This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: 5N0M2CPviIkd59kA9ywOSN980Xo0bpgXxJX3BuEIECc= Subject key identifier: 61:3B:36:DC:CE:C6:01:9E:96:93:A9:E0:60:9A:9E:B0:68:E8:E6:75 Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0D3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0D1D Signing time: Wed 10 Dec 2025 17:24:12 +0000 Manifest this update: Wed 10 Dec 2025 17:24:11 +0000 Manifest next update: Wed 17 Dec 2025 17:24:11 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: r4do3jIskchS/q8bRwm57G/cFPVivPgbq+OENnxeadg=) 2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: es9j3LKTp+AUW2ig2BE9iWWW6VD0Nb77D+iullPdt18=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: FMw40XVAdGd77UkmIqYoD247AipDSUL3njDNeC4HGuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 17:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3391 (0xd3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Dec 10 17:24:11 2025 GMT Not After : Dec 17 17:24:11 2025 GMT Subject: CN=6939acbb-53a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:61:56:20:9d:3d:92:50:7a:7e:95:32:ad: 4b:86:0d:44:f7:68:9e:e6:33:53:fa:99:43:88:c2: 81:18:e4:2b:b6:09:b9:87:5a:67:c6:06:ac:41:ed: a1:91:e6:4c:0c:a2:ff:5d:50:b3:5e:ca:a7:f9:e9: 9c:14:2b:a8:ea:9c:5f:2c:21:40:49:65:4f:49:58: 78:78:b3:7a:bb:ba:25:d2:fe:74:5a:8e:ed:b6:f8: bc:fd:42:ad:f0:ad:04:1d:cc:d7:21:28:ec:75:68: 37:7d:cb:5f:f9:0c:ff:56:a4:f1:ec:1b:19:86:bd: a1:c3:41:a2:7b:21:da:6c:f5:e7:c8:fd:8d:6e:68: db:53:72:01:d8:e7:1e:83:f8:b6:ac:b6:49:d4:8e: 8f:cc:ae:f3:d7:a6:44:95:c8:9c:ca:b4:b1:15:5d: 76:e8:7d:8b:01:36:7a:7c:a4:e4:2c:29:37:e8:d7: f9:48:7d:bc:c9:13:f5:18:60:3e:f7:0f:d3:99:ec: 81:6e:c0:ba:28:90:f6:ee:63:f1:7a:e4:27:20:4b: 8d:b3:86:16:82:44:c2:56:3d:3d:44:d5:aa:55:f1: 42:7a:56:1d:c4:96:cb:bc:1b:99:c7:de:a2:2d:31: 6f:dd:49:68:17:dd:cd:ec:c8:bc:ec:f5:d8:9e:f7: 26:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3B:36:DC:CE:C6:01:9E:96:93:A9:E0:60:9A:9E:B0:68:E8:E6:75 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:27:a3:1b:4c:ea:cf:f8:5a:35:2e:35:7a:a2:73:14:68:df: c8:99:a1:85:d1:4d:97:e7:69:6f:7e:1d:41:33:a7:a6:3f:a6: 23:f8:01:bc:50:9b:44:1a:14:14:55:9d:1d:d3:ec:51:27:2b: 25:1d:03:86:e5:d6:f7:0b:a3:78:ef:d0:2b:bc:da:7b:52:2e: 57:ea:bd:2f:9f:72:ec:cb:af:8e:85:35:94:43:27:dd:0a:ef: 59:f1:b7:7a:d6:21:f5:e2:22:87:e3:30:20:a9:d7:94:38:80: 1b:a3:f8:41:46:9f:a2:9e:d7:74:03:66:00:3f:84:10:21:7f: 5b:73:29:3b:20:6c:3c:98:94:34:55:60:cd:cc:68:42:73:5a: 9e:76:7e:cb:c9:fc:a0:3d:ea:fc:ff:3f:6d:35:65:4e:ea:88: 4f:27:6c:af:66:c1:c4:92:b6:92:d6:7b:c8:f2:4b:a5:e5:07: c3:37:e1:4a:ca:43:c9:c8:5b:e6:4c:e4:d8:15:38:74:5f:48: f9:53:7e:47:17:26:10:8f:37:91:f4:74:e5:72:5b:06:32:b9: 71:71:5e:75:5f:d6:48:f0:d7:dc:70:5d:52:24:7b:ca:9c:8e: b1:26:da:db:63:11:3a:3d:41:26:44:a8:8b:84:8c:e5:50:0e: 41:11:e5:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUxMjEwMTcyNDExWhcNMjUxMjE3MTcyNDExWjAYMRYwFAYD VQQDEw02OTM5YWNiYi01M2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosphViCdPZJQen6VMq1Lhg1E92ie5jNT+plDiMKBGOQrtgm5h1pnxgasQe2h keZMDKL/XVCzXsqn+emcFCuo6pxfLCFASWVPSVh4eLN6u7ol0v50Wo7ttvi8/UKt 8K0EHczXISjsdWg3fctf+Qz/VqTx7BsZhr2hw0GieyHabPXnyP2NbmjbU3IB2Oce g/i2rLZJ1I6PzK7z16ZElcicyrSxFV126H2LATZ6fKTkLCk36Nf5SH28yRP1GGA+ 9w/TmeyBbsC6KJD27mPxeuQnIEuNs4YWgkTCVj09RNWqVfFCelYdxJbLvBuZx96i LTFv3UloF93N7Mi87PXYnvcmcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGE7NtzO xgGelpOp4GCanrBo6OZ1MB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRJ6MbTOrP+Fo1LjV6onMUaN/ImaGF0U2X52lvfh1BM6emP6Yj+AG8 UJtEGhQUVZ0d0+xRJyslHQOG5db3C6N479ArvNp7Ui5X6r0vn3Lsy6+OhTWUQyfd Cu9Z8bd61iH14iKH4zAgqdeUOIAbo/hBRp+intd0A2YAP4QQIX9bcyk7IGw8mJQ0 VWDNzGhCc1qedn7LyfygPer8/z9tNWVO6ohPJ2yvZsHEkraS1nvI8kul5QfDN+FK ykPJyFvmTOTYFTh0X0j5U35HFyYQjzeR9HTlclsGMrlxcV51X9ZI8NfccF1SJHvK nI6xJtrbYxE6PUEmRKiLhIzlUA5BEeU0 -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:36 2025 by rpki-client