This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json) Hash identifier: iasNDECOkGzs9aL8ag8gYysezRRazgMeSRTlveTZPEU= Subject key identifier: B3:94:13:B3:81:4F:AA:81:DD:21:08:0A:5F:A1:CE:88:2E:AC:7D:B6 Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft Manifest number: 0C Signing time: Wed 03 Dec 2025 06:09:06 +0000 Manifest this update: Wed 03 Dec 2025 06:09:06 +0000 Manifest next update: Wed 10 Dec 2025 06:09:06 +0000 Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: HihWGk7NEqm/m0T0x2+sdlHPTLepgrjecSb0Yst/HKM=) 2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: VG6bVeH+ffAxXWctOl/ryqAQ1yfBVnBqI0p3XqeQf2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Validity Not Before: Dec 3 06:09:06 2025 GMT Not After : Dec 10 06:09:06 2025 GMT Subject: CN=692fd402-a37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:93:7a:db:a1:86:b2:1d:d7:a2:5c:e2:f6:45: 92:3c:0d:bc:ff:92:4e:e9:86:e7:3a:ff:c3:1a:f4: e7:54:36:0b:6d:e1:2e:f5:8e:f8:da:97:0b:19:b8: f2:f5:8f:26:f9:a9:9c:63:2d:36:9a:09:c9:1e:f0: c6:11:6f:71:8b:b2:1f:a7:73:5c:14:39:e4:42:17: 4a:20:2d:0b:46:08:d7:b0:a4:49:21:26:e7:ef:89: c8:eb:3c:df:b4:fc:95:a9:e6:ef:12:9d:c2:3c:0b: 71:34:6f:cd:73:c3:86:99:3b:83:aa:ae:b0:d0:3f: ff:0d:dd:a4:2f:c9:37:6b:fb:de:bb:0d:ad:5c:cd: b9:66:1d:af:51:84:c3:79:d9:0a:a9:32:2c:42:e3: 4a:d6:8f:bb:87:8e:07:79:78:ca:c8:41:ff:d2:03: 60:00:49:46:7a:89:cd:52:53:39:3c:ef:93:c8:60: 33:a3:6c:5c:91:85:0f:5b:04:ac:9a:a1:2c:c7:27: 04:71:3b:94:ed:87:a9:ae:5e:37:8e:d8:7e:54:64: bd:2a:f4:dc:65:45:61:d4:d3:c3:3b:90:ca:71:cb: af:8f:46:a8:92:da:ac:39:7f:23:3e:6c:c1:6e:76: c0:28:23:49:0b:45:3b:fb:d0:7f:5a:2a:6a:44:8c: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:94:13:B3:81:4F:AA:81:DD:21:08:0A:5F:A1:CE:88:2E:AC:7D:B6 X509v3 Authority Key Identifier: keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:fc:1d:d7:54:83:9b:3f:0d:8d:ba:5f:71:cb:44:56:85:8c: 56:4b:af:08:e6:cc:0d:e7:de:13:6f:5a:37:4f:cc:a3:de:a3: ee:77:e8:b9:8a:e2:fe:45:08:1b:11:91:04:43:16:7b:53:d9: 35:da:4b:34:37:7f:af:af:ec:8a:67:7b:e2:a3:01:ac:71:15: f1:12:db:c4:b8:1a:a0:53:4b:86:31:e0:bd:d4:71:d6:5a:b5: 11:3d:f6:a5:9e:80:09:3b:a4:8d:1a:50:da:63:37:7d:f1:47: 35:7b:4f:c5:0d:1d:da:88:51:b7:02:0e:e1:9c:6a:95:9b:44: 26:8a:c8:85:73:a8:1f:12:b0:e4:ee:25:e7:d8:de:a7:18:c4: 35:d3:48:f5:c5:cf:64:6d:39:36:9a:1f:c2:b6:ca:ec:7a:c1: 63:28:6b:54:09:30:6a:14:54:bd:a7:1e:93:15:8a:82:9c:df: 31:ee:9a:6c:c7:99:7f:d2:ae:ab:ef:70:fa:86:d7:3c:7f:76: 50:ea:0e:b7:0b:b2:79:31:50:98:8e:ed:9f:c4:f8:3e:23:89: e7:b5:0a:98:6d:bd:d9:05:7a:14:63:af:76:ba:24:f8:95:c4: 98:d6:6a:80:18:a0:7f:c4:3b:bc:22:4f:e4:57:d7:60:60:36: 52:80:20:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoOTI4REY5NUNFOTlBRkM1QjlERTYwMUU2RTg2NDAzQzBE ODkxNTI5RjAeFw0yNTEyMDMwNjA5MDZaFw0yNTEyMTAwNjA5MDZaMBgxFjAUBgNV BAMTDTY5MmZkNDAyLWEzN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlk3rboYayHdeiXOL2RZI8Dbz/kk7phuc6/8Ma9OdUNgtt4S71jvjalwsZuPL1 jyb5qZxjLTaaCcke8MYRb3GLsh+nc1wUOeRCF0ogLQtGCNewpEkhJufvicjrPN+0 /JWp5u8SncI8C3E0b81zw4aZO4OqrrDQP/8N3aQvyTdr+967Da1czblmHa9RhMN5 2QqpMixC40rWj7uHjgd5eMrIQf/SA2AASUZ6ic1SUzk875PIYDOjbFyRhQ9bBKya oSzHJwRxO5Tth6muXjeO2H5UZL0q9NxlRWHU08M7kMpxy6+PRqiS2qw5fyM+bMFu dsAoI0kLRTv70H9aKmpEjHklAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs5QTs4FP qoHdIQgKX6HOiC6sfbYwHwYDVR0jBBgwFoAUko35XOma/Fud5gHm6GQDwNiRUp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0Q2OTJFMUNBQzA4 MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva28zNVhPbWFfRnVkNWdIbTZHUUR3TmlSVXA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QTQ0L0Q2OTJFMUNBQzA4MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1 ZDVnSG02R1FEd05pUlVwOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABL8HddUg5s/DY26X3HLRFaFjFZLrwjmzA3n3hNvWjdPzKPeo+536LmK 4v5FCBsRkQRDFntT2TXaSzQ3f6+v7Ipne+KjAaxxFfES28S4GqBTS4Yx4L3UcdZa tRE99qWegAk7pI0aUNpjN33xRzV7T8UNHdqIUbcCDuGcapWbRCaKyIVzqB8SsOTu JefY3qcYxDXTSPXFz2RtOTaaH8K2yux6wWMoa1QJMGoUVL2nHpMVioKc3zHummzH mX/SrqvvcPqG1zx/dlDqDrcLsnkxUJiO7Z/E+D4jiee1CphtvdkFehRjr3a6JPiV xJjWaoAYoH/EO7wiT+RX12BgNlKAIBM= -----END CERTIFICATE-----Generated at Wed Dec 3 16:38:26 2025 by rpki-client