This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json) Hash identifier: qJooXsoEQgeszW7zWvD9lL3fqZZj7POzgW8E1+X0ObM= Subject key identifier: D4:4E:12:45:2B:EB:6C:78:53:DC:17:17:36:F1:96:DE:F6:D8:98:7E Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft Manifest number: 34 Signing time: Tue 23 Dec 2025 06:23:32 +0000 Manifest this update: Tue 23 Dec 2025 06:23:31 +0000 Manifest next update: Tue 30 Dec 2025 06:23:31 +0000 Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: pJ1GJVySdjI3NXP0GDq7p830ed6knPaBPTkpU92NgnA=) 2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: o8m432Z1DaEAELBYfiFTDCeo+0yznHgf97uZzcWpBFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Validity Not Before: Dec 23 06:23:31 2025 GMT Not After : Dec 30 06:23:31 2025 GMT Subject: CN=694a3563-d592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:17:4a:89:08:51:6c:a0:c6:64:88:31:6b: b2:15:f0:56:f3:12:56:bf:27:a5:88:f4:74:94:be: 43:a7:2e:35:18:dc:1f:26:53:fb:6d:3b:d7:48:0a: de:14:1c:34:9e:bd:2e:a2:44:95:bc:8b:e1:b4:62: b6:aa:5e:c1:28:7b:61:2b:4b:fc:85:63:a9:50:84: d3:cf:1e:a2:a3:46:7d:41:4d:6d:10:cb:df:ba:c6: 3f:6a:37:2e:bf:d9:10:83:7d:0e:07:02:98:81:31: c0:4f:e3:2e:53:75:56:a4:f1:16:8c:f7:19:35:18: e6:4e:2b:76:a8:b0:71:87:cf:7d:ff:1e:eb:e6:a0: 6b:0e:3b:83:f1:4d:5e:ab:39:04:ae:69:a5:9d:c1: 45:11:ff:38:ab:da:89:ee:25:ae:2f:49:fd:e8:09: d1:26:bb:a3:e3:0d:f8:4f:15:7e:84:1a:71:d6:17: 5f:d8:c8:84:3f:f4:13:0f:ae:81:80:6a:58:62:7d: fd:37:28:39:9d:9c:46:8e:a1:da:9f:d7:58:7e:dc: 24:da:a3:f4:d9:d4:76:87:2c:36:09:b7:5a:eb:28: c0:83:c3:23:97:d8:7a:55:16:44:0c:bb:0a:ac:fa: 47:fb:45:a9:84:a6:2a:ec:4f:f0:98:f4:3d:92:7e: 9f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4E:12:45:2B:EB:6C:78:53:DC:17:17:36:F1:96:DE:F6:D8:98:7E X509v3 Authority Key Identifier: keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:4c:65:97:5b:0c:2b:24:c9:1a:7b:61:bc:ce:9d:98:d5:26: 3c:5a:97:ea:7d:c0:38:ac:b5:aa:12:cd:e9:e2:ab:c4:45:b9: 75:1d:db:0a:fe:9d:67:13:e6:ff:8f:ff:30:5d:b1:e4:e0:9a: cd:07:62:72:5f:5d:6d:a6:f8:37:22:77:b6:5f:e8:49:5d:a4: 00:83:a2:6b:60:51:40:22:97:62:3b:6e:d6:ae:41:74:dd:9d: f4:d4:9f:61:c9:df:a2:91:60:fd:98:d8:93:e9:87:a9:38:82: 0c:3c:4a:9f:07:dd:7c:4c:73:b7:be:fc:64:0d:2d:ea:d9:20: bd:34:03:17:77:e4:c8:f6:ce:f8:b8:9f:ed:74:b5:eb:95:7c: 14:35:48:45:73:b9:50:aa:5b:03:20:c2:a5:b4:e6:96:ce:18: d4:cd:2d:7c:9e:73:2c:68:a1:b2:c9:a8:42:d3:46:4b:86:80: a9:0f:b9:ac:d8:98:81:01:cf:a7:df:fc:26:0f:29:bd:33:76: 47:78:a7:81:bb:cd:9a:3e:96:d2:2b:c3:12:79:7f:a8:12:fd: 96:e9:c7:0e:7d:7b:9b:d3:99:eb:dd:db:ce:d7:3b:c9:fb:a6: 3f:fb:cd:31:b2:28:12:f0:b2:94:aa:dd:8a:8e:9a:d9:4a:e6: f9:ff:6b:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUQ1MTExMC8GA1UEBRMoREY5MUI3NzBCQzMxQjUyRkM4OTRCREQ4NEE2NzU4Mjc1 QUFFNTMxRDAeFw0yNTEyMjMwNjIzMzFaFw0yNTEyMzAwNjIzMzFaMBgxFjAUBgNV BAMMDTY5NGEzNTYzLWQ1OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3uRdKiQhRbKDGZIgxa7IV8FbzEla/J6WI9HSUvkOnLjUY3B8mU/ttO9dICt4U HDSevS6iRJW8i+G0YraqXsEoe2ErS/yFY6lQhNPPHqKjRn1BTW0Qy9+6xj9qNy6/ 2RCDfQ4HApiBMcBP4y5TdVak8RaM9xk1GOZOK3aosHGHz33/HuvmoGsOO4PxTV6r OQSuaaWdwUUR/zir2onuJa4vSf3oCdEmu6PjDfhPFX6EGnHWF1/YyIQ/9BMProGA alhiff03KDmdnEaOodqf11h+3CTao/TZ1HaHLDYJt1rrKMCDwyOX2HpVFkQMuwqs +kf7RamEpirsT/CY9D2Sfp+jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1E4SRSvr bHhT3BcXNvGW3vbYmH4wHwYDVR0jBBgwFoAU35G3cLwxtS/IlL3YSmdYJ1quUx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRDUxL0E2ODJFMUM0OEZD NzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNfSWxMM1lTbWRZSjFxdVV4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzVHM2NMd3h0U19JbEwzWVNtZFlKMXF1VXgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RDUxL0E2ODJFMUM0OEZDNzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNf SWxMM1lTbWRZSjFxdVV4MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALlMZZdbDCskyRp7YbzOnZjVJjxal+p9wDistaoSzeniq8RFuXUd2wr+ nWcT5v+P/zBdseTgms0HYnJfXW2m+Dcid7Zf6EldpACDomtgUUAil2I7btauQXTd nfTUn2HJ36KRYP2Y2JPph6k4ggw8Sp8H3XxMc7e+/GQNLerZIL00Axd35Mj2zvi4 n+10teuVfBQ1SEVzuVCqWwMgwqW05pbOGNTNLXyecyxoobLJqELTRkuGgKkPuazY mIEBz6ff/CYPKb0zdkd4p4G7zZo+ltIrwxJ5f6gS/Zbpxw59e5vTmevd287XO8n7 pj/7zTGyKBLwspSq3YqOmtlK5vn/a/0= -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:28 2025 by rpki-client