This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json) Hash identifier: 2Of5lqS1JOIIHQ0Sr0sH/hWYRIl/5OVfpJmk6JMCRNU= Subject key identifier: 22:B1:19:8F:53:33:57:1F:CB:A5:F2:0F:A5:13:6F:FB:88:13:D8:ED Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft Manifest number: D2 Signing time: Sun 21 Dec 2025 04:53:14 +0000 Manifest this update: Sun 21 Dec 2025 04:53:14 +0000 Manifest next update: Sun 28 Dec 2025 04:53:14 +0000 Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: wa3aa69W8eg/R6Ti5kRTW3lyiaoxmYuxItj3YWagh/E=) 2: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: ak2PMRQUjFtffexIQ55kAPaMfx+wqf8bsH7hFH3Plx4=) 3: 42F359D22DE211F0A991F83DC4F9AE02.roa (hash: GS7VGsIuP00slQDLOowlxynsnmpTUaLEp1HD+LKtTww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: Dec 21 04:53:14 2025 GMT Not After : Dec 28 04:53:14 2025 GMT Subject: CN=69477d3a-2b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:6b:d9:fe:55:f8:32:a0:25:5c:af:04:15: ef:a9:f0:28:31:93:b7:a4:91:2d:5a:17:02:ca:b6: 27:6c:b7:39:fe:26:40:e9:bc:32:e9:13:ba:01:b6: c4:e2:c2:18:88:b5:29:ce:17:7c:30:92:85:aa:01: c5:a5:86:9b:c2:52:0b:5d:f9:50:c0:74:e1:ce:33: 81:c0:7b:34:dc:c8:dc:14:0d:c6:cd:ef:75:1e:59: a0:9f:b0:db:da:50:d6:36:75:10:2b:86:7b:ff:3c: ec:83:7a:d6:64:b6:a3:43:9d:66:6f:11:39:53:80: 74:80:9f:06:ab:14:c8:0f:d2:f6:c7:80:53:3d:5a: ea:f8:cf:ac:32:72:26:01:0d:90:5c:4c:74:60:e4: 4a:e3:7a:c2:c5:30:aa:6f:3a:c4:7e:26:c6:b5:ab: 2f:33:c9:ac:49:1d:71:ea:f8:d8:6d:1d:73:83:c4: f7:d1:07:11:2d:19:a8:f0:ce:49:cc:d3:ca:91:b0: 43:59:4f:ea:ab:41:b6:a7:14:a4:d5:51:92:25:98: 00:77:85:a0:0c:c2:66:5f:ee:94:a8:3d:10:19:5f: 84:92:35:ab:e6:80:83:9b:d7:e4:0c:6c:a7:43:b0: 2d:18:e4:23:f6:70:67:a3:38:2e:e7:79:ff:2d:9f: ec:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B1:19:8F:53:33:57:1F:CB:A5:F2:0F:A5:13:6F:FB:88:13:D8:ED X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:93:29:03:b0:77:ae:9a:7a:72:5e:46:51:e2:b2:79:33:2a: 95:08:2f:ff:15:6f:a5:ff:1a:7a:a9:93:3f:f4:6c:18:f8:97: b5:cf:79:53:3f:d9:6c:91:9c:b9:dc:76:1b:a1:dc:9e:a1:7a: 61:14:3c:23:65:6d:c1:b0:2b:9c:a4:0e:db:1c:80:79:65:55: bf:3b:ef:2c:82:4f:89:11:e0:13:14:d7:6b:94:72:ed:c2:54: d9:b4:ac:b2:87:15:07:9e:59:b4:c0:58:63:62:8c:b4:f2:dc: d5:14:14:b2:e4:f8:9b:f6:2d:f9:4a:b7:c4:8b:af:36:1c:ce: a2:5f:88:00:ac:2a:58:9a:e1:f3:bb:6e:4d:d3:85:44:8f:24: 75:72:f0:92:15:c0:85:89:60:63:e4:22:42:81:14:dd:19:a8: b0:69:82:3c:15:80:88:83:f9:a3:d7:56:b1:8c:eb:67:bf:7e: bb:2e:de:28:7f:8e:33:38:82:9b:c8:cc:90:f8:30:4a:68:a6: 13:fe:a2:f3:31:ea:39:f1:5a:95:74:00:75:3b:4d:db:a9:0e: 09:b4:49:b2:84:50:d9:a9:64:ac:16:88:6b:3e:2f:b3:a2:81: 2a:cc:94:e0:b6:05:c7:e3:bc:d4:9a:88:eb:51:1c:26:cb:20: 98:61:32:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKERGNUZFMjFCN0M5NTUyMTU5MzQ0NzE3OTREOEIwNzA2 NjNEMkIzNEUwHhcNMjUxMjIxMDQ1MzE0WhcNMjUxMjI4MDQ1MzE0WjAYMRYwFAYD VQQDDA02OTQ3N2QzYS0yYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2tr2f5V+DKgJVyvBBXvqfAoMZO3pJEtWhcCyrYnbLc5/iZA6bwy6RO6AbbE 4sIYiLUpzhd8MJKFqgHFpYabwlILXflQwHThzjOBwHs03MjcFA3Gze91Hlmgn7Db 2lDWNnUQK4Z7/zzsg3rWZLajQ51mbxE5U4B0gJ8GqxTID9L2x4BTPVrq+M+sMnIm AQ2QXEx0YORK43rCxTCqbzrEfibGtasvM8msSR1x6vjYbR1zg8T30QcRLRmo8M5J zNPKkbBDWU/qq0G2pxSk1VGSJZgAd4WgDMJmX+6UqD0QGV+EkjWr5oCDm9fkDGyn Q7AtGOQj9nBnozgu53n/LZ/szwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKxGY9T M1cfy6XyD6UTb/uIE9jtMB8GA1UdIwQYMBaAFN9f4ht8lVIVk0RxeU2LBwZj0rNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84MDJBRTY0NkEy NzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVoV1RSSEY1VFlzSEJtUFNz MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3MwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVo V1RSSEY1VFlzSEJtUFNzMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHkykDsHeumnpyXkZR4rJ5MyqVCC//FW+l/xp6qZM/9GwY+Je1z3lT P9lskZy53HYbodyeoXphFDwjZW3BsCucpA7bHIB5ZVW/O+8sgk+JEeATFNdrlHLt wlTZtKyyhxUHnlm0wFhjYoy08tzVFBSy5Pib9i35SrfEi682HM6iX4gArCpYmuHz u25N04VEjyR1cvCSFcCFiWBj5CJCgRTdGaiwaYI8FYCIg/mj11axjOtnv367Lt4o f44zOIKbyMyQ+DBKaKYT/qLzMeo58VqVdAB1O03bqQ4JtEmyhFDZqWSsFohrPi+z ooEqzJTgtgXH47zUmojrURwmyyCYYTKI -----END CERTIFICATE-----Generated at Mon Dec 22 03:29:39 2025 by rpki-client