This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: NkOhGo9tZlP6JwW2RFId0bcw5ARfyJqBoAqA0MNbBp8= Subject key identifier: B5:6C:D1:C5:22:B8:13:6E:FA:7D:77:4E:13:25:65:CA:3A:31:C4:25 Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: 0130 Signing time: Sun 21 Dec 2025 03:59:01 +0000 Manifest this update: Sun 21 Dec 2025 03:59:01 +0000 Manifest next update: Sun 28 Dec 2025 03:59:01 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: tkBYvNGERPWuE8iIieLcmld9P0UFQ3poh5oCriefVfM=) 2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=) 3: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Dec 21 03:59:01 2025 GMT Not After : Dec 28 03:59:01 2025 GMT Subject: CN=69477085-9ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8a:9e:7e:ec:4e:73:47:af:b0:ef:79:c1:b7: 91:c9:8b:53:8d:a6:2a:0c:d9:97:fa:6b:76:8b:8a: 19:b6:97:97:b7:ea:61:d7:88:eb:d0:04:bf:f7:0f: b8:6e:85:1a:cc:5a:37:2a:67:07:66:e2:cc:66:68: 67:81:84:91:90:40:7d:5b:20:3b:b1:c2:bc:74:bc: c6:ab:d9:73:66:17:a2:7f:e7:9e:59:0a:9a:27:53: 08:92:72:90:60:2e:18:ca:a1:37:57:71:e4:3b:23: eb:e8:30:0f:c3:84:cf:1c:05:5e:4c:0c:dc:96:db: 8e:32:a5:89:b5:b9:72:ac:47:97:6d:2b:54:b0:d5: e4:a4:21:65:c1:ef:d5:3a:eb:01:2e:5e:a2:0d:3c: 63:78:c2:64:00:42:c1:33:0a:ad:92:72:5f:98:6d: 2a:3a:4e:2f:ee:2e:ef:9e:79:2b:2f:50:03:19:ca: 32:d7:ec:3f:d9:fd:a0:5a:8e:d6:99:ec:9e:d5:f1: fe:60:a4:71:38:c4:98:29:63:8a:b7:9b:ae:86:df: 7e:8e:33:be:eb:6b:07:2f:e5:7f:a7:84:a0:5d:89: 30:0b:fd:9b:0c:f3:be:ff:fa:a1:a1:4b:cd:fb:3f: b0:a7:de:42:7d:a9:26:2c:40:33:80:16:2a:6e:5a: 48:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6C:D1:C5:22:B8:13:6E:FA:7D:77:4E:13:25:65:CA:3A:31:C4:25 X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:77:1e:a4:99:9f:db:60:19:3e:07:44:6c:37:a6:e0:00:71: 2d:f1:f8:9b:55:ec:de:0b:fe:ab:42:42:e8:27:77:84:28:7e: 92:f8:e9:19:ec:f7:6d:6f:28:4c:bb:23:3d:9c:d6:18:38:36: e6:5c:12:ff:10:62:ad:12:33:f5:62:90:82:12:99:be:fc:a6: e8:eb:22:07:fa:d9:da:8c:db:26:4e:62:52:06:37:d6:9b:73: e6:1b:62:8d:56:a4:ca:bc:23:be:44:4e:d4:27:ed:8e:e7:db: b1:2a:d2:f7:6f:b7:b2:32:a7:d6:f8:5f:34:c6:18:df:f0:7e: 57:46:f7:01:2d:30:d4:60:fe:9d:47:d8:61:58:30:59:6d:d3: bc:55:b3:fc:3e:63:25:47:b9:68:a6:33:90:fa:aa:01:5a:8f: 01:b2:b8:a7:e6:f0:50:26:2a:cd:51:c8:d5:f0:0b:6e:11:ff: 16:7b:52:26:68:2f:e1:89:75:c2:94:9f:ee:d6:2e:f0:83:30: b5:b1:f6:ee:ad:95:74:62:29:a3:a5:ff:3a:9c:86:ba:cc:fe: 50:f4:d5:ef:3e:2e:52:93:4e:33:85:95:de:22:92:d9:e6:ca: 56:03:fd:d3:2e:8e:67:3f:98:8f:78:54:24:9d:f3:e3:58:36: 6a:cf:01:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUxMjIxMDM1OTAxWhcNMjUxMjI4MDM1OTAxWjAYMRYwFAYD VQQDDA02OTQ3NzA4NS05ZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkYqefuxOc0evsO95wbeRyYtTjaYqDNmX+mt2i4oZtpeXt+ph14jr0AS/9w+4 boUazFo3KmcHZuLMZmhngYSRkEB9WyA7scK8dLzGq9lzZheif+eeWQqaJ1MIknKQ YC4YyqE3V3HkOyPr6DAPw4TPHAVeTAzcltuOMqWJtblyrEeXbStUsNXkpCFlwe/V OusBLl6iDTxjeMJkAELBMwqtknJfmG0qOk4v7i7vnnkrL1ADGcoy1+w/2f2gWo7W meye1fH+YKRxOMSYKWOKt5uuht9+jjO+62sHL+V/p4SgXYkwC/2bDPO+//qhoUvN +z+wp95CfakmLEAzgBYqblpIKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVs0cUi uBNu+n13ThMlZco6McQlMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3dx6kmZ/bYBk+B0RsN6bgAHEt8fibVezeC/6rQkLoJ3eEKH6S+OkZ 7PdtbyhMuyM9nNYYODbmXBL/EGKtEjP1YpCCEpm+/Kbo6yIH+tnajNsmTmJSBjfW m3PmG2KNVqTKvCO+RE7UJ+2O59uxKtL3b7eyMqfW+F80xhjf8H5XRvcBLTDUYP6d R9hhWDBZbdO8VbP8PmMlR7lopjOQ+qoBWo8Bsrin5vBQJirNUcjV8AtuEf8We1Im aC/hiXXClJ/u1i7wgzC1sfburZV0Yimjpf86nIa6zP5Q9NXvPi5Sk04zhZXeIpLZ 5spWA/3TLo5nP5iPeFQknfPjWDZqzwEl -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:57 2025 by rpki-client