This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft File: b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json) Hash identifier: tVRTQBU8L9P29ClUxHp4h9PFWUI1x9Xq0EQSYwpZrC0= Subject key identifier: 28:4B:16:CD:61:0B:49:33:60:CE:B6:94:1D:11:6C:08:9C:99:D4:6C Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 Certificate issuer: /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft Manifest number: CA Signing time: Fri 19 Dec 2025 04:53:57 +0000 Manifest this update: Fri 19 Dec 2025 04:53:56 +0000 Manifest next update: Fri 26 Dec 2025 04:53:56 +0000 Files and hashes: 1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: jwrOxIWtTvKjJa/H0Gu68Wcmx7M3O6d7s41hxyMFMp4=) 2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: iUCXkP/k8vFDK+xe4w0gGSkxJOnd/FNj32EaA1KJbt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Validity Not Before: Dec 19 04:53:56 2025 GMT Not After : Dec 26 04:53:56 2025 GMT Subject: CN=6944da65-4f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:0b:ab:72:82:2d:20:f4:0d:e5:c2:b8:c1: 81:af:88:b6:41:2d:7a:a3:b5:f6:d2:07:cc:84:08: 67:dc:3b:ba:87:ca:74:d5:ee:6b:24:38:a9:f3:6d: 8c:61:aa:ae:99:3b:b4:04:23:7a:bd:25:80:39:fa: fe:0a:11:01:47:f1:eb:35:fd:81:c0:d6:2f:4a:e2: a6:e7:91:a8:43:0d:9f:a1:b5:07:fc:94:84:b5:d4: 77:8b:90:57:fc:a4:b5:8b:7a:be:66:f3:e1:6b:1a: bf:37:c8:8e:8a:84:2e:ce:14:69:eb:93:d0:8a:7f: 70:f2:dc:47:28:30:d0:51:7e:9b:b3:05:4e:ad:d3: 9b:77:db:2e:c1:1d:bb:0c:e8:5e:a6:09:a3:df:8a: 07:43:01:de:9b:dc:b4:17:7c:a7:f8:95:48:9f:ab: a9:16:04:7c:8b:46:b7:c9:88:5b:5a:c1:64:b9:32: 36:c6:ea:f5:25:66:03:c5:2e:5d:20:d8:5b:5a:e2: b7:24:f1:da:07:20:32:f0:ac:db:a1:80:c1:67:78: 8c:bc:d6:37:f6:5f:a8:a1:89:31:f9:79:87:66:18: 21:a3:51:af:c7:7b:b4:bc:53:ab:45:e0:d9:40:76: 69:cf:01:e7:be:a9:f8:bf:ea:12:04:07:c7:6f:87: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4B:16:CD:61:0B:49:33:60:CE:B6:94:1D:11:6C:08:9C:99:D4:6C X509v3 Authority Key Identifier: keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:5d:fd:21:b8:9a:2c:a6:d8:34:58:ea:c6:3d:fa:84:6f:56: 85:f4:5e:d8:a1:c2:38:f3:92:3e:83:a9:4f:6c:d9:a4:fe:92: 95:a5:f9:4c:48:df:5c:40:75:b9:58:92:f6:22:bd:54:d6:72: 05:55:da:20:ac:3d:ce:bb:f5:5e:3e:9e:6d:37:ce:e2:df:43: ab:3c:12:58:38:52:53:b8:16:ad:14:b4:eb:2d:94:c8:44:61: 51:76:6f:30:1b:9a:fb:5a:19:2a:46:54:3e:ea:ce:18:5a:ba: e1:41:5c:8e:ce:7e:aa:31:27:b6:c1:85:84:55:dc:f1:25:80: 40:9a:7e:05:00:e6:0d:57:ce:49:95:32:ae:23:5d:de:68:ca: d5:63:da:61:c2:f6:3a:55:c8:fd:d1:24:b8:57:6d:77:68:ae: c8:dc:98:78:04:e6:e2:5b:bd:c2:3e:22:a1:92:d3:d1:19:06: f2:bf:e9:f2:35:19:74:6b:92:ef:94:ed:bf:f6:d6:64:a2:58: 8f:0f:bb:9f:0b:70:b4:df:48:39:53:2f:52:7b:77:25:55:35: 9c:87:68:4e:8c:bb:5f:47:f2:4f:d9:31:74:f3:61:de:9c:d7: ab:ea:33:92:b5:50:de:21:ad:32:f7:c6:6e:1d:21:0b:70:24: 1e:3c:ca:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2RTQxMTAvBgNVBAUTKDZGN0U1OEQwODk2Mzg5RjdFN0ZFNEU4Nzk1QUE1NTVE NUM1NTUxODgwHhcNMjUxMjE5MDQ1MzU2WhcNMjUxMjI2MDQ1MzU2WjAYMRYwFAYD VQQDDA02OTQ0ZGE2NS00ZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCkLq3KCLSD0DeXCuMGBr4i2QS16o7X20gfMhAhn3Du6h8p01e5rJDip822M YaqumTu0BCN6vSWAOfr+ChEBR/HrNf2BwNYvSuKm55GoQw2fobUH/JSEtdR3i5BX /KS1i3q+ZvPhaxq/N8iOioQuzhRp65PQin9w8txHKDDQUX6bswVOrdObd9suwR27 DOhepgmj34oHQwHem9y0F3yn+JVIn6upFgR8i0a3yYhbWsFkuTI2xur1JWYDxS5d INhbWuK3JPHaByAy8KzboYDBZ3iMvNY39l+ooYkx+XmHZhgho1Gvx3u0vFOrReDZ QHZpzwHnvqn4v+oSBAfHb4esYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChLFs1h C0kzYM62lB0RbAicmdRsMB8GA1UdIwQYMBaAFG9+WNCJY4n35/5Oh5WqVV1cVVGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZFNC8zQUJBODBBQUE2 ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9iMzVZMElsamlmZm5fazZIbGFwVlhWeFZV WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IzNVkwSWxqaWZmbl9rNkhsYXBWWFZ4VlVZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZFNC8zQUJBODBBQUE2ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9iMzVZMElsamlm Zm5fazZIbGFwVlhWeFZVWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwXf0huJosptg0WOrGPfqEb1aF9F7YocI485I+g6lPbNmk/pKVpflM SN9cQHW5WJL2Ir1U1nIFVdogrD3Ou/VePp5tN87i30OrPBJYOFJTuBatFLTrLZTI RGFRdm8wG5r7WhkqRlQ+6s4YWrrhQVyOzn6qMSe2wYWEVdzxJYBAmn4FAOYNV85J lTKuI13eaMrVY9phwvY6Vcj90SS4V213aK7I3Jh4BObiW73CPiKhktPRGQbyv+ny NRl0a5LvlO2/9tZkoliPD7ufC3C030g5Uy9Se3clVTWch2hOjLtfR/JP2TF082He nNer6jOStVDeIa0y98ZuHSELcCQePMpS -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:03 2025 by rpki-client