This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft File: b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json) Hash identifier: JI2mwnxJU1e0GnSu2KOIv0k3UoeW3nko6WuG7suRAGg= Subject key identifier: 15:6C:4C:9B:B1:44:AE:2D:12:DA:D4:D2:34:F0:EA:46:5C:25:7C:AA Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 Certificate issuer: /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft Manifest number: C3 Signing time: Fri 05 Dec 2025 03:52:13 +0000 Manifest this update: Fri 05 Dec 2025 03:52:13 +0000 Manifest next update: Fri 12 Dec 2025 03:52:13 +0000 Files and hashes: 1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: VztpesSMcVKOdj82RRfxUllat4ySDzo/mKfo6kiUBKc=) 2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: iUCXkP/k8vFDK+xe4w0gGSkxJOnd/FNj32EaA1KJbt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Validity Not Before: Dec 5 03:52:13 2025 GMT Not After : Dec 12 03:52:13 2025 GMT Subject: CN=693256ed-dde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d8:f0:2a:7b:56:80:00:fe:bc:ba:69:50:4a: 01:3b:49:96:ba:61:0a:7b:29:12:74:b3:87:90:89: ca:0c:bd:e6:4f:88:fe:6d:ba:d5:f6:e3:3c:43:0a: 2d:19:9d:05:12:c6:4e:93:9c:ec:22:45:4f:e0:c7: 7c:5b:a1:00:97:9d:6b:61:24:b4:de:96:8e:52:b0: 86:ef:60:ba:9e:e7:3a:a3:94:c0:f2:16:0d:88:e7: f0:50:c1:df:d5:58:bf:40:a3:4f:33:ca:c7:eb:a9: dd:23:f4:f2:68:f9:37:66:3a:ec:09:6f:da:45:20: 92:78:a4:61:ab:0d:16:78:a6:1b:42:70:e6:7a:d7: 11:e1:02:96:4c:ca:da:59:bf:5f:e7:18:57:a0:cc: 05:05:e7:a8:f9:b8:92:50:71:dc:56:ff:f7:a6:eb: 9f:a9:09:4f:f2:4f:28:8e:4b:2c:4e:b0:b3:1a:64: 71:a5:97:86:c0:20:7d:b3:37:1c:68:8c:5f:a5:4e: f1:6f:66:f3:af:ab:36:c9:37:78:52:f9:0f:aa:fc: 07:08:18:9b:dd:2b:3b:17:b8:9f:62:4a:7a:a4:73: f2:73:e8:11:52:f7:44:26:69:82:77:1f:28:06:15: 8d:8c:f1:f5:88:dc:38:a6:94:b8:06:58:24:44:f1: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6C:4C:9B:B1:44:AE:2D:12:DA:D4:D2:34:F0:EA:46:5C:25:7C:AA X509v3 Authority Key Identifier: keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b3:af:61:a5:07:04:23:3b:46:ea:48:8b:e6:a4:3b:07:f3: cf:7c:70:58:4a:31:a7:4e:e8:35:89:ba:f8:30:2b:85:ea:1f: 82:42:f4:6d:cf:f2:a2:22:b7:b8:e8:a4:e2:72:a0:7b:5f:82: 75:3d:ca:a1:ab:40:c9:77:77:47:7d:6b:65:9f:60:60:a1:34: 4d:eb:85:74:5a:ed:fd:ab:35:b2:21:05:7c:3e:1e:ea:22:bc: 87:f8:3f:24:e4:e3:f0:0d:4d:8b:d7:ba:16:dc:48:34:2d:18: 68:72:c1:e4:6c:2a:d7:42:ae:d8:fa:80:60:fb:74:94:49:ea: a7:f4:ff:3a:ce:67:99:44:19:ff:5f:72:be:24:25:dd:d5:b7: 9b:de:0c:6b:30:b7:88:d8:42:b3:87:3a:60:26:bd:13:07:73: 51:0a:23:00:d4:1f:a1:16:a3:2d:90:d3:01:68:7b:ac:85:d7: ae:6f:9d:c5:67:22:51:e0:1f:9c:6c:a1:e9:87:45:6a:4c:de: eb:0c:fb:21:b3:68:4f:cf:40:3d:ea:19:57:f5:13:7d:8f:36: 07:fd:0e:85:1e:4c:bc:72:5a:63:67:fd:ba:e5:ab:d4:a8:51: 07:63:fc:ea:7c:78:d3:25:59:59:c7:02:58:6d:fb:15:51:b4: 65:e8:89:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2RTQxMTAvBgNVBAUTKDZGN0U1OEQwODk2Mzg5RjdFN0ZFNEU4Nzk1QUE1NTVE NUM1NTUxODgwHhcNMjUxMjA1MDM1MjEzWhcNMjUxMjEyMDM1MjEzWjAYMRYwFAYD VQQDEw02OTMyNTZlZC1kZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdjwKntWgAD+vLppUEoBO0mWumEKeykSdLOHkInKDL3mT4j+bbrV9uM8Qwot GZ0FEsZOk5zsIkVP4Md8W6EAl51rYSS03paOUrCG72C6nuc6o5TA8hYNiOfwUMHf 1Vi/QKNPM8rH66ndI/TyaPk3ZjrsCW/aRSCSeKRhqw0WeKYbQnDmetcR4QKWTMra Wb9f5xhXoMwFBeeo+biSUHHcVv/3puufqQlP8k8ojkssTrCzGmRxpZeGwCB9szcc aIxfpU7xb2bzr6s2yTd4UvkPqvwHCBib3Ss7F7ifYkp6pHPyc+gRUvdEJmmCdx8o BhWNjPH1iNw4ppS4BlgkRPHF8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVsTJux RK4tEtrU0jTw6kZcJXyqMB8GA1UdIwQYMBaAFG9+WNCJY4n35/5Oh5WqVV1cVVGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZFNC8zQUJBODBBQUE2 ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9iMzVZMElsamlmZm5fazZIbGFwVlhWeFZV WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IzNVkwSWxqaWZmbl9rNkhsYXBWWFZ4VlVZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZFNC8zQUJBODBBQUE2ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9iMzVZMElsamlm Zm5fazZIbGFwVlhWeFZVWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCas69hpQcEIztG6kiL5qQ7B/PPfHBYSjGnTug1ibr4MCuF6h+CQvRt z/KiIre46KTicqB7X4J1Pcqhq0DJd3dHfWtln2BgoTRN64V0Wu39qzWyIQV8Ph7q IryH+D8k5OPwDU2L17oW3Eg0LRhocsHkbCrXQq7Y+oBg+3SUSeqn9P86zmeZRBn/ X3K+JCXd1beb3gxrMLeI2EKzhzpgJr0TB3NRCiMA1B+hFqMtkNMBaHushdeub53F ZyJR4B+cbKHph0VqTN7rDPshs2hPz0A96hlX9RN9jzYH/Q6FHky8clpjZ/265avU qFEHY/zqfHjTJVlZxwJYbfsVUbRl6InG -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:23 2025 by rpki-client