This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft File: 61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json) Hash identifier: Wsr99eneKgssiLp27Nu3g1qfGUwsQ7t9HSTRmE15+DQ= Subject key identifier: B3:B0:13:FF:39:24:10:3B:80:55:FC:65:67:C9:51:96:18:55:A9:BF Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 Certificate issuer: /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft Manifest number: 0637 Signing time: Thu 04 Dec 2025 21:28:59 +0000 Manifest this update: Thu 04 Dec 2025 21:28:58 +0000 Manifest next update: Thu 11 Dec 2025 21:28:58 +0000 Files and hashes: 1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: gAOiZJnRBe/GmPw59EqMfHXcq3nqMtlTcKun9k8zte8=) 2: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: PHugSXTi2dZxLQln/zegbseeVs2jPcn21YYpHl84zeo=) 3: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: PqPcM9AknODy/bx8TAswPdKxA7piJbRMKnDsw8NBbDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CDEC, serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Validity Not Before: Dec 4 21:28:58 2025 GMT Not After : Dec 11 21:28:58 2025 GMT Subject: CN=6931fd1a-f0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d6:67:8f:ab:5f:df:ec:6c:6b:56:4f:f1:54: c7:28:af:d6:77:7f:e4:aa:da:c3:e0:de:2c:b4:b6: b7:7d:99:65:4e:0a:1e:8d:f4:d1:7b:0f:60:f6:19: 7d:4b:a9:0c:5f:ea:65:e6:b1:2e:4e:d5:dd:3e:7e: ff:cf:a4:4a:43:5e:0a:a4:73:c1:ae:2e:ea:eb:d1: b3:c4:8e:b8:e3:1a:f4:02:ce:cd:67:4d:52:47:af: c2:03:44:ea:a9:19:f9:b9:f2:bb:f0:09:75:17:a1: 56:0b:59:ac:aa:fb:3a:ea:19:69:dc:cf:65:e5:0f: 5e:c8:a9:e9:45:84:73:4f:e6:7d:2c:ac:86:a5:5a: a4:f4:d6:4a:7b:6c:9a:e3:99:e2:83:ae:e9:f9:2a: 04:47:68:f1:2c:06:16:a5:26:89:bf:d3:78:e4:25: 9a:d7:30:ec:f2:d2:2d:84:93:5f:ec:28:92:f0:36: 84:c2:1d:43:3a:01:25:c2:bc:43:c2:18:3e:01:d4: 53:92:7b:2a:c1:f9:c4:9a:21:77:83:e0:ef:96:c6: b2:0a:c3:24:95:f4:9c:61:49:6c:53:40:37:a0:e5: 88:c0:99:14:49:7a:d9:69:5d:c6:29:10:9a:f5:a3: a5:20:5e:c3:16:3c:b6:f5:d9:b1:87:d9:b1:46:f5: 35:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B0:13:FF:39:24:10:3B:80:55:FC:65:67:C9:51:96:18:55:A9:BF X509v3 Authority Key Identifier: keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:93:d1:86:ff:6f:d7:e4:27:7a:57:50:f6:90:3c:22:c6:d8: 2c:49:53:e5:2e:c3:95:45:3a:b9:d6:ce:34:c5:e7:52:8a:4b: 1a:5f:a6:2f:2b:9d:e3:36:ad:49:67:b6:18:52:cf:af:b8:72: 5a:d8:e3:27:fc:d6:ca:bf:6f:4f:72:a2:fb:0d:03:4e:36:ba: a7:94:0f:50:39:fe:b5:a0:36:18:83:22:29:1f:b8:89:88:3f: 9d:30:6d:83:78:a7:a0:fb:5f:93:95:55:cc:fc:6c:1c:0a:6c: 10:81:08:cc:a2:ee:24:9d:2c:67:db:85:dc:80:58:85:c0:d1: 00:53:53:92:15:c7:f5:6a:81:fa:f9:30:bc:d1:29:a1:25:25: 25:26:42:2e:dc:1f:e4:7d:46:e3:29:57:ba:9a:16:16:a9:61: d0:88:6f:49:ae:1a:ab:d9:8e:91:f8:e6:f0:24:40:3c:11:2c: ff:b7:8d:22:0a:c6:e3:a4:19:0d:28:e8:8a:b5:b4:9e:80:41: 4d:f2:b4:25:6a:bf:19:e0:41:29:a4:83:a4:de:ec:59:b7:f2: 11:64:b3:3a:8a:cf:a3:90:90:4a:c6:63:f6:58:44:cf:61:9c: 37:7c:82:b6:95:2b:22:b5:80:3f:1c:61:ab:61:4f:f8:c7:6f: 4a:fb:78:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENERUMxMTAvBgNVBAUTKEVCNTY5OTQzNTJFQjAxRTQwRTYwQzc4QTQzQjk1N0FF MjkwRUY3NDUwHhcNMjUxMjA0MjEyODU4WhcNMjUxMjExMjEyODU4WjAYMRYwFAYD VQQDEw02OTMxZmQxYS1mMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NZnj6tf3+xsa1ZP8VTHKK/Wd3/kqtrD4N4stLa3fZllTgoejfTRew9g9hl9 S6kMX+pl5rEuTtXdPn7/z6RKQ14KpHPBri7q69GzxI644xr0As7NZ01SR6/CA0Tq qRn5ufK78Al1F6FWC1msqvs66hlp3M9l5Q9eyKnpRYRzT+Z9LKyGpVqk9NZKe2ya 45nig67p+SoER2jxLAYWpSaJv9N45CWa1zDs8tIthJNf7CiS8DaEwh1DOgElwrxD whg+AdRTknsqwfnEmiF3g+DvlsayCsMklfScYUlsU0A3oOWIwJkUSXrZaV3GKRCa 9aOlIF7DFjy29dmxh9mxRvU1YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOwE/85 JBA7gFX8ZWfJUZYYVam/MB8GA1UdIwQYMBaAFOtWmUNS6wHkDmDHikO5V64pDvdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0RFQy83RjlEOTg0MkJB QjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFlUU9ZTWVLUTdsWHJpa085 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxYVpRMUxyQWVRT1lNZUtRN2xYcmlrTzkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0RFQy83RjlEOTg0MkJBQjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFl UU9ZTWVLUTdsWHJpa085MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSk9GG/2/X5Cd6V1D2kDwixtgsSVPlLsOVRTq51s40xedSiksaX6Yv K53jNq1JZ7YYUs+vuHJa2OMn/NbKv29PcqL7DQNONrqnlA9QOf61oDYYgyIpH7iJ iD+dMG2DeKeg+1+TlVXM/GwcCmwQgQjMou4knSxn24XcgFiFwNEAU1OSFcf1aoH6 +TC80SmhJSUlJkIu3B/kfUbjKVe6mhYWqWHQiG9Jrhqr2Y6R+ObwJEA8ESz/t40i CsbjpBkNKOiKtbSegEFN8rQlar8Z4EEppIOk3uxZt/IRZLM6is+jkJBKxmP2WETP YZw3fIK2lSsitYA/HGGrYU/4x29K+3iA -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:21 2025 by rpki-client