This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json) Hash identifier: sGQ7xITOldaz2fnJNVx1Hnnw6i9XKwhlTIj1Png13Lw= Subject key identifier: 10:D6:E3:C2:88:E9:0A:01:A0:2F:81:95:1D:91:A3:BE:7D:F5:A5:77 Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft Manifest number: 2B Signing time: Fri 05 Dec 2025 05:29:04 +0000 Manifest this update: Fri 05 Dec 2025 05:29:03 +0000 Manifest next update: Fri 12 Dec 2025 05:29:03 +0000 Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: Y564ZEAH8zc0ebxj5VFBMs1yax4syd1HPP8JhWodC+s=) 2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: o8m432Z1DaEAELBYfiFTDCeo+0yznHgf97uZzcWpBFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Validity Not Before: Dec 5 05:29:03 2025 GMT Not After : Dec 12 05:29:03 2025 GMT Subject: CN=69326d9f-b8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:41:75:03:a9:7d:5b:6c:df:e2:33:ee:96: 3b:e5:c6:cc:7a:2b:7e:ef:f1:23:82:3a:23:6e:83: 0e:54:c0:31:72:e4:13:f3:0a:d3:95:d9:31:94:ea: 47:30:a1:98:2c:c5:55:2a:8f:a1:d1:1a:fb:69:d0: 17:42:47:90:96:8e:1a:73:e7:2e:5a:bb:5b:b8:63: 3d:43:94:8a:9d:fa:7c:e2:96:9e:e2:2a:7b:ec:d9: d2:02:a8:ae:df:8f:c9:57:87:03:98:40:bc:95:a7: 18:45:bc:11:56:95:aa:0f:fb:b2:65:e7:bc:a4:72: e2:58:de:89:6d:32:fd:0b:5e:4e:1f:bf:34:0c:53: e5:31:f1:7e:65:08:65:91:9c:f2:b2:01:c1:34:b7: 98:9c:70:af:c8:81:e0:99:4c:67:65:05:df:c2:a1: fb:72:25:2a:52:b7:d1:03:f0:27:02:47:d5:d1:73: b8:fd:6c:de:14:32:00:a8:64:58:af:2e:ad:71:5e: 4b:bf:c3:a5:a8:8b:12:d6:d0:ab:ab:74:69:68:3d: 20:09:b9:d0:62:99:02:f8:be:c5:4c:2a:b3:46:e0: 91:39:ad:b1:dd:60:03:69:4e:52:02:6a:fc:ec:f1: de:10:32:b0:5b:f5:4b:bb:64:7f:01:b1:3c:65:23: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D6:E3:C2:88:E9:0A:01:A0:2F:81:95:1D:91:A3:BE:7D:F5:A5:77 X509v3 Authority Key Identifier: keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:00:dc:5b:72:0c:27:32:90:05:aa:3e:2c:b1:4f:6a:e0:be: 9d:78:a1:ac:b2:23:6d:c1:6b:a3:ad:8d:0a:29:b8:46:c9:b5: 42:62:63:dd:a5:7e:ed:ec:1e:c6:59:ab:c7:24:87:98:c5:0e: c9:c0:e1:b2:5d:e9:aa:5a:af:2e:d0:f0:75:8e:42:1f:df:64: ab:a4:7c:3a:21:12:a7:53:b9:d2:74:8c:ea:ae:5b:5d:2e:12: 42:8e:7b:06:0e:64:fb:18:39:d7:ce:66:c0:bc:5b:8f:bc:5b: 16:7c:1a:7c:3b:5b:28:e1:2f:b9:3f:db:f6:23:c4:f6:a0:7b: 85:68:13:03:48:01:ca:20:14:39:d0:f3:26:3f:0b:b1:87:b0: 6d:2d:dc:e4:4a:dc:0e:73:8d:24:3a:10:0c:48:e6:78:9f:ca: fa:e9:7e:4c:ae:0f:1c:2b:37:f6:06:b7:36:aa:12:55:1d:e9: 18:78:f0:95:6c:13:b3:42:f9:8f:78:2f:89:30:83:15:de:f3: fb:ec:30:5a:0b:c8:78:fa:ef:3a:6b:9e:78:75:fd:a8:d4:ce: 92:e9:dd:fb:50:ea:8a:25:e6:04:93:a3:a1:e1:4f:ed:9f:51: 24:8a:7d:69:97:64:24:18:9f:4d:2e:d0:a2:62:1a:a9:78:17: 57:86:b3:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUQ1MTExMC8GA1UEBRMoREY5MUI3NzBCQzMxQjUyRkM4OTRCREQ4NEE2NzU4Mjc1 QUFFNTMxRDAeFw0yNTEyMDUwNTI5MDNaFw0yNTEyMTIwNTI5MDNaMBgxFjAUBgNV BAMTDTY5MzI2ZDlmLWI4YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6YEF1A6l9W2zf4jPuljvlxsx6K37v8SOCOiNugw5UwDFy5BPzCtOV2TGU6kcw oZgsxVUqj6HRGvtp0BdCR5CWjhpz5y5au1u4Yz1DlIqd+nzilp7iKnvs2dICqK7f j8lXhwOYQLyVpxhFvBFWlaoP+7Jl57ykcuJY3oltMv0LXk4fvzQMU+Ux8X5lCGWR nPKyAcE0t5iccK/IgeCZTGdlBd/CoftyJSpSt9ED8CcCR9XRc7j9bN4UMgCoZFiv Lq1xXku/w6WoixLW0KurdGloPSAJudBimQL4vsVMKrNG4JE5rbHdYANpTlICavzs 8d4QMrBb9Uu7ZH8BsTxlIxO7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUENbjwojp CgGgL4GVHZGjvn31pXcwHwYDVR0jBBgwFoAU35G3cLwxtS/IlL3YSmdYJ1quUx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRDUxL0E2ODJFMUM0OEZD NzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNfSWxMM1lTbWRZSjFxdVV4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzVHM2NMd3h0U19JbEwzWVNtZFlKMXF1VXgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RDUxL0E2ODJFMUM0OEZDNzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNf SWxMM1lTbWRZSjFxdVV4MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM4A3FtyDCcykAWqPiyxT2rgvp14oayyI23Ba6OtjQopuEbJtUJiY92l fu3sHsZZq8ckh5jFDsnA4bJd6apary7Q8HWOQh/fZKukfDohEqdTudJ0jOquW10u EkKOewYOZPsYOdfOZsC8W4+8WxZ8Gnw7WyjhL7k/2/YjxPage4VoEwNIAcogFDnQ 8yY/C7GHsG0t3ORK3A5zjSQ6EAxI5nifyvrpfkyuDxwrN/YGtzaqElUd6Rh48JVs E7NC+Y94L4kwgxXe8/vsMFoLyHj67zprnnh1/ajUzpLp3ftQ6ool5gSTo6HhT+2f USSKfWmXZCQYn00u0KJiGql4F1eGs5A= -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:43 2025 by rpki-client