This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json) Hash identifier: ulGJt1UU4R4+g4/k6ZzgL/39LKKOohQJz+JjL+U4TvI= Subject key identifier: 32:B8:07:15:38:EA:E6:86:C9:CB:95:87:08:4F:BB:87:62:47:91:53 Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft Manifest number: 0D Signing time: Fri 05 Dec 2025 05:47:59 +0000 Manifest this update: Fri 05 Dec 2025 05:47:58 +0000 Manifest next update: Fri 12 Dec 2025 05:47:58 +0000 Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: iPEDOHpafF0M5oLfx0c9Oj3iFi2C6j9XKhSzm54xuWw=) 2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: VG6bVeH+ffAxXWctOl/ryqAQ1yfBVnBqI0p3XqeQf2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Validity Not Before: Dec 5 05:47:58 2025 GMT Not After : Dec 12 05:47:58 2025 GMT Subject: CN=6932720f-dee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:df:a1:16:ae:73:96:4a:54:a9:ad:8f:13: 91:f3:7f:36:55:78:6b:e1:22:41:b5:71:06:0e:be: 97:4d:ec:dd:e0:e7:21:e9:97:89:9d:55:90:79:c1: fd:4b:e6:e5:8c:21:e1:77:53:e9:9f:07:0e:b3:6a: b2:1d:79:eb:9e:c2:f5:74:13:2a:2c:29:66:61:50: 92:22:a3:d6:5a:a4:02:54:a4:02:3d:24:e4:c7:5b: 7f:02:9c:0a:f3:28:ec:16:14:70:d7:af:7a:71:cd: e2:37:af:9a:7b:33:26:84:9a:70:15:be:e5:bb:bc: 7d:0f:8b:df:81:70:8a:5d:fc:2b:17:42:6b:ac:19: 1c:c9:6c:60:65:7b:0a:3a:71:a0:c4:78:e7:9a:67: 2b:c3:88:8a:22:c8:67:dc:cf:8d:73:f3:4c:81:e8: e5:a8:30:2c:84:50:cf:76:30:95:8f:d0:b1:77:6c: 88:51:8d:4a:93:1f:b1:76:59:56:14:29:b7:dc:37: 9f:a5:06:92:2c:b2:aa:e4:85:0f:3e:98:fe:70:08: 9f:4f:cf:d2:b9:66:6c:73:88:86:ce:cc:32:ac:24: fd:c2:92:10:32:1a:82:79:56:42:9e:de:5f:d4:f0: 62:b4:0a:5c:d1:c9:23:f5:95:8d:4e:cf:41:93:8a: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B8:07:15:38:EA:E6:86:C9:CB:95:87:08:4F:BB:87:62:47:91:53 X509v3 Authority Key Identifier: keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5a:0f:3b:15:90:e0:fd:d5:d9:a2:34:21:ed:f0:4e:f5:ec: 80:2a:11:16:61:90:b0:8c:a8:f9:e0:e5:63:83:30:f4:fe:42: f5:17:11:9c:05:27:fc:de:bc:60:f7:1e:1d:22:c0:6b:c1:f6: 33:5c:1a:e7:b2:15:f1:6b:b1:1e:98:96:2f:b4:2b:81:3c:1d: a6:ed:9b:a1:57:3c:30:51:50:6c:f1:3f:b6:3d:47:2e:47:fd: 2f:23:2b:87:fc:ab:e4:e0:c9:79:f2:5e:67:c8:1c:cc:e0:ad: 90:3e:5d:26:2d:30:1f:73:11:3a:4f:42:63:77:ae:14:29:bb: bc:68:b3:9a:38:ef:c4:7f:bb:66:9f:df:2a:0b:94:db:11:6a: 42:d3:22:23:7d:58:ab:df:df:aa:41:f3:fd:55:a5:ed:9e:eb: 64:d6:75:1c:6d:f9:28:61:7f:cd:63:a7:6d:12:f5:1a:0a:f5: f1:98:83:c4:d2:54:a7:36:66:49:9e:75:7f:36:33:b3:9d:75: 73:2f:dd:98:6d:64:c8:ac:60:a6:56:4b:6e:a6:39:ed:19:fb: 65:46:92:d7:f1:96:50:a3:21:00:54:64:a3:06:e8:bf:a2:0e: aa:91:61:65:22:81:79:33:f9:22:97:b9:62:86:37:bf:08:d2: 84:2f:b2:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoOTI4REY5NUNFOTlBRkM1QjlERTYwMUU2RTg2NDAzQzBE ODkxNTI5RjAeFw0yNTEyMDUwNTQ3NThaFw0yNTEyMTIwNTQ3NThaMBgxFjAUBgNV BAMTDTY5MzI3MjBmLWRlZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgq9+hFq5zlkpUqa2PE5HzfzZVeGvhIkG1cQYOvpdN7N3g5yHpl4mdVZB5wf1L 5uWMIeF3U+mfBw6zarIdeeuewvV0EyosKWZhUJIio9ZapAJUpAI9JOTHW38CnArz KOwWFHDXr3pxzeI3r5p7MyaEmnAVvuW7vH0Pi9+BcIpd/CsXQmusGRzJbGBlewo6 caDEeOeaZyvDiIoiyGfcz41z80yB6OWoMCyEUM92MJWP0LF3bIhRjUqTH7F2WVYU KbfcN5+lBpIssqrkhQ8+mP5wCJ9Pz9K5ZmxziIbOzDKsJP3CkhAyGoJ5VkKe3l/U 8GK0ClzRySP1lY1Oz0GTiijDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMrgHFTjq 5obJy5WHCE+7h2JHkVMwHwYDVR0jBBgwFoAUko35XOma/Fud5gHm6GQDwNiRUp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0Q2OTJFMUNBQzA4 MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva28zNVhPbWFfRnVkNWdIbTZHUUR3TmlSVXA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QTQ0L0Q2OTJFMUNBQzA4MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1 ZDVnSG02R1FEd05pUlVwOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAItaDzsVkOD91dmiNCHt8E717IAqERZhkLCMqPng5WODMPT+QvUXEZwF J/zevGD3Hh0iwGvB9jNcGueyFfFrsR6Yli+0K4E8Habtm6FXPDBRUGzxP7Y9Ry5H /S8jK4f8q+TgyXnyXmfIHMzgrZA+XSYtMB9zETpPQmN3rhQpu7xos5o478R/u2af 3yoLlNsRakLTIiN9WKvf36pB8/1Vpe2e62TWdRxt+Shhf81jp20S9RoK9fGYg8TS VKc2ZkmedX82M7OddXMv3ZhtZMisYKZWS26mOe0Z+2VGktfxllCjIQBUZKMG6L+i DqqRYWUigXkz+SKXuWKGN78I0oQvsls= -----END CERTIFICATE-----Generated at Sun Dec 7 07:00:48 2025 by rpki-client