This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft File: DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json) Hash identifier: G/BxbF81uGoWto3oTi+0DVNnei2eRVWdgbtloOXASVw= Subject key identifier: 33:06:D9:09:6A:74:79:8E:CC:80:25:39:DE:7D:D7:DA:C6:35:68:B0 Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Certificate serial: 14A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft Manifest number: 1487 Signing time: Sat 20 Dec 2025 16:39:06 +0000 Manifest this update: Sat 20 Dec 2025 16:39:05 +0000 Manifest next update: Sat 27 Dec 2025 16:39:05 +0000 Files and hashes: 1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: Ofs5IVTF99rOYDEhmNElIH3jcaTpZ2wzRyZVcKYwrYo=) 2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: WCnkm4p64RYQp11JjDyofIDJwHxjWdtrAu0u0nyqyzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5286 (0x14a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Validity Not Before: Dec 20 16:39:05 2025 GMT Not After : Dec 27 16:39:05 2025 GMT Subject: CN=6946d12a-c818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:39:df:b1:bb:27:d4:fc:94:7b:85:07:79: 51:63:10:06:72:d8:df:21:79:03:5b:e3:cc:33:29: ec:16:1e:4f:02:91:47:69:0d:ee:31:fe:e5:50:49: 08:3c:b2:54:0c:9b:87:63:f3:bd:8e:83:ef:6d:03: 99:ff:c4:74:fa:91:f6:81:8b:8d:81:38:61:62:3d: 67:31:cb:08:31:36:79:6a:82:c3:d3:4e:db:34:61: 76:87:86:44:12:4d:22:51:42:55:ab:54:96:d7:4c: ad:87:c1:c0:99:b4:b8:61:58:3b:0e:09:a8:34:b8: 7c:cf:7c:66:5f:34:a0:6c:8c:3d:b5:d3:64:f0:b3: 28:67:e3:f8:93:b7:0b:89:d2:b0:4c:a9:54:be:a7: 03:6f:b4:98:9f:09:30:55:65:01:91:0e:d8:e3:22: 62:d0:a0:f5:f9:39:a3:fb:60:59:a7:e2:17:60:2e: 31:4f:99:07:74:bd:f0:70:96:e7:e9:42:a6:b0:ea: 94:5b:4f:dc:91:82:2f:e9:f7:71:3d:1b:88:3d:99: 07:f3:20:59:69:c2:6e:df:31:01:40:8f:98:ea:fb: 7b:e1:f9:d0:37:7f:6a:05:41:01:bc:a5:a1:b6:17: 16:5d:94:c4:af:bf:66:f3:74:15:f3:77:0c:52:47: 81:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:06:D9:09:6A:74:79:8E:CC:80:25:39:DE:7D:D7:DA:C6:35:68:B0 X509v3 Authority Key Identifier: keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b9:8f:a1:b4:bd:c7:ae:7b:ce:74:f8:78:8f:85:a8:20:8f: a2:3a:9b:84:06:83:25:77:f8:af:0d:1e:4c:59:51:65:77:e0: f7:86:3e:1e:bd:bd:85:49:f6:40:88:81:17:16:b5:61:68:0a: 84:72:20:38:fb:2d:6f:5a:da:9a:21:68:2e:ef:45:40:b1:5f: c8:ed:a7:66:d3:82:ff:62:93:85:d1:3b:e7:79:d8:54:d3:29: dd:72:64:62:1d:dd:71:ba:fb:a2:67:b6:7f:be:dd:4e:b1:1f: 8d:83:bf:ed:27:b6:61:5b:d7:d8:95:cc:2b:ae:0a:49:91:e9: eb:af:72:9b:a4:25:17:8b:da:c7:75:11:08:ca:93:1b:37:29: 3b:ad:d5:30:d6:84:17:c2:00:9a:1c:ae:8e:74:7f:34:40:fc: 8f:95:99:d8:c9:cc:28:04:ce:cf:3f:b5:1e:62:30:3b:4e:0e: e3:86:47:4a:6d:2f:33:57:e3:d0:8c:58:52:c3:99:ab:82:42: 16:95:5b:97:3a:18:c4:4b:f4:8c:82:62:a0:62:cd:65:ea:40: a4:21:0b:60:8a:19:d3:fe:94:a6:0f:ec:3f:e7:18:94:39:c1: 57:b5:74:c0:2e:85:ab:fd:0e:58:bd:59:f6:30:28:65:dc:b4: d8:af:dd:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw RkM1RDIzRkYwHhcNMjUxMjIwMTYzOTA1WhcNMjUxMjI3MTYzOTA1WjAYMRYwFAYD VQQDDA02OTQ2ZDEyYS1jODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwro537G7J9T8lHuFB3lRYxAGctjfIXkDW+PMMynsFh5PApFHaQ3uMf7lUEkI PLJUDJuHY/O9joPvbQOZ/8R0+pH2gYuNgThhYj1nMcsIMTZ5aoLD007bNGF2h4ZE Ek0iUUJVq1SW10yth8HAmbS4YVg7DgmoNLh8z3xmXzSgbIw9tdNk8LMoZ+P4k7cL idKwTKlUvqcDb7SYnwkwVWUBkQ7Y4yJi0KD1+Tmj+2BZp+IXYC4xT5kHdL3wcJbn 6UKmsOqUW0/ckYIv6fdxPRuIPZkH8yBZacJu3zEBQI+Y6vt74fnQN39qBUEBvKWh thcWXZTEr79m83QV83cMUkeBSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMG2Qlq dHmOzIAlOd5919rGNWiwMB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO ZGd4MmRXSFZndndQeGRJXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhuY+htL3HrnvOdPh4j4WoII+iOpuEBoMld/ivDR5MWVFld+D3hj4e vb2FSfZAiIEXFrVhaAqEciA4+y1vWtqaIWgu70VAsV/I7adm04L/YpOF0TvnedhU 0yndcmRiHd1xuvuiZ7Z/vt1OsR+Ng7/tJ7ZhW9fYlcwrrgpJkenrr3KbpCUXi9rH dREIypMbNyk7rdUw1oQXwgCaHK6OdH80QPyPlZnYycwoBM7PP7UeYjA7Tg7jhkdK bS8zV+PQjFhSw5mrgkIWlVuXOhjES/SMgmKgYs1l6kCkIQtgihnT/pSmD+w/5xiU OcFXtXTALoWr/Q5YvVn2MChl3LTYr93Y -----END CERTIFICATE-----Generated at Sun Dec 21 21:04:45 2025 by rpki-client