This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft File: N35PWGHm2AHWhx-GyUH1hwj687U.mft (raw, json) Hash identifier: a3fK/uxYk1u2WkcBA7TNMWrwSCGpBN81jp061PzArWw= Subject key identifier: 91:89:8A:A0:30:60:1F:71:BD:00:A9:7F:EB:63:0D:AE:00:E2:03:8F Authority key identifier: 37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5 Certificate issuer: /CN=A91FDC84/serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft Manifest number: 1F Signing time: Sat 17 Jan 2026 06:46:04 +0000 Manifest this update: Sat 17 Jan 2026 06:46:04 +0000 Manifest next update: Sat 24 Jan 2026 06:46:04 +0000 Files and hashes: 1: N35PWGHm2AHWhx-GyUH1hwj687U.crl (hash: L9emIwqsRb7HgZhbVaF5P3dnGMW9QoHzUrKxMjvGDAc=) 2: FFD0154CC51111F081EB9984C4F9AE02.roa (hash: wcqJr85KvAG8A6C8af/+L14Ukc8Oi76Cwk57WgeM5e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5 Validity Not Before: Jan 17 06:46:04 2026 GMT Not After : Jan 24 06:46:04 2026 GMT Subject: CN=696b302c-80a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:62:d2:3f:1a:08:c1:1d:1f:2f:47:3a:c9:dc: 97:6a:61:d3:5a:e2:98:a1:3d:40:f5:1c:ad:b8:ae: c3:ad:9f:d9:6c:22:e3:05:63:6e:20:5d:49:6b:19: 3d:2f:1b:f5:a1:2c:82:e2:af:3d:05:bc:4a:3a:12: 71:c3:84:39:24:d6:12:b1:67:5e:2d:df:67:5b:d0: 12:33:07:67:f0:b4:61:c0:62:c8:9e:f4:87:cd:92: 49:07:c8:ac:10:da:2d:e3:30:9c:b2:bd:8a:29:a3: 93:59:e7:82:17:ea:13:3d:fc:41:e1:6f:58:2f:48: 51:2f:a5:c9:42:87:ed:2c:b2:7a:fd:ad:48:8c:83: 1a:94:8f:e5:6c:dd:55:3d:0e:58:a5:bc:7a:fc:7a: 2e:ae:7d:e0:a4:4c:81:7d:42:6a:c6:e3:df:8e:e5: 6b:6c:19:74:f5:fa:da:33:ea:d1:a5:ef:b7:ff:16: d6:28:67:43:0b:ed:9f:59:0e:e7:bf:e7:32:a6:95: 00:be:3d:ed:24:49:cc:e6:e8:4c:ef:ba:c3:23:d6: 93:ff:7a:a8:de:03:0d:7b:95:66:31:7d:a1:0a:33: 2d:0d:a9:eb:72:a5:ba:9b:10:f3:7c:3d:e7:6f:1e: 6c:e4:87:4b:ab:a8:52:fb:df:90:1f:2b:d3:a9:ec: 5e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:89:8A:A0:30:60:1F:71:BD:00:A9:7F:EB:63:0D:AE:00:E2:03:8F X509v3 Authority Key Identifier: keyid:37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:83:04:dd:79:b8:98:af:e3:de:e5:84:86:d2:48:08:d7:11: 96:91:0a:34:98:42:68:4a:25:89:e5:f1:bb:e1:07:37:21:b4: 40:97:6a:26:5f:c1:0e:52:37:69:f9:2c:f3:de:df:bc:e6:05: 0e:62:dc:43:53:f4:53:9f:c1:bc:19:3b:e9:9c:19:c4:88:f9: 79:69:ae:8c:39:cd:e6:3c:d2:cf:d5:b5:39:bf:dd:da:51:76: 68:6d:13:5a:68:9c:68:56:97:6f:b5:55:c2:9a:a7:aa:f6:08: 5e:5e:38:6f:f0:6a:00:63:f6:f6:a8:24:45:ec:d3:0b:25:c5: 0b:e0:8f:26:44:ea:f8:d8:50:ad:7e:15:cc:c0:77:28:81:9b: fb:6a:18:ed:62:c8:91:9f:c4:5b:71:44:26:bd:1d:e1:df:c5: db:cd:a2:1a:13:54:68:58:25:a2:20:61:29:18:07:0d:64:ee: b8:94:c9:18:40:64:55:aa:96:e7:dd:b0:8d:86:69:56:77:19: b7:f0:19:a2:4d:5f:14:a6:64:27:87:be:13:38:9e:a0:4b:ff: 6b:b0:de:79:90:d7:29:2e:78:b8:94:eb:6d:63:d2:5d:76:06: 64:b0:f9:93:81:0a:bd:32:61:6c:e2:6c:8a:1f:8b:f7:5e:5d: a4:92:0e:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REM4NDExMC8GA1UEBRMoMzc3RTRGNTg2MUU2RDgwMUQ2ODcxRjg2Qzk0MUY1ODcw OEZBRjNCNTAeFw0yNjAxMTcwNjQ2MDRaFw0yNjAxMjQwNjQ2MDRaMBgxFjAUBgNV BAMMDTY5NmIzMDJjLTgwYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSYtI/GgjBHR8vRzrJ3JdqYdNa4pihPUD1HK24rsOtn9lsIuMFY24gXUlrGT0v G/WhLILirz0FvEo6EnHDhDkk1hKxZ14t32db0BIzB2fwtGHAYsie9IfNkkkHyKwQ 2i3jMJyyvYopo5NZ54IX6hM9/EHhb1gvSFEvpclCh+0ssnr9rUiMgxqUj+Vs3VU9 DlilvHr8ei6ufeCkTIF9QmrG49+O5WtsGXT1+toz6tGl77f/FtYoZ0ML7Z9ZDue/ 5zKmlQC+Pe0kSczm6EzvusMj1pP/eqjeAw17lWYxfaEKMy0NqetypbqbEPN8Pedv Hmzkh0urqFL735AfK9Op7F49AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkYmKoDBg H3G9AKl/62MNrgDiA48wHwYDVR0jBBgwFoAUN35PWGHm2AHWhx+GyUH1hwj687Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0U4RUFDQUU0QzUx MDExRjA4OTA4Qjc1RkM0RjlBRTAyL04zNVBXR0htMkFIV2h4LUd5VUgxaHdqNjg3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjM1UFdHSG0yQUhXaHgtR3lVSDFod2o2ODdVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Qzg0L0U4RUFDQUU0QzUxMDExRjA4OTA4Qjc1RkM0RjlBRTAyL04zNVBXR0htMkFI V2h4LUd5VUgxaHdqNjg3VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABKDBN15uJiv497lhIbSSAjXEZaRCjSYQmhKJYnl8bvhBzchtECXaiZf wQ5SN2n5LPPe37zmBQ5i3ENT9FOfwbwZO+mcGcSI+Xlprow5zeY80s/VtTm/3dpR dmhtE1ponGhWl2+1VcKap6r2CF5eOG/wagBj9vaoJEXs0wslxQvgjyZE6vjYUK1+ FczAdyiBm/tqGO1iyJGfxFtxRCa9HeHfxdvNohoTVGhYJaIgYSkYBw1k7riUyRhA ZFWqlufdsI2GaVZ3GbfwGaJNXxSmZCeHvhM4nqBL/2uw3nmQ1ykueLiU621j0l12 BmSw+ZOBCr0yYWzibIofi/deXaSSDpI= -----END CERTIFICATE-----Generated at Sun Jan 18 08:04:40 2026 by rpki-client