This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft File: x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft (raw, json) Hash identifier: lOxijMsqZAGU+p2ZEBRv6/2htdPneGoiY++qQy8KqPc= Subject key identifier: A4:F9:B5:4B:64:B8:85:FD:E0:E2:3D:DF:00:6B:DC:5E:79:06:12:38 Authority key identifier: C7:AD:63:B1:47:E4:99:54:D6:57:51:EF:FC:62:73:F1:C7:70:52:CD Certificate issuer: /CN=A912434D/serialNumber=C7AD63B147E49954D65751EFFC6273F1C77052CD Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft Manifest number: 5A Signing time: Tue 23 Dec 2025 06:01:47 +0000 Manifest this update: Tue 23 Dec 2025 06:01:46 +0000 Manifest next update: Tue 30 Dec 2025 06:01:46 +0000 Files and hashes: 1: x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl (hash: Hyp6N5yY530R7QMcKVpdL9+NDt+K9KY1J5spoGttmRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=C7AD63B147E49954D65751EFFC6273F1C77052CD Validity Not Before: Dec 23 06:01:46 2025 GMT Not After : Dec 30 06:01:46 2025 GMT Subject: CN=694a304b-2a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:46:20:38:48:66:8f:6c:dc:d3:7b:4e:42: 8c:5f:04:47:1e:0c:96:a8:f4:80:de:17:9f:1b:0f: f5:82:db:e4:48:a0:0f:d5:44:61:2e:77:47:e5:91: 81:78:24:a9:3a:f5:b1:e8:2f:fa:2d:55:6b:93:41: 0b:a4:3a:5a:44:f5:8a:16:72:4e:ff:ce:74:13:e0: 7b:8c:28:d7:fd:3a:c0:f9:3f:0e:fb:fa:26:57:23: 93:db:52:20:97:19:1f:f2:f3:6e:16:ca:9b:e1:e6: 5d:bb:af:47:eb:09:46:0f:8a:bd:b5:4f:2c:76:63: e6:54:23:c3:3e:6a:05:38:2c:69:0e:82:67:74:6a: a1:d5:6e:0d:94:87:5b:4f:b4:17:76:72:4c:17:dc: 91:47:f6:74:5a:6a:e3:b9:5b:7c:8f:31:ce:f4:81: 07:77:28:d0:71:aa:f2:df:bb:6c:32:43:43:be:c9: 58:81:a3:f3:41:89:34:d3:e3:56:d9:86:d4:9a:28: 0b:60:6d:ce:a5:28:36:ab:a6:8d:c4:03:8e:69:75: a0:1f:1e:d9:f6:91:cc:27:bd:b7:72:ed:5d:ac:b8: bb:70:f3:6d:17:d1:b5:80:9e:14:71:20:69:ba:7b: a7:0d:ca:8f:12:33:8c:6e:56:68:6e:fd:f8:cc:f1: 6b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F9:B5:4B:64:B8:85:FD:E0:E2:3D:DF:00:6B:DC:5E:79:06:12:38 X509v3 Authority Key Identifier: keyid:C7:AD:63:B1:47:E4:99:54:D6:57:51:EF:FC:62:73:F1:C7:70:52:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:57:54:05:03:84:c9:11:c8:e2:3a:51:3e:7f:10:ea:71:60: 97:11:8c:ca:f2:d0:16:34:4e:37:c6:00:8c:76:76:dd:d2:00: cf:dc:9a:4c:b4:a0:d0:1e:02:e4:94:d0:10:31:df:4f:7c:77: b9:8f:07:63:97:0d:eb:63:fc:d0:5d:4a:d9:7c:54:cb:3c:fb: 03:fc:43:33:cf:15:e5:64:af:98:fb:05:0b:df:86:9f:70:18: 21:94:65:4b:6a:77:e7:47:29:15:f0:ad:27:c5:5c:6d:7c:8c: a5:77:bd:93:d9:a1:d0:3d:0a:2c:ea:03:d7:3f:95:83:67:cf: 00:40:09:81:5b:ce:c0:7a:43:2b:fe:61:ff:14:28:3c:f2:70: c1:bd:24:cc:e5:ab:b1:ce:c1:33:ac:8f:b0:a8:ac:1b:6b:02: d7:88:77:6e:90:d5:21:9d:bb:4f:2b:6c:46:a9:50:53:bd:d6: 5d:66:22:3f:29:e2:75:a8:b3:40:6d:1a:1d:ce:75:55:58:6a: 62:da:b4:a8:3e:f8:0f:49:77:ab:bc:0c:4a:66:45:35:0e:90: 77:15:7b:cf:91:c2:b1:66:0a:41:06:55:61:54:af:c0:65:66: 9a:7c:04:c7:74:13:dc:be:5f:c1:d1:38:05:39:e3:bc:7e:f3: 79:18:f9:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDM0RDExMC8GA1UEBRMoQzdBRDYzQjE0N0U0OTk1NEQ2NTc1MUVGRkM2MjczRjFD NzcwNTJDRDAeFw0yNTEyMjMwNjAxNDZaFw0yNTEyMzAwNjAxNDZaMBgxFjAUBgNV BAMMDTY5NGEzMDRiLTJhNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxmUYgOEhmj2zc03tOQoxfBEceDJao9IDeF58bD/WC2+RIoA/VRGEud0flkYF4 JKk69bHoL/otVWuTQQukOlpE9YoWck7/znQT4HuMKNf9OsD5Pw77+iZXI5PbUiCX GR/y824Wypvh5l27r0frCUYPir21Tyx2Y+ZUI8M+agU4LGkOgmd0aqHVbg2Uh1tP tBd2ckwX3JFH9nRaauO5W3yPMc70gQd3KNBxqvLfu2wyQ0O+yViBo/NBiTTT41bZ htSaKAtgbc6lKDarpo3EA45pdaAfHtn2kcwnvbdy7V2suLtw820X0bWAnhRxIGm6 e6cNyo8SM4xuVmhu/fjM8WtLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpPm1S2S4 hf3g4j3fAGvcXnkGEjgwHwYDVR0jBBgwFoAUx61jsUfkmVTWV1Hv/GJz8cdwUs0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MzRELzA0QjczMUM2NThE RTExRjA4RkFBREU2NkM0RjlBRTAyL3g2MWpzVWZrbVZUV1YxSHZfR0p6OGNkd1Vz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDYxanNVZmttVlRXVjFIdl9HSno4Y2R3VXMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 MzRELzA0QjczMUM2NThERTExRjA4RkFBREU2NkM0RjlBRTAyL3g2MWpzVWZrbVZU V1YxSHZfR0p6OGNkd1VzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAONXVAUDhMkRyOI6UT5/EOpxYJcRjMry0BY0TjfGAIx2dt3SAM/cmky0 oNAeAuSU0BAx3098d7mPB2OXDetj/NBdStl8VMs8+wP8QzPPFeVkr5j7BQvfhp9w GCGUZUtqd+dHKRXwrSfFXG18jKV3vZPZodA9CizqA9c/lYNnzwBACYFbzsB6Qyv+ Yf8UKDzycMG9JMzlq7HOwTOsj7CorBtrAteId26Q1SGdu08rbEapUFO91l1mIj8p 4nWos0BtGh3OdVVYamLatKg++A9Jd6u8DEpmRTUOkHcVe8+RwrFmCkEGVWFUr8Bl Zpp8BMd0E9y+X8HROAU547x+83kY+T0= -----END CERTIFICATE-----Generated at Wed Dec 24 21:21:25 2025 by rpki-client