This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: d2zqhzAlY5sMdXBPyJPvWNvavYqQ1HYgv/AY+YyW8eE= Subject key identifier: 87:EE:2E:6D:89:4A:DE:40:E3:22:A4:17:99:C1:56:EC:60:79:3F:D9 Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: 012F Signing time: Fri 19 Dec 2025 03:57:49 +0000 Manifest this update: Fri 19 Dec 2025 03:57:49 +0000 Manifest next update: Fri 26 Dec 2025 03:57:49 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: CznTecpphLDPMXOpC7blTAStRNEK07gpFHyruDEhWPw=) 2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=) 3: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Dec 19 03:57:49 2025 GMT Not After : Dec 26 03:57:49 2025 GMT Subject: CN=6944cd3d-62b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:03:60:85:a9:a5:0c:bd:1c:3f:33:f5:9c:99: 2b:a0:2b:df:07:99:d1:0f:7f:40:0b:6d:0b:01:17: 82:c8:da:81:6e:7b:8e:1a:c4:37:68:bf:0e:b4:31: 32:15:b2:9f:b4:2d:16:28:a0:ae:5e:85:b6:25:da: 35:e3:db:13:39:34:c0:23:4d:02:0b:1f:e5:70:0d: 09:5f:b7:5e:26:96:c8:de:b7:b2:a9:e6:82:a9:a7: 78:6e:16:db:d4:38:bb:da:4b:d1:b3:2b:0c:23:4b: 43:2d:a2:e2:4c:9e:5f:31:24:d1:67:66:f8:79:16: 7a:62:a7:12:67:cc:c7:4c:80:f1:3a:d2:fd:f9:ba: df:0b:ed:b8:3a:40:cd:5d:5f:c7:51:fa:7d:07:6a: 74:fc:b6:71:31:54:40:03:c5:70:7b:d0:84:75:e0: f7:b8:31:40:c2:47:6b:8f:65:18:3f:41:2b:0e:89: 5f:5b:33:13:74:70:4e:26:a8:b4:e7:e3:13:ce:f4: 58:4a:87:b9:30:6c:54:a7:c1:ac:06:ba:0c:31:1f: 25:27:ce:21:7a:c6:e0:6e:e9:7b:71:bc:1a:a9:6c: ca:51:c1:00:ad:95:97:8c:f9:93:6b:dd:77:8f:d2: e3:7d:78:e1:7f:42:0a:c6:2c:6c:76:db:c9:46:51: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EE:2E:6D:89:4A:DE:40:E3:22:A4:17:99:C1:56:EC:60:79:3F:D9 X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7f:90:f9:01:f2:1f:6b:e0:73:74:3b:a0:c7:a8:33:91:c6: 09:de:a9:52:97:63:10:3d:d7:23:3b:52:d1:c8:4c:83:01:9d: dc:bf:38:50:2c:da:38:60:44:cb:6c:b9:38:b1:d2:5a:f2:40: bd:c7:d9:b2:81:e5:58:30:59:00:cb:09:c1:58:ff:60:a5:c0: e6:03:2d:a3:02:32:1c:f8:ec:b7:fd:dc:b9:72:0b:93:ed:c2: 57:49:90:3c:0f:fa:33:3e:1b:60:f2:9c:58:76:6d:09:9d:59: 7e:55:17:82:4c:5d:0e:97:f2:41:f8:c0:ad:01:e3:48:2e:ec: df:3d:3a:96:cd:ee:89:b5:d4:2e:9d:37:66:a1:c0:97:65:d0: 22:67:14:e4:a4:6f:85:d2:77:be:33:1d:6e:29:f6:1e:23:46: 9b:f6:74:19:e9:c2:9b:2f:11:62:f4:c7:46:8d:81:72:68:07: 41:1c:cf:64:83:1a:53:d0:fd:cd:0d:36:55:5c:c6:31:da:bd: 63:99:f5:d9:03:ee:8e:e2:21:7c:60:f5:bc:16:22:3f:20:e5: 94:f7:fb:50:c9:ba:2e:0c:1e:80:9f:0b:a8:bf:91:e7:9d:bb: 5e:82:ba:a1:b0:96:9a:60:d2:37:e4:67:67:76:4a:c3:27:c2: 5f:cb:50:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUxMjE5MDM1NzQ5WhcNMjUxMjI2MDM1NzQ5WjAYMRYwFAYD VQQDDA02OTQ0Y2QzZC02MmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ANghamlDL0cPzP1nJkroCvfB5nRD39AC20LAReCyNqBbnuOGsQ3aL8OtDEy FbKftC0WKKCuXoW2Jdo149sTOTTAI00CCx/lcA0JX7deJpbI3reyqeaCqad4bhbb 1Di72kvRsysMI0tDLaLiTJ5fMSTRZ2b4eRZ6YqcSZ8zHTIDxOtL9+brfC+24OkDN XV/HUfp9B2p0/LZxMVRAA8Vwe9CEdeD3uDFAwkdrj2UYP0ErDolfWzMTdHBOJqi0 5+MTzvRYSoe5MGxUp8GsBroMMR8lJ84hesbgbul7cbwaqWzKUcEArZWXjPmTa913 j9LjfXjhf0IKxixsdtvJRlFbTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfuLm2J St5A4yKkF5nBVuxgeT/ZMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9f5D5AfIfa+BzdDugx6gzkcYJ3qlSl2MQPdcjO1LRyEyDAZ3cvzhQ LNo4YETLbLk4sdJa8kC9x9mygeVYMFkAywnBWP9gpcDmAy2jAjIc+Oy3/dy5cguT 7cJXSZA8D/ozPhtg8pxYdm0JnVl+VReCTF0Ol/JB+MCtAeNILuzfPTqWze6JtdQu nTdmocCXZdAiZxTkpG+F0ne+Mx1uKfYeI0ab9nQZ6cKbLxFi9MdGjYFyaAdBHM9k gxpT0P3NDTZVXMYx2r1jmfXZA+6O4iF8YPW8FiI/IOWU9/tQybouDB6Anwuov5Hn nbtegrqhsJaaYNI35GdndkrDJ8Jfy1A8 -----END CERTIFICATE-----Generated at Sun Dec 21 04:28:27 2025 by rpki-client