This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: FAG/hhW8USwBOOEQ40TUIFNpud6GzhSuRgOQWVWKbzA= Subject key identifier: FA:5B:2F:AE:33:D5:82:4B:D9:69:70:35:32:28:53:F0:71:2A:B7:C6 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0A52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 0A2D Signing time: Thu 18 Dec 2025 19:23:20 +0000 Manifest this update: Thu 18 Dec 2025 19:23:19 +0000 Manifest next update: Thu 25 Dec 2025 19:23:19 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: mK6lmMUlPZP9IHnWMn+mDpIR+fdu1lGO8wS7gv9BozA=) 2: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: PcZXGp5zvO/A3lEsDn884MTZ2FtXJ7tXRCkkHLH+i5g=) 3: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: 7NNAaJL+KytCopmMwh7xFBD72cI0M9FvnIHrWbUqbbw=) 4: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: 4oLW18xAlE3B8nPyqU3w32UG4L4+C+i7k1rNnlKSQ7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2642 (0xa52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Dec 18 19:23:19 2025 GMT Not After : Dec 25 19:23:19 2025 GMT Subject: CN=694454a7-d05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:c6:7a:27:26:cc:7c:ed:ec:50:f6:29:b9: 6d:7e:df:3d:ea:9e:8b:88:2c:5e:a0:18:19:0e:7b: f4:a5:35:76:e2:7e:ed:6d:0a:00:6d:fb:c0:68:15: 30:38:8a:60:98:76:fa:a3:bf:94:29:4c:d7:a4:55: 24:c6:c9:6e:8d:6f:01:f7:21:0a:ed:6e:df:74:d9: e0:3e:b3:59:5c:a3:1d:02:6b:10:10:b8:73:4a:f4: d9:af:62:44:89:3a:09:60:25:25:c1:57:53:a8:1c: ed:a5:52:ba:2b:f6:9d:29:e0:fc:92:c0:7a:62:98: 34:5d:f3:10:f8:40:d9:78:3e:8c:50:4f:b1:8c:c4: b9:59:d5:e8:47:fb:10:6e:76:32:75:85:10:cf:8a: d4:0e:79:18:4d:d7:fb:07:33:36:c6:2f:0a:03:79: 23:bb:ce:ca:aa:6a:9b:c1:de:82:43:6a:a7:c7:69: 4f:1b:98:0f:64:b6:0f:5e:97:6b:e9:74:ce:b3:d7: ab:a0:97:04:4d:2a:e7:75:3b:ea:87:e3:f1:ef:72: 3a:dd:c5:61:1c:be:a9:6f:c0:b3:00:a5:64:01:8c: e4:82:38:5f:9a:0e:99:96:c9:ef:1c:f5:d8:ea:dd: df:fd:0d:51:c2:f4:a8:6c:66:47:06:8e:29:7d:3c: 6f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5B:2F:AE:33:D5:82:4B:D9:69:70:35:32:28:53:F0:71:2A:B7:C6 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:91:ba:81:33:7d:6e:dd:0a:11:25:ec:cd:da:99:3b:f6:28: cc:17:25:ad:bb:92:e4:29:25:3d:23:1b:6b:bf:64:65:fe:a9: d4:19:40:0c:c7:2a:78:3c:16:32:49:1b:c7:ef:84:25:e8:81: fd:fc:01:54:26:03:64:8c:9b:d6:e0:f5:31:30:6d:eb:8f:4c: 59:f2:47:aa:b9:4f:41:93:38:d1:02:73:b6:3a:ec:55:dd:2c: 02:57:85:c8:88:44:ae:fd:82:b9:9c:72:d2:0c:cd:50:d0:b9: d1:92:8d:ca:26:49:7e:3d:19:dc:1d:fc:39:08:af:8f:be:3f: e7:d5:1e:dc:bd:3e:35:e0:f0:ee:c7:dd:0e:30:99:fa:d1:59: 44:b9:58:9b:50:64:57:2a:f7:f7:93:d5:5d:3b:c9:09:ac:5f: 29:ad:28:e5:da:9b:55:fb:4e:cc:45:4d:45:2c:3d:b7:88:4c: f2:91:c0:7c:36:c7:84:44:50:07:40:17:a8:a1:72:d6:24:4e: ae:7c:97:b1:0c:6f:8a:bf:92:51:49:5c:61:86:04:e4:8b:5a: 94:87:95:80:e5:f2:1d:e9:39:03:f6:b2:d4:bf:72:f5:ef:b7: 30:56:30:3e:a4:80:0c:11:f1:fb:bc:6b:c0:31:42:24:d3:eb: 1a:3e:a7:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjUxMjE4MTkyMzE5WhcNMjUxMjI1MTkyMzE5WjAYMRYwFAYD VQQDDA02OTQ0NTRhNy1kMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylXGeicmzHzt7FD2Kbltft896p6LiCxeoBgZDnv0pTV24n7tbQoAbfvAaBUw OIpgmHb6o7+UKUzXpFUkxslujW8B9yEK7W7fdNngPrNZXKMdAmsQELhzSvTZr2JE iToJYCUlwVdTqBztpVK6K/adKeD8ksB6Ypg0XfMQ+EDZeD6MUE+xjMS5WdXoR/sQ bnYydYUQz4rUDnkYTdf7BzM2xi8KA3kju87Kqmqbwd6CQ2qnx2lPG5gPZLYPXpdr 6XTOs9eroJcETSrndTvqh+Px73I63cVhHL6pb8CzAKVkAYzkgjhfmg6ZlsnvHPXY 6t3f/Q1RwvSobGZHBo4pfTxvRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpbL64z 1YJL2WlwNTIoU/BxKrfGMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9kbqBM31u3QoRJezN2pk79ijMFyWtu5LkKSU9Ixtrv2Rl/qnUGUAM xyp4PBYySRvH74Ql6IH9/AFUJgNkjJvW4PUxMG3rj0xZ8kequU9BkzjRAnO2OuxV 3SwCV4XIiESu/YK5nHLSDM1Q0LnRko3KJkl+PRncHfw5CK+Pvj/n1R7cvT414PDu x90OMJn60VlEuVibUGRXKvf3k9VdO8kJrF8prSjl2ptV+07MRU1FLD23iEzykcB8 NseERFAHQBeooXLWJE6ufJexDG+Kv5JRSVxhhgTki1qUh5WA5fId6TkD9rLUv3L1 77cwVjA+pIAMEfH7vGvAMUIk0+saPqdg -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:16 2025 by rpki-client