This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft File: d31UDhYfpnH7JFijP_5L8z1qcBU.mft (raw, json) Hash identifier: Hj/UoGiQrXgNQQ9vV3WUE/9jCKk29cZDU39QmvYv/Jg= Subject key identifier: 02:52:B5:8A:E9:03:D5:91:22:04:0F:76:C7:D0:E2:DB:FF:57:32:13 Authority key identifier: 77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15 Certificate issuer: /CN=A913BA27/serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft Manifest number: 67 Signing time: Sun 21 Dec 2025 06:03:46 +0000 Manifest this update: Sun 21 Dec 2025 06:03:46 +0000 Manifest next update: Sun 28 Dec 2025 06:03:46 +0000 Files and hashes: 1: d31UDhYfpnH7JFijP_5L8z1qcBU.crl (hash: DvJqZ1mAa3hrVVkiYx2Qz94WysOf6p150w7wa9NfW2c=) 2: 71B7688645AB11F0949A471EC4F9AE02.roa (hash: OOybTQy1tXbxj/OFzkMaOGN0e7LlqdktJQlDDwMZpUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BA27, serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015 Validity Not Before: Dec 21 06:03:46 2025 GMT Not After : Dec 28 06:03:46 2025 GMT Subject: CN=69478dc2-f61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:64:60:67:96:4b:89:6b:f4:32:0d:9e:42: ac:73:70:97:57:8c:72:a5:6d:06:a2:ed:e4:b7:b3: 6f:66:89:1e:d6:42:5f:06:70:d4:39:ce:bf:66:ce: ca:c5:90:4b:5b:bc:00:ee:45:a1:a7:fc:9c:ee:fb: b9:49:41:91:c5:0f:13:2b:b2:58:13:dc:39:54:af: 2a:4b:61:e6:64:9c:ed:74:b5:70:a3:bc:12:11:d7: e5:26:25:1e:84:95:e0:32:33:59:87:a6:37:52:8f: 13:e5:16:21:29:d7:86:e3:7f:be:63:d3:90:d4:51: 08:b5:65:57:a0:9d:76:2f:42:de:b6:73:9f:72:71: 3b:67:e7:ac:bc:c5:ae:a7:2a:c2:26:37:f3:b1:e0: bc:a3:4f:a3:37:ef:72:73:f6:26:4e:88:2d:4c:78: 44:8c:ca:c6:16:8c:fb:d2:cf:3d:57:e1:20:11:98: 02:87:09:6b:76:85:11:b4:29:b7:8f:d6:29:2d:20: f4:ad:28:bd:2c:30:45:0d:12:06:26:65:f9:ab:4b: bc:40:36:b9:55:8d:c0:cd:33:6d:91:53:16:ab:b8: 6f:2c:92:43:df:1a:81:47:91:a9:d1:0a:c8:4c:18: 5f:1b:32:95:c8:26:97:21:8f:52:d9:3b:2c:7e:1a: 46:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:52:B5:8A:E9:03:D5:91:22:04:0F:76:C7:D0:E2:DB:FF:57:32:13 X509v3 Authority Key Identifier: keyid:77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:74:be:1d:60:97:8d:29:26:5c:18:51:42:d5:cb:0c:d3:aa: 31:07:4a:b3:87:f3:60:00:38:11:fb:59:02:8a:2b:db:6a:2a: 2b:c9:d6:dd:2b:b2:2d:5f:c4:9b:64:14:48:f0:9f:bb:49:78: 4e:59:b9:78:dc:35:17:9c:59:1c:0f:f0:d9:42:e1:b6:8e:4a: c3:96:74:43:84:cf:cd:ed:c7:df:33:43:f6:ac:25:6e:b3:60: 83:aa:37:3e:fb:b1:90:95:76:bb:75:f3:33:67:ff:eb:22:c1: 94:f9:13:ed:29:e2:94:2d:4e:85:ac:17:ad:d1:a6:f5:01:36: d7:2a:16:ae:71:6d:ea:94:78:1d:c8:fe:0f:41:3f:d9:9d:5c: fc:8d:4a:51:51:02:59:02:eb:ea:af:a1:39:9e:8d:c4:c0:18: cf:db:11:f5:a6:86:e5:3d:81:a4:65:a6:7c:06:90:3c:5b:f9: 3e:98:09:98:74:1c:64:b4:f6:52:e4:77:3a:73:e5:70:0d:c9: 3b:8b:12:00:86:a5:4c:47:9a:96:2b:d7:d3:62:b7:31:ae:1f: 5a:8d:bf:b4:21:81:45:06:80:cd:fc:96:af:27:80:95:b8:9a: ed:00:df:83:bd:6c:13:f0:92:4f:bc:9b:3b:93:9a:a1:42:db: f3:c0:30:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QkEyNzExMC8GA1UEBRMoNzc3RDU0MEUxNjFGQTY3MUZCMjQ1OEEzM0ZGRTRCRjMz RDZBNzAxNTAeFw0yNTEyMjEwNjAzNDZaFw0yNTEyMjgwNjAzNDZaMBgxFjAUBgNV BAMMDTY5NDc4ZGMyLWY2MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYAWRgZ5ZLiWv0Mg2eQqxzcJdXjHKlbQai7eS3s29miR7WQl8GcNQ5zr9mzsrF kEtbvADuRaGn/Jzu+7lJQZHFDxMrslgT3DlUrypLYeZknO10tXCjvBIR1+UmJR6E leAyM1mHpjdSjxPlFiEp14bjf75j05DUUQi1ZVegnXYvQt62c59ycTtn56y8xa6n KsImN/Ox4LyjT6M373Jz9iZOiC1MeESMysYWjPvSzz1X4SARmAKHCWt2hRG0KbeP 1iktIPStKL0sMEUNEgYmZfmrS7xANrlVjcDNM22RUxaruG8skkPfGoFHkanRCshM GF8bMpXIJpchj1LZOyx+GkajAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAlK1iukD 1ZEiBA92x9Di2/9XMhMwHwYDVR0jBBgwFoAUd31UDhYfpnH7JFijP/5L8z1qcBUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCQTI3L0VBNEU2NjlDNDU4 QzExRjBCMkJFQjY0REM0RjlBRTAyL2QzMVVEaFlmcG5IN0pGaWpQXzVMOHoxcWNC VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDMxVURoWWZwbkg3SkZpalBfNUw4ejFxY0JVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC QTI3L0VBNEU2NjlDNDU4QzExRjBCMkJFQjY0REM0RjlBRTAyL2QzMVVEaFlmcG5I N0pGaWpQXzVMOHoxcWNCVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJ0vh1gl40pJlwYUULVywzTqjEHSrOH82AAOBH7WQKKK9tqKivJ1t0r si1fxJtkFEjwn7tJeE5ZuXjcNRecWRwP8NlC4baOSsOWdEOEz83tx98zQ/asJW6z YIOqNz77sZCVdrt18zNn/+siwZT5E+0p4pQtToWsF63RpvUBNtcqFq5xbeqUeB3I /g9BP9mdXPyNSlFRAlkC6+qvoTmejcTAGM/bEfWmhuU9gaRlpnwGkDxb+T6YCZh0 HGS09lLkdzpz5XANyTuLEgCGpUxHmpYr19NitzGuH1qNv7QhgUUGgM38lq8ngJW4 mu0A34O9bBPwkk+8mzuTmqFC2/PAMDg= -----END CERTIFICATE-----Generated at Tue Dec 23 06:42:17 2025 by rpki-client