This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft File: DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json) Hash identifier: AO2jWkmoJLS9+yQ7G4coOZTeMJ6O8kAlLCriL++zgPY= Subject key identifier: 0B:92:26:82:72:B5:5B:01:5B:0B:BC:42:AA:6F:C1:EC:3F:F3:41:D3 Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Certificate serial: 14A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft Manifest number: 1488 Signing time: Mon 22 Dec 2025 16:37:15 +0000 Manifest this update: Mon 22 Dec 2025 16:37:14 +0000 Manifest next update: Mon 29 Dec 2025 16:37:14 +0000 Files and hashes: 1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: A+QLQaZc2fYbDDLj24y5fF9JO/KSxiu74PgvwiOIL84=) 2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: WCnkm4p64RYQp11JjDyofIDJwHxjWdtrAu0u0nyqyzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5287 (0x14a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Validity Not Before: Dec 22 16:37:14 2025 GMT Not After : Dec 29 16:37:14 2025 GMT Subject: CN=694973ba-e9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:e8:1d:0a:16:3e:6c:52:24:36:7c:47:0e: 6a:fc:b0:b6:eb:56:9e:31:25:d0:eb:0e:bb:af:17: 9a:92:bf:16:37:89:2c:51:21:43:1d:c6:41:af:44: b2:b8:5b:f1:51:bc:32:68:eb:84:cb:a3:72:5a:b3: 6c:3a:19:60:e4:25:f0:33:52:19:c0:45:d9:9d:75: 16:e0:84:71:7f:91:50:e6:02:44:aa:10:16:9e:4c: 95:87:bf:ac:55:2e:7a:9c:43:00:81:f7:ad:59:89: 45:b1:0d:e7:5a:9a:63:04:88:db:fa:cb:b9:46:6c: c6:6b:1b:e2:73:9b:be:18:ad:20:ea:bd:6f:a7:46: cd:5d:80:8e:a8:72:34:fe:e8:2c:8f:6f:3f:34:fa: f4:54:84:99:2b:47:b0:fb:67:b4:b1:d6:5d:79:73: 1a:1b:4e:91:a3:3b:98:94:d3:44:3b:3a:70:df:e8: 12:03:29:4b:4d:87:03:c2:91:ca:19:4e:59:67:9e: 75:21:fa:3e:b7:36:ba:79:22:4b:c2:9a:9c:ea:de: ee:42:4b:da:f5:31:79:0a:c0:21:2c:20:85:9f:36: 0c:6d:a6:e1:f7:b5:a7:87:dd:d1:21:fc:b0:73:41: 38:7b:68:3e:82:3f:0f:da:31:7b:b3:62:6d:77:ea: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:92:26:82:72:B5:5B:01:5B:0B:BC:42:AA:6F:C1:EC:3F:F3:41:D3 X509v3 Authority Key Identifier: keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:cd:b6:52:4d:fc:e5:de:02:6d:b1:95:f6:c8:2f:92:5a:5c: 61:4b:b2:3a:5a:55:a9:be:e0:5f:21:56:b5:8b:53:f8:06:b8: 06:01:b5:b5:2e:9d:83:5c:00:b3:46:67:36:05:b4:a5:ef:1e: e7:12:46:c6:47:75:d7:53:7d:46:7a:a3:cb:84:0a:27:9e:6e: 20:ac:da:00:a2:6b:3d:0a:b7:2c:53:7b:41:89:4f:a7:06:77: d7:0b:5a:ea:5b:d7:66:71:11:d9:f5:3a:14:3c:d6:9e:12:ef: 46:e7:1e:08:77:cf:fb:87:c0:5b:d9:3c:fe:0f:e6:17:32:98: bb:90:ef:3b:8c:7a:65:fd:fc:24:2d:b3:37:23:ce:70:2d:bb: d1:b8:89:2e:82:5e:ef:d4:6f:d4:df:e8:91:77:a9:49:ec:52: 6c:44:6e:73:47:8a:63:56:db:7d:49:2c:a7:e4:82:d3:e5:5c: 95:b8:36:c7:92:d7:e0:bf:5b:51:f0:35:ea:8e:03:30:24:cf: 4d:60:59:c5:ab:ec:fa:47:59:f9:0a:f2:7d:f6:4c:62:12:eb: 8a:bf:a7:9a:12:90:b8:c8:e1:ee:79:ac:c2:5e:6a:25:f7:72: 11:21:12:94:69:f7:de:35:0e:a0:28:cb:f3:fb:1e:00:47:aa: b9:8c:c1:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw RkM1RDIzRkYwHhcNMjUxMjIyMTYzNzE0WhcNMjUxMjI5MTYzNzE0WjAYMRYwFAYD VQQDDA02OTQ5NzNiYS1lOWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHvoHQoWPmxSJDZ8Rw5q/LC261aeMSXQ6w67rxeakr8WN4ksUSFDHcZBr0Sy uFvxUbwyaOuEy6NyWrNsOhlg5CXwM1IZwEXZnXUW4IRxf5FQ5gJEqhAWnkyVh7+s VS56nEMAgfetWYlFsQ3nWppjBIjb+su5RmzGaxvic5u+GK0g6r1vp0bNXYCOqHI0 /ugsj28/NPr0VISZK0ew+2e0sdZdeXMaG06RozuYlNNEOzpw3+gSAylLTYcDwpHK GU5ZZ551Ifo+tza6eSJLwpqc6t7uQkva9TF5CsAhLCCFnzYMbabh97Wnh93RIfyw c0E4e2g+gj8P2jF7s2Jtd+q3zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuSJoJy tVsBWwu8Qqpvwew/80HTMB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO ZGd4MmRXSFZndndQeGRJXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyzbZSTfzl3gJtsZX2yC+SWlxhS7I6WlWpvuBfIVa1i1P4BrgGAbW1 Lp2DXACzRmc2BbSl7x7nEkbGR3XXU31GeqPLhAonnm4grNoAoms9CrcsU3tBiU+n BnfXC1rqW9dmcRHZ9ToUPNaeEu9G5x4Id8/7h8Bb2Tz+D+YXMpi7kO87jHpl/fwk LbM3I85wLbvRuIkugl7v1G/U3+iRd6lJ7FJsRG5zR4pjVtt9SSyn5ILT5VyVuDbH ktfgv1tR8DXqjgMwJM9NYFnFq+z6R1n5CvJ99kxiEuuKv6eaEpC4yOHueazCXmol 93IRIRKUaffeNQ6gKMvz+x4AR6q5jMGJ -----END CERTIFICATE-----Generated at Tue Dec 23 20:56:34 2025 by rpki-client