This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json) Hash identifier: G97W9Utf7h1wY6P6I4TmDoR/Xaq79voo+yw4vHcrROU= Subject key identifier: BC:B4:73:5C:D5:A2:C1:7D:50:2E:2A:84:9E:5D:4B:D8:D4:59:D3:B5 Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft Manifest number: 65 Signing time: Tue 23 Dec 2025 05:54:28 +0000 Manifest this update: Tue 23 Dec 2025 05:54:27 +0000 Manifest next update: Tue 30 Dec 2025 05:54:27 +0000 Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: QoyVE/AQRUXniR9/Ycw6ZvubAFKVPy1vp8+VXEJaCYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Validity Not Before: Dec 23 05:54:27 2025 GMT Not After : Dec 30 05:54:27 2025 GMT Subject: CN=694a2e93-37ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:68:be:d7:62:4f:37:ce:b3:e9:2c:2f:e6:cc: be:da:81:8b:a9:c5:a0:83:cb:0d:5f:f6:df:c3:54: f1:12:05:9c:92:fc:3c:ce:57:e7:2c:30:fe:3f:42: ff:d0:c1:da:ba:7d:66:bb:8e:db:0c:be:16:3f:1a: d6:f2:69:9a:90:88:a9:3f:70:12:7f:d1:b8:7f:62: 26:1f:86:72:87:9f:92:69:ab:7a:7b:16:ab:fc:2f: e5:7c:9e:f5:ea:91:9a:bb:38:9e:5c:ba:27:38:61: 3e:bd:dd:06:3c:b2:a3:30:0a:1d:42:92:a7:80:8f: da:8b:5d:1d:6a:2a:46:d2:62:82:73:5a:f3:36:80: ba:19:3a:4b:3b:52:f5:dc:a1:d3:5f:be:37:04:ac: 60:eb:4a:23:ea:32:d0:f7:11:2b:dc:c3:a6:d2:63: 49:ca:39:34:ad:63:f0:25:84:c5:e2:f9:de:15:3d: da:03:3d:bf:ad:d4:24:da:e2:58:8a:7c:76:72:5d: 2a:3b:78:a1:b4:b0:e9:fd:54:af:11:4d:4d:cf:f0: 24:56:b6:63:fc:ac:04:b8:c4:7a:54:79:26:ce:cd: 7b:d0:76:02:86:78:4f:6e:0a:87:b9:a2:69:2c:e1: 35:24:7f:bc:7f:5a:58:82:e9:23:d7:c9:f3:86:0a: ec:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B4:73:5C:D5:A2:C1:7D:50:2E:2A:84:9E:5D:4B:D8:D4:59:D3:B5 X509v3 Authority Key Identifier: keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:24:06:e2:0e:c1:bc:b3:d2:79:c8:fd:26:56:e4:fd:e3:e9: eb:2c:47:76:00:f3:55:af:70:bd:90:21:11:18:4a:d2:4c:bf: 8e:0a:cb:2f:9d:28:41:d2:a6:04:ae:89:2b:3f:04:ac:f9:7b: 9f:cd:7a:c8:59:c0:3b:b9:f3:d7:28:6c:af:f9:6b:69:8f:3e: 5d:ca:d5:53:1d:e3:42:25:ab:ff:81:af:45:0a:5b:c7:45:04: 1f:29:84:07:c3:9c:78:b2:e7:07:b3:33:82:52:4c:53:8e:35: a8:98:7c:ed:57:fb:8c:0c:91:ac:d0:a1:5f:8e:5f:ba:99:a6: 24:6a:d9:6f:5e:5c:3c:1c:6f:f7:99:07:b9:b5:e3:27:e3:7c: 51:59:53:1c:26:ba:fa:a0:50:69:22:77:ea:d8:84:e8:36:77: 23:e2:f9:3d:39:00:f0:a8:20:c9:15:6d:bf:7c:2b:89:31:b2: 42:d1:08:4a:fc:1b:ad:fb:69:fa:1a:05:5d:2c:95:fd:39:d8: cf:12:d3:46:7c:2a:3c:3f:59:c0:95:94:44:c2:3d:5f:21:98: 22:2e:fd:16:49:b5:25:c8:b7:e4:c6:1f:65:86:9a:09:07:b4: f7:f4:8b:b7:8b:e8:3a:7e:ba:b2:93:c8:b0:a3:72:ce:7b:3b: e9:02:ff:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTMwMzExMC8GA1UEBRMoM0YxNzc5MDk4OTE3MkY0MDkyNjdFMEZGRTc0NEVFNDhC MDE3OTFFNzAeFw0yNTEyMjMwNTU0MjdaFw0yNTEyMzAwNTU0MjdaMBgxFjAUBgNV BAMMDTY5NGEyZTkzLTM3Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfaL7XYk83zrPpLC/mzL7agYupxaCDyw1f9t/DVPESBZyS/DzOV+csMP4/Qv/Q wdq6fWa7jtsMvhY/GtbyaZqQiKk/cBJ/0bh/YiYfhnKHn5Jpq3p7Fqv8L+V8nvXq kZq7OJ5cuic4YT693QY8sqMwCh1CkqeAj9qLXR1qKkbSYoJzWvM2gLoZOks7UvXc odNfvjcErGDrSiPqMtD3ESvcw6bSY0nKOTStY/AlhMXi+d4VPdoDPb+t1CTa4liK fHZyXSo7eKG0sOn9VK8RTU3P8CRWtmP8rAS4xHpUeSbOzXvQdgKGeE9uCoe5omks 4TUkf7x/WliC6SPXyfOGCuztAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvLRzXNWi wX1QLiqEnl1L2NRZ07UwHwYDVR0jBBgwFoAUPxd5CYkXL0CSZ+D/50TuSLAXkecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxMzAzLzlCNDI0RDMwNDY4 NTExRjBBODgxODgzRUM0RjlBRTAyL1B4ZDVDWWtYTDBDU1otRF81MFR1U0xBWGtl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHhkNUNZa1hMMENTWi1EXzUwVHVTTEFYa2VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx MzAzLzlCNDI0RDMwNDY4NTExRjBBODgxODgzRUM0RjlBRTAyL1B4ZDVDWWtYTDBD U1otRF81MFR1U0xBWGtlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALYkBuIOwbyz0nnI/SZW5P3j6essR3YA81WvcL2QIREYStJMv44Kyy+d KEHSpgSuiSs/BKz5e5/NeshZwDu589cobK/5a2mPPl3K1VMd40Ilq/+Br0UKW8dF BB8phAfDnHiy5wezM4JSTFOONaiYfO1X+4wMkazQoV+OX7qZpiRq2W9eXDwcb/eZ B7m14yfjfFFZUxwmuvqgUGkid+rYhOg2dyPi+T05APCoIMkVbb98K4kxskLRCEr8 G637afoaBV0slf052M8S00Z8Kjw/WcCVlETCPV8hmCIu/RZJtSXIt+TGH2WGmgkH tPf0i7eL6Dp+urKTyLCjcs57O+kC/2Y= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:13 2025 by rpki-client