This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json) Hash identifier: 4NP2hDBG55h3ikhQWOohlxD8dn/EA1na05e0dKlcDiI= Subject key identifier: 14:3D:DF:8C:CA:10:F5:E8:C0:CD:64:44:78:8A:BD:43:78:A8:08:A3 Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft Manifest number: 44 Signing time: Fri 23 Jan 2026 06:23:25 +0000 Manifest this update: Fri 23 Jan 2026 06:23:24 +0000 Manifest next update: Fri 30 Jan 2026 06:23:24 +0000 Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: 8UsK86m2hgAay/A9/A3xLc+TraD336Kl1kSG3WCHTNE=) 2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: o8m432Z1DaEAELBYfiFTDCeo+0yznHgf97uZzcWpBFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Validity Not Before: Jan 23 06:23:24 2026 GMT Not After : Jan 30 06:23:24 2026 GMT Subject: CN=697313dd-3520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6b:ec:b4:79:47:32:9c:26:07:b0:57:d9:eb: 11:bf:5b:b7:83:44:48:73:98:3a:e3:b5:a4:29:3d: 94:8b:e0:56:81:2c:cb:80:ec:00:c7:03:5a:fa:99: 8e:da:5a:72:69:c4:a5:c3:75:a5:8b:f8:5d:4e:78: 2f:07:4c:b6:5a:63:32:ac:0b:0e:4f:54:8c:2a:9a: de:c3:b0:95:6d:b2:69:40:d0:1f:76:11:51:15:2f: 9e:26:c8:b1:e6:a3:90:b6:b8:62:3b:cb:93:cc:a8: 59:ab:a5:04:5a:db:34:5f:0d:ef:a0:24:5f:4d:50: d3:16:73:59:b4:3f:a4:14:91:42:60:bc:43:86:f3: be:4e:e7:8e:9e:31:44:50:ca:d1:f1:c0:b2:65:19: a0:2f:79:e1:18:ac:64:66:6f:bd:64:8e:67:61:81: 6b:37:75:0f:d6:ad:60:5b:09:84:73:15:28:94:2e: 50:e4:f9:00:7c:ca:40:ab:3b:6e:05:28:97:53:0b: 08:f2:b4:ed:37:30:df:8d:ff:c4:01:e5:3b:7d:02: 06:50:3b:f8:10:ef:fd:a2:aa:d8:1e:8c:b5:bb:ba: 02:ef:6a:40:27:74:26:f1:cf:8b:56:ea:2d:9e:5d: 5b:ca:f8:71:4d:c9:0a:f5:f0:3a:c3:92:a0:6b:c8: 82:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3D:DF:8C:CA:10:F5:E8:C0:CD:64:44:78:8A:BD:43:78:A8:08:A3 X509v3 Authority Key Identifier: keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:1d:6d:dc:24:6e:6a:07:b1:c2:73:f2:1a:6b:6a:82:3b:5e: fd:38:df:a0:d0:5e:c0:c9:7a:0e:a2:ec:20:80:05:df:c2:4a: 0d:a9:92:64:65:7c:f5:26:aa:cb:dd:99:f8:ba:19:78:99:f8: 75:4d:2b:a5:aa:df:9e:8c:0f:98:28:d2:ad:22:f2:d1:71:ff: 0e:c5:73:d5:da:e5:05:08:f0:87:42:9a:b2:6f:ad:26:15:df: a9:56:52:12:b4:36:d0:73:e7:b2:d5:7f:6a:89:c3:a1:b5:1d: bc:cc:95:68:67:66:7c:f5:4d:af:79:23:ab:af:d2:e5:56:7d: 76:1d:4f:ea:a7:1b:bc:05:cf:1f:d1:ab:7e:66:0e:df:f9:7c: 02:d0:7e:7e:59:cf:64:0d:0f:f6:65:94:f9:60:01:a3:cb:55: 18:bd:59:c3:01:35:33:32:90:6a:29:97:b4:f2:2f:18:24:90: 9a:6e:67:e7:b2:56:31:0e:46:cf:d7:b1:93:80:d3:75:0f:be: 54:81:d3:3c:3c:4b:13:dc:30:f9:8c:7d:94:83:a5:e5:70:50: 81:3a:4a:cb:45:90:d4:fd:10:0b:40:cc:39:0c:27:2b:89:b7: af:cf:83:db:3d:d7:2f:3a:6f:dd:65:cb:ff:4f:06:37:e6:1d: 65:7e:9e:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUQ1MTExMC8GA1UEBRMoREY5MUI3NzBCQzMxQjUyRkM4OTRCREQ4NEE2NzU4Mjc1 QUFFNTMxRDAeFw0yNjAxMjMwNjIzMjRaFw0yNjAxMzAwNjIzMjRaMBgxFjAUBgNV BAMMDTY5NzMxM2RkLTM1MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDja+y0eUcynCYHsFfZ6xG/W7eDREhzmDrjtaQpPZSL4FaBLMuA7ADHA1r6mY7a WnJpxKXDdaWL+F1OeC8HTLZaYzKsCw5PVIwqmt7DsJVtsmlA0B92EVEVL54myLHm o5C2uGI7y5PMqFmrpQRa2zRfDe+gJF9NUNMWc1m0P6QUkUJgvEOG875O546eMURQ ytHxwLJlGaAveeEYrGRmb71kjmdhgWs3dQ/WrWBbCYRzFSiULlDk+QB8ykCrO24F KJdTCwjytO03MN+N/8QB5Tt9AgZQO/gQ7/2iqtgejLW7ugLvakAndCbxz4tW6i2e XVvK+HFNyQr18DrDkqBryIKJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFD3fjMoQ 9ejAzWREeIq9Q3ioCKMwHwYDVR0jBBgwFoAU35G3cLwxtS/IlL3YSmdYJ1quUx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRDUxL0E2ODJFMUM0OEZD NzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNfSWxMM1lTbWRZSjFxdVV4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzVHM2NMd3h0U19JbEwzWVNtZFlKMXF1VXgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RDUxL0E2ODJFMUM0OEZDNzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNf SWxMM1lTbWRZSjFxdVV4MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL4dbdwkbmoHscJz8hpraoI7Xv0436DQXsDJeg6i7CCABd/CSg2pkmRl fPUmqsvdmfi6GXiZ+HVNK6Wq356MD5go0q0i8tFx/w7Fc9Xa5QUI8IdCmrJvrSYV 36lWUhK0NtBz57LVf2qJw6G1HbzMlWhnZnz1Ta95I6uv0uVWfXYdT+qnG7wFzx/R q35mDt/5fALQfn5Zz2QND/ZllPlgAaPLVRi9WcMBNTMykGopl7TyLxgkkJpuZ+ey VjEORs/XsZOA03UPvlSB0zw8SxPcMPmMfZSDpeVwUIE6SstFkNT9EAtAzDkMJyuJ t6/Pg9s91y86b91ly/9PBjfmHWV+njo= -----END CERTIFICATE-----Generated at Sun Jan 25 07:52:26 2026 by rpki-client