:7e:42:37:b4:88:c1:3f:7f:72:8c:b3:9e:25: 96:58:e5:53:52:aa:ae:5e:67:ca:66:6b:5f:ba:26:60:23:2c: 48:78:2d:62:6c:9b:bf:d8:5b:a1:bf:69:71:2e:58:bb:d3:c4: a2:94:b3:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDM0RDExMC8GA1UEBRMoQzdBRDYzQjE0N0U0OTk1NEQ2NTc1MUVGRkM2MjczRjFD NzcwNTJDRDAeFw0yNTEyMDUwNTA3MTBaFw0yNTEyMTIwNTA3MTBaMBgxFjAUBgNV BAMTDTY5MzI2ODdmLWU5OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCe0/yL9veVfPglmluMNrOV9tx8tt35MTqOoEKLKRQFBBEToBcLOAAL70GR0Em 5/oMsSnw6kx38QqltdfqlxhAKIT9a16XmIFNwf4Ou6Lz43iUOmkJ7+YqARTnfKmg U99M7BgKmuuN5x+MPxcG5rJRjDJHYH8R6FGf9POH7gtFtk2IwvawPtvvPJqgYKtI 5bILjiGem3PABYFZuEP1MfV785wFvD05JaiT2jf1/XTznmU0LBHztSRRcKJTL/h2 tTD8JzwV+ouoeAmgOMuR80Jjn+JVwJiJDe28gSQ8GGIquDv+8aWXceDQMya+Qfgi N3gBRUB/IQ1cR0nikpfHesVpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHP7W5Ioc 74p1VkT2dgbvEEkUMpswHwYDVR0jBBgwFoAUx61jsUfkmVTWV1Hv/GJz8cdwUs0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MzRELzA0QjczMUM2NThE RTExRjA4RkFBREU2NkM0RjlBRTAyL3g2MWpzVWZrbVZUV1YxSHZfR0p6OGNkd1Vz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDYxanNVZmttVlRXVjFIdl9HSno4Y2R3VXMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 MzRELzA0QjczMUM2NThERTExRjA4RkFBREU2NkM0RjlBRTAyL3g2MWpzVWZrbVZU V1YxSHZfR0p6OGNkd1VzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAioZd47ew122D08LKilHaateBvvQs+SEkR1QqtvbBp3ar8sMsqrkuLB 3YdLxiXq5+7D1h14bCP5gnDpJL+Bqb3OIkF+aJ8zVnHdMNvZ1VSdXeQt4ynX2j26 ia+j/nMtloyQKyLBPbeKmht2dzYYAIZU2/oI5eOGH4bAlYeZPuLzonF6iEdxf8eT 90Dk04nQIfvPvy/amLFqSkUc2C6xZ9OJ1jm4EG5O8qIJfPV+JMxZ2Fx8BcK0I9+A vmWuhL/gKSaJ+kxsRJAaNIFofkI3tIjBP39yjLOeJZZY5VNSqq5eZ8pma1+6JmAj LEh4LWJsm7/YW6G/aXEuWLvTxKKUszA= -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:37 2025 by rpki-client