This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft File: S36_c0WWAv2-dyvz4uxQsutKf2E.mft (raw, json) Hash identifier: qIBO5AV53bxEquw2yNg1XUmOKqub32uE+X8hopFxsAI= Subject key identifier: 37:F0:88:68:69:F7:D5:0A:89:22:82:A8:6E:37:71:80:C8:2E:4C:8A Authority key identifier: 4B:7E:BF:73:45:96:02:FD:BE:77:2B:F3:E2:EC:50:B2:EB:4A:7F:61 Certificate issuer: /CN=A91754C0/serialNumber=4B7EBF73459602FDBE772BF3E2EC50B2EB4A7F61 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft Manifest number: 0157 Signing time: Tue 23 Dec 2025 03:07:26 +0000 Manifest this update: Tue 23 Dec 2025 03:07:26 +0000 Manifest next update: Tue 30 Dec 2025 03:07:26 +0000 Files and hashes: 1: S36_c0WWAv2-dyvz4uxQsutKf2E.crl (hash: Lw+iIJeSc6H0g/M8dhsksPplyxUsRaKjFUU9tiAJTcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.crl rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91754C0, serialNumber=4B7EBF73459602FDBE772BF3E2EC50B2EB4A7F61 Validity Not Before: Dec 23 03:07:26 2025 GMT Not After : Dec 30 03:07:26 2025 GMT Subject: CN=694a076e-0bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c2:b4:1f:7d:6f:b0:a0:d7:98:9a:a0:c6:44: 18:82:63:60:90:ac:d9:ad:01:bd:d2:a8:65:1f:46: 43:86:20:71:b7:49:5e:a9:d9:0d:ee:ed:60:83:0f: d4:6b:28:21:0e:76:81:48:74:14:e4:65:78:ea:00: 19:ad:65:d2:01:63:6a:ee:9f:1c:47:78:ef:44:52: 27:63:59:15:50:2b:5d:bb:8c:39:5e:79:54:da:fe: e0:cd:49:8d:04:03:a5:eb:28:ff:56:56:20:4f:0f: da:be:37:a6:00:7f:2d:18:b5:90:cc:a8:ab:67:ea: 9b:92:aa:a2:c5:3d:76:b0:61:4d:0f:a2:17:98:8c: 92:d1:35:09:c9:ec:34:86:a3:49:27:f3:c7:df:38: 6e:e5:7f:77:b4:5c:5d:2e:80:6d:c8:c0:77:ca:80: b7:96:19:76:4b:50:11:d0:59:25:b8:f2:e6:8f:0e: 5c:29:e3:89:49:2d:b6:fe:83:65:97:b3:6a:40:06: 13:0d:a3:fb:70:70:d4:1c:7a:c5:02:b1:05:33:1e: 9e:fb:19:34:fc:ce:d2:23:05:39:53:7a:8d:52:fe: a8:b8:b9:88:5d:a4:b2:81:4d:25:7d:ff:9c:b4:15: 6f:dc:1b:3f:27:93:ca:6b:1f:dd:53:ef:05:17:3a: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F0:88:68:69:F7:D5:0A:89:22:82:A8:6E:37:71:80:C8:2E:4C:8A X509v3 Authority Key Identifier: keyid:4B:7E:BF:73:45:96:02:FD:BE:77:2B:F3:E2:EC:50:B2:EB:4A:7F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:24:f5:61:dc:cb:89:d7:6c:28:79:d0:97:42:cc:3b:b1:7b: cb:15:a9:89:18:65:91:6a:91:36:b0:21:11:31:fa:e3:bc:fb: 9f:b0:34:9e:3c:96:45:ea:47:1e:00:b7:66:49:1c:67:c2:bf: 04:e2:8d:fe:bd:60:3c:82:41:41:bd:0b:d9:fc:35:9c:c6:26: 99:56:7d:af:81:36:ee:f9:12:53:ef:72:3f:cb:6e:62:eb:9a: 92:29:3a:5c:a6:da:8d:75:47:4c:0c:ff:02:58:1a:5f:8e:46: 21:10:52:6f:07:3b:62:c8:1b:ac:b5:02:d4:bb:04:18:96:01: 77:ea:48:be:8a:15:7c:f2:28:f3:f1:89:53:1e:74:3d:b2:03: d3:24:e3:6c:52:59:b4:ce:9c:bb:b3:90:ae:93:a7:89:7f:2a: 8f:84:db:80:84:41:fc:bd:6b:be:22:01:ec:3d:54:a8:ce:28: 96:9e:94:5d:0e:59:3c:72:6e:1f:9b:32:3c:88:14:02:74:46: 45:05:47:dc:0f:71:87:bb:f2:a0:39:92:52:68:1c:e8:63:5d: ec:6c:b4:e0:da:e0:d5:f1:c2:e9:8a:60:e1:c9:2d:e3:16:d6: e0:10:e2:a3:4d:d6:c6:42:1e:53:e9:a7:57:03:04:6b:ea:2c: 86:39:cd:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0QzAxMTAvBgNVBAUTKDRCN0VCRjczNDU5NjAyRkRCRTc3MkJGM0UyRUM1MEIy RUI0QTdGNjEwHhcNMjUxMjIzMDMwNzI2WhcNMjUxMjMwMDMwNzI2WjAYMRYwFAYD VQQDDA02OTRhMDc2ZS0wYmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cK0H31vsKDXmJqgxkQYgmNgkKzZrQG90qhlH0ZDhiBxt0leqdkN7u1ggw/U ayghDnaBSHQU5GV46gAZrWXSAWNq7p8cR3jvRFInY1kVUCtdu4w5XnlU2v7gzUmN BAOl6yj/VlYgTw/avjemAH8tGLWQzKirZ+qbkqqixT12sGFND6IXmIyS0TUJyew0 hqNJJ/PH3zhu5X93tFxdLoBtyMB3yoC3lhl2S1AR0FkluPLmjw5cKeOJSS22/oNl l7NqQAYTDaP7cHDUHHrFArEFMx6e+xk0/M7SIwU5U3qNUv6ouLmIXaSygU0lff+c tBVv3Bs/J5PKax/dU+8FFzpwbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfwiGhp 99UKiSKCqG43cYDILkyKMB8GA1UdIwQYMBaAFEt+v3NFlgL9vncr8+LsULLrSn9h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTRDMC8wODZDMUM4MkND QkMxMUVFOEEwRjc3NDhDNEY5QUUwMi9TMzZfYzBXV0F2Mi1keXZ6NHV4UXN1dEtm MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzNl9jMFdXQXYyLWR5dno0dXhRc3V0S2YyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTRDMC8wODZDMUM4MkNDQkMxMUVFOEEwRjc3NDhDNEY5QUUwMi9TMzZfYzBXV0F2 Mi1keXZ6NHV4UXN1dEtmMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJJPVh3MuJ12woedCXQsw7sXvLFamJGGWRapE2sCERMfrjvPufsDSe PJZF6kceALdmSRxnwr8E4o3+vWA8gkFBvQvZ/DWcxiaZVn2vgTbu+RJT73I/y25i 65qSKTpcptqNdUdMDP8CWBpfjkYhEFJvBztiyBustQLUuwQYlgF36ki+ihV88ijz 8YlTHnQ9sgPTJONsUlm0zpy7s5Cuk6eJfyqPhNuAhEH8vWu+IgHsPVSoziiWnpRd Dlk8cm4fmzI8iBQCdEZFBUfcD3GHu/KgOZJSaBzoY13sbLTg2uDV8cLpimDhyS3j FtbgEOKjTdbGQh5T6adXAwRr6iyGOc3/ -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:43 2025 by rpki-client