This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft File: 31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json) Hash identifier: BRnlS/6LLir4Mk9aubZa4Y9dCh2/xsPa9FX2wzpRuek= Subject key identifier: 75:61:1B:DA:06:A6:4F:BB:D3:B2:1D:8F:D3:37:6D:A1:8E:81:D5:A2 Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE Certificate issuer: /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft Manifest number: 01D6 Signing time: Fri 05 Dec 2025 01:04:25 +0000 Manifest this update: Fri 05 Dec 2025 01:04:24 +0000 Manifest next update: Fri 12 Dec 2025 01:04:24 +0000 Files and hashes: 1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: 67Jnz2Tb+vDbITvrFhQbg3MmXfkB7yEddmvaiYGpSlg=) 2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: a6qqO3amLPBWrWsiageKzRj9w8Ftk/NLdlmIk76Re5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE Validity Not Before: Dec 5 01:04:24 2025 GMT Not After : Dec 12 01:04:24 2025 GMT Subject: CN=69322f98-dc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:f2:05:da:1f:7a:4c:13:9f:26:b7:48:b8: bf:da:79:1a:95:b7:9c:d7:6a:94:99:3c:e9:37:9e: df:6d:61:fa:8d:39:2c:15:24:dc:ff:ca:45:ef:e5: b3:07:b9:98:4b:f7:89:18:bd:a6:de:7b:36:f7:9c: b1:9f:78:fa:b6:a3:ab:ac:ca:b9:09:0c:e2:f1:c9: f0:35:6e:ab:fb:9d:c5:59:32:7c:a5:76:b7:db:3b: a6:32:22:90:7f:0d:39:ab:9b:6e:07:e7:ac:d4:44: ac:90:0e:fb:cc:62:bd:5c:c9:1f:4c:d7:26:a9:0e: be:4f:50:c3:7f:01:a6:e2:91:1f:d1:b1:5f:fa:5a: 98:eb:4b:d1:8b:84:3a:f9:41:4f:c0:c2:cb:24:29: e0:e7:01:08:43:73:cc:89:de:fa:c4:3d:8e:95:e6: d2:10:21:c1:ca:b1:74:17:7e:a9:36:fd:df:ad:1d: c6:d4:50:06:40:ee:67:eb:bf:de:0b:a5:74:49:66: 11:82:94:00:9d:3f:fa:c3:1c:78:fe:19:0d:8b:65: 70:0a:e4:85:1c:ca:b2:a6:6e:dc:45:c7:20:20:97: a4:b2:44:e7:8f:33:1e:8e:51:f9:dd:aa:e7:b0:95: 38:36:1d:d5:9b:1d:69:a4:2f:24:45:fe:57:20:7a: c7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:61:1B:DA:06:A6:4F:BB:D3:B2:1D:8F:D3:37:6D:A1:8E:81:D5:A2 X509v3 Authority Key Identifier: keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:15:a3:9a:9f:f9:c1:31:91:87:9f:bb:24:b3:a0:4a:2a:e7: fe:12:de:8a:ec:96:43:1d:c1:22:f9:6d:e8:67:f0:e1:0b:91: 16:de:55:47:9e:3c:f6:a2:67:44:e0:8a:67:a1:a6:a3:ac:71: 66:2f:9f:88:d5:2a:aa:48:98:20:7a:d2:72:44:81:a3:57:3e: 27:0f:71:97:1f:ac:98:df:3d:91:b6:7b:d9:9d:7d:c1:f8:a4: 6d:c2:7c:a7:f5:c0:86:6d:00:8b:fa:01:e5:a7:8f:53:90:ee: a2:34:7c:b0:f3:1c:c0:18:58:8a:ef:b6:f2:0a:9c:8d:f9:b2: 46:e0:fd:22:9a:c8:da:a6:e6:b2:ef:70:0f:34:70:e6:66:8d: 50:ec:b5:e9:b4:05:be:12:c7:ab:9d:4f:ba:28:c0:b2:b7:6c: 18:a8:66:29:91:6c:6c:07:87:03:c7:ba:f5:e5:d6:2d:4d:7b: e0:16:c2:d0:19:24:8c:c5:06:41:3a:f6:72:60:3b:0a:9c:f1: 17:ea:7f:fa:30:2d:53:70:4d:49:71:53:79:3a:f9:3f:ac:7c: 04:e2:be:75:6f:1f:73:3c:e1:12:68:a6:07:ec:40:a5:ee:ec: 7e:a1:56:a8:84:67:99:d9:9e:c6:58:1d:57:63:58:48:de:b5: 25:1e:d9:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTExNzAxMTAvBgNVBAUTKERGNTM4QkJBQTkzN0I2OUJBMDBCQjI3QjcxQTRCNzc2 RTZFNDE5RkUwHhcNMjUxMjA1MDEwNDI0WhcNMjUxMjEyMDEwNDI0WjAYMRYwFAYD VQQDEw02OTMyMmY5OC1kYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnvyBdofekwTnya3SLi/2nkalbec12qUmTzpN57fbWH6jTksFSTc/8pF7+Wz B7mYS/eJGL2m3ns295yxn3j6tqOrrMq5CQzi8cnwNW6r+53FWTJ8pXa32zumMiKQ fw05q5tuB+es1ESskA77zGK9XMkfTNcmqQ6+T1DDfwGm4pEf0bFf+lqY60vRi4Q6 +UFPwMLLJCng5wEIQ3PMid76xD2OlebSECHByrF0F36pNv3frR3G1FAGQO5n67/e C6V0SWYRgpQAnT/6wxx4/hkNi2VwCuSFHMqypm7cRccgIJekskTnjzMejlH53arn sJU4Nh3Vmx1ppC8kRf5XIHrHGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVhG9oG pk+707Idj9M3baGOgdWiMB8GA1UdIwQYMBaAFN9Ti7qpN7aboAuye3Gkt3bm5Bn+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTE3MC9GMzIzMDhDMjA0 MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3RwdWdDN0o3Y2FTM2R1YmtH ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxT0x1cWszdHB1Z0M3SjdjYVMzZHVia0dmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTE3MC9GMzIzMDhDMjA0MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3Rw dWdDN0o3Y2FTM2R1YmtHZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATFaOan/nBMZGHn7sks6BKKuf+Et6K7JZDHcEi+W3oZ/DhC5EW3lVH njz2omdE4IpnoaajrHFmL5+I1SqqSJggetJyRIGjVz4nD3GXH6yY3z2RtnvZnX3B +KRtwnyn9cCGbQCL+gHlp49TkO6iNHyw8xzAGFiK77byCpyN+bJG4P0imsjapuay 73APNHDmZo1Q7LXptAW+EsernU+6KMCyt2wYqGYpkWxsB4cDx7r15dYtTXvgFsLQ GSSMxQZBOvZyYDsKnPEX6n/6MC1TcE1JcVN5Ovk/rHwE4r51bx9zPOESaKYH7ECl 7ux+oVaohGeZ2Z7GWB1XY1hI3rUlHtlZ -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:28 2025 by rpki-client