This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: QNGar3gM91a7ehRW/YiYFq38MF5QF0pBqw3gjoNEce8= Subject key identifier: 17:4F:BC:D3:BC:20:9C:7E:CB:9B:82:0A:66:AD:42:E4:C9:A8:7C:3C Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: 0128 Signing time: Fri 05 Dec 2025 02:58:20 +0000 Manifest this update: Fri 05 Dec 2025 02:58:20 +0000 Manifest next update: Fri 12 Dec 2025 02:58:20 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: VcmoN2uGoxq0ZT5anLyNzSvyzJHc5UnXyk80/Nu53Wo=) 2: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) 3: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Dec 5 02:58:20 2025 GMT Not After : Dec 12 02:58:20 2025 GMT Subject: CN=69324a4c-d1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f9:e3:b6:e6:fc:34:58:82:10:b7:95:f6:a6: 94:98:23:9b:90:f7:92:8c:18:1c:e8:4f:b7:1a:5b: cc:f6:0e:f2:ab:80:4d:9a:48:79:60:ae:e3:11:30: fc:fa:92:b1:1e:43:15:c9:a8:a0:ae:af:67:8d:ad: b1:60:1d:3f:70:84:cb:1c:a3:7c:dd:1a:99:6c:44: a8:8a:9f:8a:ce:aa:90:bb:aa:2e:a9:20:0e:e8:06: fc:47:00:f0:0f:dd:30:9e:06:fb:4b:e3:de:71:49: bf:3a:95:07:e0:b1:10:ea:1b:37:1b:bc:30:df:4f: 60:aa:f1:c8:bf:c5:a1:22:d6:cc:a9:52:13:85:de: 66:e2:c0:e9:4f:22:67:58:7b:9b:4c:df:24:c0:14: 70:a0:93:db:84:6e:9d:92:b7:56:ab:9d:d6:11:ee: b6:2c:7d:8b:e6:c3:11:8c:e3:98:0f:a2:be:d8:38: 8b:67:70:d3:7a:22:57:7c:50:a9:eb:62:5b:0f:45: de:9d:1c:96:f6:63:37:af:a7:b4:ae:d1:a6:54:68: fa:64:6f:04:d9:41:e3:2d:05:f1:64:ad:d3:d4:ba: 5d:b8:e7:45:38:5e:de:a8:c1:74:fd:1c:0f:8d:56: 5f:66:8f:2d:a5:6a:f1:10:cc:f6:60:92:38:a8:56: f3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4F:BC:D3:BC:20:9C:7E:CB:9B:82:0A:66:AD:42:E4:C9:A8:7C:3C X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4c:af:9b:b4:d1:6c:fa:3d:8d:2c:0f:ff:de:78:0a:d0:3c: f3:3f:5f:9f:6b:6c:1e:f1:2a:a2:7c:36:19:02:83:42:e1:df: 63:39:19:20:33:9a:4d:7b:16:68:71:78:d7:de:ef:73:fb:05: 95:0a:67:9f:08:dd:f7:0e:ce:23:09:df:64:32:28:29:25:7b: 5d:33:5c:0c:80:53:fa:35:6e:ae:42:21:25:37:09:09:b3:17: 6c:62:3e:eb:d9:56:61:cf:77:e1:b4:02:e5:45:29:09:d6:1c: 9d:48:1b:4f:eb:00:ea:1a:be:cd:34:a1:a8:5c:3b:7c:3a:52: d5:ab:42:7d:c6:62:58:05:db:cd:26:f5:4c:0b:a3:4e:4f:fa: be:c1:61:c6:87:54:e3:5b:1f:13:8b:2b:78:4c:0f:32:ac:6b: e0:12:cd:a3:dc:04:62:31:1c:c0:11:cd:2b:98:a2:db:4c:a2: 1e:39:0a:cf:26:a1:6c:53:43:bc:58:47:d6:7c:13:1c:e0:72: 97:52:f7:e3:94:f2:da:b3:29:e2:7b:c3:ed:29:c7:50:16:af: 3e:17:1e:e8:ee:34:93:19:dc:7c:bd:6a:f1:f6:9d:81:e7:19: 8a:08:88:8c:63:44:37:13:dd:43:d2:89:7e:38:e7:db:fa:91: 15:3c:7d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUxMjA1MDI1ODIwWhcNMjUxMjEyMDI1ODIwWjAYMRYwFAYD VQQDEw02OTMyNGE0Yy1kMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vnjtub8NFiCELeV9qaUmCObkPeSjBgc6E+3GlvM9g7yq4BNmkh5YK7jETD8 +pKxHkMVyaigrq9nja2xYB0/cITLHKN83RqZbESoip+KzqqQu6ouqSAO6Ab8RwDw D90wngb7S+PecUm/OpUH4LEQ6hs3G7ww309gqvHIv8WhItbMqVIThd5m4sDpTyJn WHubTN8kwBRwoJPbhG6dkrdWq53WEe62LH2L5sMRjOOYD6K+2DiLZ3DTeiJXfFCp 62JbD0XenRyW9mM3r6e0rtGmVGj6ZG8E2UHjLQXxZK3T1LpduOdFOF7eqMF0/RwP jVZfZo8tpWrxEMz2YJI4qFbzGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdPvNO8 IJx+y5uCCmatQuTJqHw8MB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPTK+btNFs+j2NLA//3ngK0DzzP1+fa2we8SqifDYZAoNC4d9jORkg M5pNexZocXjX3u9z+wWVCmefCN33Ds4jCd9kMigpJXtdM1wMgFP6NW6uQiElNwkJ sxdsYj7r2VZhz3fhtALlRSkJ1hydSBtP6wDqGr7NNKGoXDt8OlLVq0J9xmJYBdvN JvVMC6NOT/q+wWHGh1TjWx8Tiyt4TA8yrGvgEs2j3ARiMRzAEc0rmKLbTKIeOQrP JqFsU0O8WEfWfBMc4HKXUvfjlPLasynie8PtKcdQFq8+Fx7o7jSTGdx8vWrx9p2B 5xmKCIiMY0Q3E91D0ol+OOfb+pEVPH2T -----END CERTIFICATE-----Generated at Sun Dec 7 03:43:44 2025 by rpki-client