This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: DQLETYmxPK232aiU846SkxZ3UAMn3Yjw56oy8IP/ye0= Subject key identifier: 07:BB:F9:84:57:6F:DF:52:F2:CB:20:30:28:C4:E0:02:68:F0:13:8C Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0A4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 0A28 Signing time: Mon 08 Dec 2025 19:06:31 +0000 Manifest this update: Mon 08 Dec 2025 19:06:31 +0000 Manifest next update: Mon 15 Dec 2025 19:06:31 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: DPv1BclyuSq/xeQU7cG0lRf5xCTDku3niRQbnURBIBw=) 2: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: 4oLW18xAlE3B8nPyqU3w32UG4L4+C+i7k1rNnlKSQ7s=) 3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: PcZXGp5zvO/A3lEsDn884MTZ2FtXJ7tXRCkkHLH+i5g=) 4: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: 7NNAaJL+KytCopmMwh7xFBD72cI0M9FvnIHrWbUqbbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 19:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Dec 8 19:06:31 2025 GMT Not After : Dec 15 19:06:31 2025 GMT Subject: CN=693721b7-5dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:14:7a:62:a1:d9:33:be:4b:ad:5b:b7:80: a6:b9:d9:c5:bf:ce:99:bc:25:fd:94:b7:b6:42:26: 6e:f4:97:31:2a:32:e1:b3:af:ef:3f:6b:92:f6:ac: 01:19:cc:17:61:9c:b5:42:a0:27:47:a9:eb:2e:b0: 38:53:91:64:e0:78:ac:0a:be:c0:ad:99:3b:09:c2: 34:0f:da:be:0c:a5:21:31:97:e5:5b:bb:ef:92:70: 38:eb:b6:44:3c:50:b9:b4:c7:7d:34:2d:f8:f5:b7: 96:54:f0:05:cd:40:cf:94:00:be:ff:ec:b8:e5:84: e5:67:6c:6a:b6:94:42:2e:4b:a5:64:de:54:3b:96: d5:c7:6c:be:27:85:ea:9d:ac:25:fa:30:40:7b:4e: 02:70:9d:6c:ab:d7:1b:c9:c5:8a:93:ef:fa:93:14: 22:ba:fb:bb:44:e9:42:7a:be:33:1c:4a:22:bc:b2: 9f:0a:b2:f8:eb:d3:f2:a4:a2:dc:31:a9:17:86:36: 25:7c:03:94:07:f1:37:19:5f:2f:a1:d9:d7:78:42: 9b:60:1f:f8:5e:07:64:d2:cf:ff:fa:94:23:5c:cc: 8d:eb:54:94:90:dc:62:68:a9:5e:79:4e:ad:6e:9a: 6a:16:95:c3:38:93:49:77:4b:6e:b1:81:49:89:19: 7c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BB:F9:84:57:6F:DF:52:F2:CB:20:30:28:C4:E0:02:68:F0:13:8C X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:73:be:bf:0e:1e:3d:82:c6:5a:d1:06:5b:b7:2a:cc:e6:de: b5:1a:bd:f4:fa:f3:00:57:6b:85:91:a2:54:af:ed:c4:75:3b: 8d:2f:ed:63:ce:98:af:7a:3d:8c:10:b1:85:f5:70:5c:50:03: 3f:72:7b:f9:04:d0:a8:3b:3e:86:93:49:8b:f2:24:eb:c0:46: ab:26:59:cc:69:8b:80:8d:d0:16:35:9f:e8:49:e1:9c:e6:44: ed:43:f5:93:aa:61:1c:07:27:4e:7a:c5:6a:0e:9b:d1:b2:95: 69:13:07:4d:ce:b1:a6:04:bc:3c:f9:79:41:e4:34:a7:e8:8d: 25:f0:cf:c2:05:1f:1e:33:ce:58:9a:36:8e:4a:d8:66:4f:62: 78:9a:01:ed:c4:87:71:3c:e9:99:de:b2:86:5b:33:ae:29:c4: ec:84:ed:6c:53:39:ad:22:98:58:b0:55:d1:81:f8:28:29:72: 1b:5a:57:ef:fc:48:10:54:93:76:34:f0:b4:fe:83:9e:83:db: e5:4a:ee:75:26:c0:19:ca:35:56:60:a4:a9:b2:15:a1:0f:a4: cd:03:4e:1d:22:03:4c:5d:25:cd:b6:ba:78:11:09:4c:4c:b6: 89:dd:c5:63:54:b0:07:db:d0:3c:6e:be:73:aa:fe:94:a3:5e: 41:87:25:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjUxMjA4MTkwNjMxWhcNMjUxMjE1MTkwNjMxWjAYMRYwFAYD VQQDEw02OTM3MjFiNy01ZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4oUemKh2TO+S61bt4CmudnFv86ZvCX9lLe2QiZu9JcxKjLhs6/vP2uS9qwB GcwXYZy1QqAnR6nrLrA4U5Fk4HisCr7ArZk7CcI0D9q+DKUhMZflW7vvknA467ZE PFC5tMd9NC349beWVPAFzUDPlAC+/+y45YTlZ2xqtpRCLkulZN5UO5bVx2y+J4Xq nawl+jBAe04CcJ1sq9cbycWKk+/6kxQiuvu7ROlCer4zHEoivLKfCrL469PypKLc MakXhjYlfAOUB/E3GV8vodnXeEKbYB/4Xgdk0s//+pQjXMyN61SUkNxiaKleeU6t bppqFpXDOJNJd0tusYFJiRl8WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAe7+YRX b99S8ssgMCjE4AJo8BOMMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKc76/Dh49gsZa0QZbtyrM5t61Gr30+vMAV2uFkaJUr+3EdTuNL+1j zpivej2MELGF9XBcUAM/cnv5BNCoOz6Gk0mL8iTrwEarJlnMaYuAjdAWNZ/oSeGc 5kTtQ/WTqmEcBydOesVqDpvRspVpEwdNzrGmBLw8+XlB5DSn6I0l8M/CBR8eM85Y mjaOSthmT2J4mgHtxIdxPOmZ3rKGWzOuKcTshO1sUzmtIphYsFXRgfgoKXIbWlfv /EgQVJN2NPC0/oOeg9vlSu51JsAZyjVWYKSpshWhD6TNA04dIgNMXSXNtrp4EQlM TLaJ3cVjVLAH29A8br5zqv6Uo15BhyWT -----END CERTIFICATE-----Generated at Wed Dec 10 05:08:06 2025 by rpki-client