This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft File: N35PWGHm2AHWhx-GyUH1hwj687U.mft (raw, json) Hash identifier: 7g1+K4rWrHA+mN+Qn33ysl/ur5VMliaJSfRbCQiZVu8= Subject key identifier: 1D:01:F3:82:8E:52:23:58:08:69:31:4D:3E:AE:76:CB:B0:8D:B6:76 Authority key identifier: 37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5 Certificate issuer: /CN=A91FDC84/serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft Manifest number: 09 Signing time: Fri 05 Dec 2025 05:49:51 +0000 Manifest this update: Fri 05 Dec 2025 05:49:51 +0000 Manifest next update: Fri 12 Dec 2025 05:49:51 +0000 Files and hashes: 1: N35PWGHm2AHWhx-GyUH1hwj687U.crl (hash: yqSybtDTmPTm7INcoXV1Eg9v6bqD9vC1PzbVP2pIWBI=) 2: FFD0154CC51111F081EB9984C4F9AE02.roa (hash: wcqJr85KvAG8A6C8af/+L14Ukc8Oi76Cwk57WgeM5e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5 Validity Not Before: Dec 5 05:49:51 2025 GMT Not After : Dec 12 05:49:51 2025 GMT Subject: CN=6932727f-3cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9c:e3:20:e7:45:3b:10:40:9a:9d:2f:23:33: cd:34:fe:08:14:8e:51:60:31:47:2c:2b:c4:5e:94: 06:ba:25:14:3f:52:0c:6d:b9:57:a0:d2:f5:53:44: 4f:b0:f4:a1:9f:b1:46:c1:29:2b:8f:f1:66:90:e4: 4a:86:00:3d:63:61:44:6d:70:7d:d5:71:3b:d7:cd: dc:5c:11:e5:6e:29:2f:e8:e9:2b:a7:00:6c:bd:7b: 57:1a:91:37:a3:b5:67:29:65:f4:2d:34:b6:0c:2c: cd:e5:3a:6c:b2:e1:0d:cb:d0:55:73:41:03:52:d1: 3a:f1:b5:96:43:75:17:b8:47:02:7c:6b:46:31:4c: 34:af:75:e7:8d:ed:7e:d4:6d:2e:36:e0:7f:13:c5: cf:c6:35:72:91:8e:51:b5:c2:ad:0c:bb:fe:cc:0d: 66:c4:8f:43:c4:b3:c7:13:d2:ce:25:c1:dc:98:76: 94:dc:92:1a:6d:cf:f0:25:70:72:2e:c3:44:16:33: 98:89:48:47:48:81:46:70:c1:66:63:b5:54:48:2c: 9a:90:e8:01:aa:41:24:96:aa:fb:5b:60:87:93:e0: ca:9a:ac:eb:73:6b:7b:4f:9f:6f:16:34:a0:74:50: f8:09:81:80:c1:d5:f0:d5:55:0d:d3:de:83:84:d9: ab:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:01:F3:82:8E:52:23:58:08:69:31:4D:3E:AE:76:CB:B0:8D:B6:76 X509v3 Authority Key Identifier: keyid:37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f2:50:b9:77:55:ff:33:ba:9d:40:63:56:30:80:50:00:7c: ca:6c:7b:38:07:46:5b:82:a8:79:a8:90:39:bc:c0:b9:fe:42: 18:52:8b:7d:52:90:1c:3e:95:0f:88:d5:c9:40:30:9d:37:d5: a8:93:31:45:c8:a7:78:c6:1a:5e:54:3c:65:86:8a:a9:14:45: 37:7a:66:b5:a5:ab:d2:43:9c:c6:2e:72:04:8a:a4:5f:b2:89: 46:1a:ed:53:46:5a:16:88:e2:e3:72:06:10:38:ff:98:78:80: b8:be:50:b1:83:93:83:29:d8:c3:f2:13:b7:cd:80:d9:d4:98: cb:b9:ad:9b:a0:94:53:ab:55:5c:64:b9:4e:f5:0f:13:c3:40: 21:07:b1:d6:0d:30:bb:53:72:a1:24:07:bc:db:8d:61:73:12: c0:75:cd:7c:b0:43:07:e3:fd:e2:fb:52:f6:27:56:f8:70:39: 5f:4f:7e:47:09:df:66:a4:77:88:47:aa:21:b8:ef:55:31:b3: 91:d0:f5:52:e1:d1:f5:bc:d0:57:a2:ae:24:30:a1:68:2b:5a: c5:c5:df:f4:cc:11:29:2d:a4:fb:ec:59:af:b1:d1:71:3c:e8: 2f:bf:f5:2c:41:f6:2a:0a:ea:f9:a6:c5:8d:b5:c6:89:ae:dc: 18:a7:2c:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REM4NDExMC8GA1UEBRMoMzc3RTRGNTg2MUU2RDgwMUQ2ODcxRjg2Qzk0MUY1ODcw OEZBRjNCNTAeFw0yNTEyMDUwNTQ5NTFaFw0yNTEyMTIwNTQ5NTFaMBgxFjAUBgNV BAMTDTY5MzI3MjdmLTNjZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqnOMg50U7EECanS8jM800/ggUjlFgMUcsK8RelAa6JRQ/UgxtuVeg0vVTRE+w 9KGfsUbBKSuP8WaQ5EqGAD1jYURtcH3VcTvXzdxcEeVuKS/o6SunAGy9e1cakTej tWcpZfQtNLYMLM3lOmyy4Q3L0FVzQQNS0TrxtZZDdRe4RwJ8a0YxTDSvdeeN7X7U bS424H8Txc/GNXKRjlG1wq0Mu/7MDWbEj0PEs8cT0s4lwdyYdpTckhptz/AlcHIu w0QWM5iJSEdIgUZwwWZjtVRILJqQ6AGqQSSWqvtbYIeT4MqarOtza3tPn28WNKB0 UPgJgYDB1fDVVQ3T3oOE2atjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHQHzgo5S I1gIaTFNPq52y7CNtnYwHwYDVR0jBBgwFoAUN35PWGHm2AHWhx+GyUH1hwj687Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0U4RUFDQUU0QzUx MDExRjA4OTA4Qjc1RkM0RjlBRTAyL04zNVBXR0htMkFIV2h4LUd5VUgxaHdqNjg3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjM1UFdHSG0yQUhXaHgtR3lVSDFod2o2ODdVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Qzg0L0U4RUFDQUU0QzUxMDExRjA4OTA4Qjc1RkM0RjlBRTAyL04zNVBXR0htMkFI V2h4LUd5VUgxaHdqNjg3VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADvyULl3Vf8zup1AY1YwgFAAfMpsezgHRluCqHmokDm8wLn+QhhSi31S kBw+lQ+I1clAMJ031aiTMUXIp3jGGl5UPGWGiqkURTd6ZrWlq9JDnMYucgSKpF+y iUYa7VNGWhaI4uNyBhA4/5h4gLi+ULGDk4Mp2MPyE7fNgNnUmMu5rZuglFOrVVxk uU71DxPDQCEHsdYNMLtTcqEkB7zbjWFzEsB1zXywQwfj/eL7UvYnVvhwOV9PfkcJ 32akd4hHqiG471Uxs5HQ9VLh0fW80FeiriQwoWgrWsXF3/TMESktpPvsWa+x0XE8 6C+/9SxB9ioK6vmmxY21xomu3BinLD4= -----END CERTIFICATE-----Generated at Sat Dec 6 15:50:31 2025 by rpki-client