This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json) Hash identifier: WDyQYIgtoZ0NoZqFJYL1NOpSNZFgOtBjMqclaKOXGzE= Subject key identifier: 2B:46:73:87:F8:24:35:9B:88:A2:C1:81:0A:92:EA:A2:97:35:71:A5 Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft Manifest number: 14 Signing time: Fri 19 Dec 2025 06:48:44 +0000 Manifest this update: Fri 19 Dec 2025 06:48:43 +0000 Manifest next update: Fri 26 Dec 2025 06:48:43 +0000 Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: ZvIFNB0RmKIxmNjtQNCoOnM3FBb5njyfXNH6Yjvb0Ik=) 2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: VG6bVeH+ffAxXWctOl/ryqAQ1yfBVnBqI0p3XqeQf2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Validity Not Before: Dec 19 06:48:43 2025 GMT Not After : Dec 26 06:48:43 2025 GMT Subject: CN=6944f54c-7c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:25:af:ac:bd:25:55:d6:06:eb:7c:e0:99: 59:ff:89:f1:5d:ee:d4:a7:f2:3d:b5:9d:82:8b:6e: de:17:8f:26:07:0c:45:6c:fc:95:0c:c1:26:b8:b4: c6:12:3d:e2:ec:e2:ed:3e:d9:a9:d0:fd:23:6e:b7: 75:22:ab:35:b1:43:97:7c:c0:e4:42:46:18:df:86: 1b:fc:22:4b:5d:d6:2c:b0:f7:ad:98:e3:fd:c8:f0: c5:31:f9:e3:06:ba:32:78:e0:8e:9e:d3:bb:57:61: fe:5f:18:1b:a7:07:6b:04:b6:40:67:6c:f9:ff:a8: 38:e5:90:41:be:d8:29:19:91:89:5f:e5:0a:49:bc: e8:7a:70:79:3c:ba:d3:5b:b7:28:8d:e1:37:bd:03: 38:43:ef:b8:61:66:20:0b:8e:7a:9f:ae:ea:7f:3e: 9e:a0:4e:7f:d4:55:06:ad:4a:94:0d:fd:bc:71:ef: 3d:b8:60:03:3b:1f:e1:ac:8d:df:21:de:b7:4f:3b: f7:5a:61:55:31:0f:61:1f:b8:24:b6:ec:2e:33:90: ea:b8:18:18:8d:1c:a2:24:42:66:ec:e4:f6:16:6a: 88:d9:28:bc:c2:6d:4a:92:7f:05:a6:fa:bc:0b:ca: b4:91:26:fa:83:f6:d3:b1:f8:3e:c1:d2:2c:95:53: 7c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:46:73:87:F8:24:35:9B:88:A2:C1:81:0A:92:EA:A2:97:35:71:A5 X509v3 Authority Key Identifier: keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:82:b1:e1:d1:a9:ec:c4:ff:8a:0d:ec:fb:70:0d:8b:25:f2: 8a:c8:d0:a5:b1:88:2b:98:0a:68:9b:24:ce:09:38:32:e4:ad: 68:fd:30:a3:58:44:1c:78:ad:a5:25:c5:20:52:7e:77:b4:80: 49:ae:5c:aa:20:35:27:de:74:87:d3:5a:a7:37:67:3f:56:b1: ac:95:d3:9d:fd:b8:8e:b6:51:65:bb:d8:68:7b:8e:d4:a2:da: 12:94:07:43:82:6a:cb:c5:3e:99:c9:8f:65:71:9e:8b:b3:07: 0d:7a:95:89:69:e1:3f:80:56:f9:70:5b:35:38:35:1d:b0:93: fc:c3:5e:e1:4f:78:a5:fa:27:e5:87:31:72:bd:86:58:3f:5e: 6b:d5:32:dd:67:98:e9:7a:26:d8:02:89:9e:47:8e:5e:f5:9e: 26:fb:9f:f0:00:e5:13:83:3a:eb:26:3a:91:1e:03:e3:8e:2d: 10:fe:9f:c0:fa:a1:97:10:22:bf:81:bb:f1:b6:02:85:b8:04: 71:ab:16:99:2b:fc:54:e7:69:86:1b:30:92:b9:9b:1b:9d:31: cd:42:25:b6:a0:a7:0d:1c:68:8c:24:1b:2a:ad:9f:62:5c:e9: 12:2c:1a:60:d2:1a:59:c5:42:ce:94:c3:73:d5:00:66:10:8a: fc:c9:09:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoOTI4REY5NUNFOTlBRkM1QjlERTYwMUU2RTg2NDAzQzBE ODkxNTI5RjAeFw0yNTEyMTkwNjQ4NDNaFw0yNTEyMjYwNjQ4NDNaMBgxFjAUBgNV BAMMDTY5NDRmNTRjLTdjNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvPSWvrL0lVdYG63zgmVn/ifFd7tSn8j21nYKLbt4XjyYHDEVs/JUMwSa4tMYS PeLs4u0+2anQ/SNut3UiqzWxQ5d8wORCRhjfhhv8Iktd1iyw962Y4/3I8MUx+eMG ujJ44I6e07tXYf5fGBunB2sEtkBnbPn/qDjlkEG+2CkZkYlf5QpJvOh6cHk8utNb tyiN4Te9AzhD77hhZiALjnqfrup/Pp6gTn/UVQatSpQN/bxx7z24YAM7H+Gsjd8h 3rdPO/daYVUxD2EfuCS27C4zkOq4GBiNHKIkQmbs5PYWaojZKLzCbUqSfwWm+rwL yrSRJvqD9tOx+D7B0iyVU3xlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK0Zzh/gk NZuIosGBCpLqopc1caUwHwYDVR0jBBgwFoAUko35XOma/Fud5gHm6GQDwNiRUp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0Q2OTJFMUNBQzA4 MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva28zNVhPbWFfRnVkNWdIbTZHUUR3TmlSVXA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QTQ0L0Q2OTJFMUNBQzA4MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1 ZDVnSG02R1FEd05pUlVwOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACeCseHRqezE/4oN7PtwDYsl8orI0KWxiCuYCmibJM4JODLkrWj9MKNY RBx4raUlxSBSfne0gEmuXKogNSfedIfTWqc3Zz9WsayV0539uI62UWW72Gh7jtSi 2hKUB0OCasvFPpnJj2VxnouzBw16lYlp4T+AVvlwWzU4NR2wk/zDXuFPeKX6J+WH MXK9hlg/XmvVMt1nmOl6JtgCiZ5Hjl71nib7n/AA5RODOusmOpEeA+OOLRD+n8D6 oZcQIr+Bu/G2AoW4BHGrFpkr/FTnaYYbMJK5mxudMc1CJbagpw0caIwkGyqtn2Jc 6RIsGmDSGlnFQs6Uw3PVAGYQivzJCdA= -----END CERTIFICATE-----Generated at Fri Dec 19 18:59:20 2025 by rpki-client