This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: 9AfKdCDLh3oWaeAAqH7ovqySqx2hBUYYrY5X2ZMTNkA= Subject key identifier: 33:2F:77:A0:BB:8B:8C:5A:83:03:1F:D9:CB:1B:F9:0E:BE:F6:D8:D7 Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0C73 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0C6C Signing time: Mon 08 Dec 2025 16:25:28 +0000 Manifest this update: Mon 08 Dec 2025 16:25:27 +0000 Manifest next update: Mon 15 Dec 2025 16:25:27 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: sPrXyPZl9NNmF2BNB4RcFE8sMsY3DoJjtOewc+b80V0=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: KZLdlP1OQSAqnUANoQynhHKfuaNstAKbyzLi1TUSbtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 16:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3187 (0xc73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: Dec 8 16:25:27 2025 GMT Not After : Dec 15 16:25:27 2025 GMT Subject: CN=6936fbf8-5284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:57:1d:df:38:17:8e:0a:30:c7:12:66:2a:ef: 8b:37:d5:42:67:ea:5e:5b:1a:72:00:dc:c3:23:aa: aa:0c:aa:e9:67:bf:3a:05:d6:75:da:08:1b:de:7c: 8b:24:67:7f:ff:cb:00:80:67:6d:aa:fc:dd:c0:cf: 9b:c6:44:2e:6d:07:ac:86:0a:6f:da:91:3b:8d:f4: 8d:eb:80:ad:3d:83:18:65:41:57:11:1b:97:f5:f2: 4d:21:15:72:bb:e2:e3:3d:44:9b:b3:4a:60:a5:0e: bc:5b:97:d7:c9:45:27:f2:ff:fd:8a:cf:a8:c3:b3: 92:d2:a3:59:9a:8b:47:fa:b3:81:01:f8:81:65:9c: d5:8b:56:62:87:7e:16:45:ce:3b:58:c6:1c:97:94: b8:c0:ae:e6:a3:e3:af:48:a2:a5:04:8b:70:4d:94: 5c:8e:43:e4:13:6b:4c:af:4d:55:ea:a1:c0:60:58: 54:af:87:a0:5b:40:58:e1:24:70:5a:ff:5d:d1:68: 5a:66:b6:31:8b:e3:0c:f0:dc:cb:9a:7e:7c:05:3c: 82:5b:d8:ac:7e:a6:e3:f9:f3:97:82:bf:d7:ed:eb: f8:c3:1d:83:5e:fe:67:66:68:6a:c4:94:47:95:ff: 61:e3:f2:bf:2b:11:f4:6b:0d:8b:99:2a:0f:dc:c5: 49:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2F:77:A0:BB:8B:8C:5A:83:03:1F:D9:CB:1B:F9:0E:BE:F6:D8:D7 X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:1a:cc:0c:bc:43:3e:85:a3:42:e6:1e:1c:48:42:70:d4:9a: 77:be:de:5d:d5:54:cf:77:ed:7d:08:32:c6:85:39:75:26:bc: b8:0b:1a:e5:ff:0b:c7:0e:e3:e0:2c:ac:23:67:42:52:27:30: 40:66:cd:c4:8f:17:dc:d0:d9:75:96:c3:06:cd:1c:c7:9f:ce: fc:1a:b6:d3:0f:6f:a5:d3:28:3b:6c:08:35:d6:55:d1:b6:11: e5:90:45:44:99:5c:b3:e9:27:4b:3c:87:b4:90:85:83:ce:c4: cb:3e:7a:ac:e4:14:f1:dc:27:a4:26:9d:4a:2d:a6:11:df:c4: cd:d1:88:d3:5b:00:d5:da:d8:35:43:8e:2d:0f:a7:d1:c6:7e: d4:a9:4a:7a:c0:94:ec:9a:8b:d0:a6:39:f0:32:e1:31:08:ae: 54:4d:47:a5:43:7a:73:39:11:a4:08:89:2a:5f:25:92:d4:90: 1b:79:92:7b:c6:68:b9:3a:36:76:bf:d4:2d:c7:71:93:e4:0e: c7:ed:e4:16:15:71:f9:4b:26:57:dd:d9:11:9a:06:46:ab:1a: 00:93:d6:9e:9d:94:64:a1:61:58:62:e9:b0:3c:e1:c3:46:a1: c8:cd:97:35:df:11:f7:f7:9c:56:fb:82:5b:4e:2e:01:51:ab: 90:31:f1:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjUxMjA4MTYyNTI3WhcNMjUxMjE1MTYyNTI3WjAYMRYwFAYD VQQDEw02OTM2ZmJmOC01Mjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lcd3zgXjgowxxJmKu+LN9VCZ+peWxpyANzDI6qqDKrpZ786BdZ12ggb3nyL JGd//8sAgGdtqvzdwM+bxkQubQeshgpv2pE7jfSN64CtPYMYZUFXERuX9fJNIRVy u+LjPUSbs0pgpQ68W5fXyUUn8v/9is+ow7OS0qNZmotH+rOBAfiBZZzVi1Zih34W Rc47WMYcl5S4wK7mo+OvSKKlBItwTZRcjkPkE2tMr01V6qHAYFhUr4egW0BY4SRw Wv9d0WhaZrYxi+MM8NzLmn58BTyCW9isfqbj+fOXgr/X7ev4wx2DXv5nZmhqxJRH lf9h4/K/KxH0aw2LmSoP3MVJqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMvd6C7 i4xagwMf2csb+Q6+9tjXMB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1GswMvEM+haNC5h4cSEJw1Jp3vt5d1VTPd+19CDLGhTl1Jry4Cxrl /wvHDuPgLKwjZ0JSJzBAZs3Ejxfc0Nl1lsMGzRzHn878GrbTD2+l0yg7bAg11lXR thHlkEVEmVyz6SdLPIe0kIWDzsTLPnqs5BTx3CekJp1KLaYR38TN0YjTWwDV2tg1 Q44tD6fRxn7UqUp6wJTsmovQpjnwMuExCK5UTUelQ3pzORGkCIkqXyWS1JAbeZJ7 xmi5OjZ2v9Qtx3GT5A7H7eQWFXH5SyZX3dkRmgZGqxoAk9aenZRkoWFYYumwPOHD RqHIzZc13xH395xW+4JbTi4BUauQMfHU -----END CERTIFICATE-----Generated at Tue Dec 9 20:19:12 2025 by rpki-client