This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft File: N35PWGHm2AHWhx-GyUH1hwj687U.mft (raw, json) Hash identifier: UBUUqdjQEgqqAYKmD6G+dx/Oy/1isuU8+hzAAkYoltg= Subject key identifier: 81:03:B3:AC:BF:A1:DF:04:FE:3F:E0:94:FD:A2:4C:F5:72:A5:24:C5 Authority key identifier: 37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5 Certificate issuer: /CN=A91FDC84/serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft Manifest number: 08 Signing time: Wed 03 Dec 2025 06:10:57 +0000 Manifest this update: Wed 03 Dec 2025 06:10:57 +0000 Manifest next update: Wed 10 Dec 2025 06:10:57 +0000 Files and hashes: 1: N35PWGHm2AHWhx-GyUH1hwj687U.crl (hash: zYog/zihxEKL9yyr0TdN0nhaDuC4pfJp+d2u6IyI7FU=) 2: FFD0154CC51111F081EB9984C4F9AE02.roa (hash: wcqJr85KvAG8A6C8af/+L14Ukc8Oi76Cwk57WgeM5e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5 Validity Not Before: Dec 3 06:10:57 2025 GMT Not After : Dec 10 06:10:57 2025 GMT Subject: CN=692fd471-27c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:d2:77:90:1d:d1:41:f3:08:9f:c1:10:16: bb:26:76:5b:5c:8c:63:23:ad:2b:b9:e2:7e:f8:1c: 88:96:01:55:fe:4e:5d:6b:03:5e:ef:b7:e5:96:9a: 75:23:57:95:f5:23:f8:72:f5:c8:97:23:d6:7e:6e: ed:20:d3:f7:c3:0f:f7:4a:4e:08:85:95:21:fe:9b: e0:c2:f7:f7:88:88:41:53:f1:01:6a:7b:f2:57:37: 46:1d:ca:e5:46:fd:2c:c9:64:25:e5:49:b4:b9:e7: c8:d9:ba:a7:ca:15:57:af:60:3a:57:e3:08:92:39: fd:8f:03:4c:58:24:52:c1:28:03:e2:4f:f3:87:9a: 2d:67:b0:cb:11:8a:16:d4:54:b4:37:1d:e0:a8:22: 5f:26:80:23:5e:20:7e:78:bc:f3:61:66:92:18:f3: 7e:59:d0:08:86:5e:12:15:46:c1:75:fe:28:90:6f: da:b0:44:5a:fb:db:dc:87:50:ae:ed:a2:49:cb:a1: a1:a4:80:a9:e9:18:cb:bd:ba:37:e5:dc:40:d1:07: 03:8d:c1:20:ec:b1:1f:b4:38:2e:3d:c1:51:e1:c1: 54:8f:05:61:87:6d:d6:fe:3a:e4:28:0f:64:54:91: 3d:8e:4b:d0:98:9e:68:f3:7d:86:10:ac:dd:81:ee: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:03:B3:AC:BF:A1:DF:04:FE:3F:E0:94:FD:A2:4C:F5:72:A5:24:C5 X509v3 Authority Key Identifier: keyid:37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:55:ea:57:6a:4a:29:7c:4e:63:50:22:4a:b4:bb:d2:d6:8c: 16:ca:2d:8a:04:82:d4:f8:7d:95:73:53:a0:9f:d6:45:72:12: 9e:7e:9f:45:54:5e:0a:fe:51:15:8d:40:a1:1d:a4:da:fa:8c: d4:c4:87:e5:f8:c9:2d:c2:ad:81:12:d8:48:14:9c:4f:c8:80: 67:8b:cc:ab:16:03:85:0b:a6:c6:b3:83:5d:38:58:14:f8:7e: 33:42:43:e8:58:7a:07:de:29:77:73:95:71:30:f9:57:48:36: c9:95:ab:07:47:9e:e1:9a:18:e2:2f:6c:26:2e:f1:3c:88:e3: 86:c2:68:91:b4:c3:11:61:2a:4a:a1:c6:86:d6:ce:96:37:7c: 04:5a:2e:9e:33:a3:e2:7f:c9:6c:a7:5f:ae:7d:12:34:8e:97: 53:8d:3f:0a:f5:59:84:90:13:83:a3:91:16:88:5a:89:93:1b: 1e:11:86:a1:de:0d:a4:79:90:2d:38:c4:3e:d2:fe:dd:1c:aa: 94:49:68:9f:ca:61:a7:0e:9e:59:d4:66:39:58:eb:e4:fd:40: 04:f0:ae:d7:1c:c0:ed:01:b2:d5:47:21:16:ff:5e:18:e0:6a: b9:61:b2:81:47:45:1d:74:b1:72:13:e4:bd:8e:e0:f6:21:6d: 2c:6a:b1:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REM4NDExMC8GA1UEBRMoMzc3RTRGNTg2MUU2RDgwMUQ2ODcxRjg2Qzk0MUY1ODcw OEZBRjNCNTAeFw0yNTEyMDMwNjEwNTdaFw0yNTEyMTAwNjEwNTdaMBgxFjAUBgNV BAMTDTY5MmZkNDcxLTI3YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+XtJ3kB3RQfMIn8EQFrsmdltcjGMjrSu54n74HIiWAVX+Tl1rA17vt+WWmnUj V5X1I/hy9ciXI9Z+bu0g0/fDD/dKTgiFlSH+m+DC9/eIiEFT8QFqe/JXN0YdyuVG /SzJZCXlSbS558jZuqfKFVevYDpX4wiSOf2PA0xYJFLBKAPiT/OHmi1nsMsRihbU VLQ3HeCoIl8mgCNeIH54vPNhZpIY835Z0AiGXhIVRsF1/iiQb9qwRFr729yHUK7t oknLoaGkgKnpGMu9ujfl3EDRBwONwSDssR+0OC49wVHhwVSPBWGHbdb+OuQoD2RU kT2OS9CYnmjzfYYQrN2B7jmPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgQOzrL+h 3wT+P+CU/aJM9XKlJMUwHwYDVR0jBBgwFoAUN35PWGHm2AHWhx+GyUH1hwj687Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0U4RUFDQUU0QzUx MDExRjA4OTA4Qjc1RkM0RjlBRTAyL04zNVBXR0htMkFIV2h4LUd5VUgxaHdqNjg3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjM1UFdHSG0yQUhXaHgtR3lVSDFod2o2ODdVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Qzg0L0U4RUFDQUU0QzUxMDExRjA4OTA4Qjc1RkM0RjlBRTAyL04zNVBXR0htMkFI V2h4LUd5VUgxaHdqNjg3VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAChV6ldqSil8TmNQIkq0u9LWjBbKLYoEgtT4fZVzU6Cf1kVyEp5+n0VU Xgr+URWNQKEdpNr6jNTEh+X4yS3CrYES2EgUnE/IgGeLzKsWA4ULpsazg104WBT4 fjNCQ+hYegfeKXdzlXEw+VdINsmVqwdHnuGaGOIvbCYu8TyI44bCaJG0wxFhKkqh xobWzpY3fARaLp4zo+J/yWynX659EjSOl1ONPwr1WYSQE4OjkRaIWomTGx4RhqHe DaR5kC04xD7S/t0cqpRJaJ/KYacOnlnUZjlY6+T9QATwrtccwO0BstVHIRb/Xhjg arlhsoFHRR10sXIT5L2O4PYhbSxqseQ= -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:11 2025 by rpki-client