This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: 49iTEW+qdg6vZ3nuN8tLHoV/IhGGZN2upedhkrYGScU= Subject key identifier: E3:02:91:A8:79:6B:80:C1:BF:CD:F7:F6:C4:00:F4:76:5A:70:76:9C Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0CD8 Signing time: Mon 22 Dec 2025 17:46:47 +0000 Manifest this update: Mon 22 Dec 2025 17:46:47 +0000 Manifest next update: Mon 29 Dec 2025 17:46:47 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: bCIi9rqZt/rJq7Agre6HazsZiBZR8N04ukjTPJM9jz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: Dec 22 17:46:47 2025 GMT Not After : Dec 29 17:46:47 2025 GMT Subject: CN=69498407-96c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b5:e1:93:a0:47:8a:04:25:c0:fb:46:f6:72: 86:45:4a:c1:45:5c:d8:93:78:e1:63:0b:a8:35:97: de:47:6b:22:e7:e7:8b:35:46:bf:d6:97:1f:38:b6: 9c:d6:94:1f:3d:85:64:7d:5d:0f:38:2b:ef:a3:9b: 8c:46:e0:60:b2:10:40:e7:61:5d:d7:5d:39:72:3b: ad:65:18:34:2a:ad:57:2f:b2:d6:86:58:d2:0e:2c: d5:c8:4c:b0:69:73:8e:f6:f3:75:81:9d:a6:dd:20: 84:db:2b:3b:a5:07:42:97:c6:f4:e9:5c:04:69:c3: 07:1f:d8:8d:86:ef:0d:7a:99:80:83:08:2a:90:73: 76:df:86:35:c6:17:cc:6d:bc:99:8f:5d:40:d0:fb: 7a:53:8e:c8:26:29:05:2b:5f:8e:01:49:76:54:2d: 56:0d:18:42:a8:4b:50:d8:87:c8:8e:7e:9d:61:83: 12:4a:a7:3e:8a:e1:7b:79:1a:ae:96:7e:5f:7b:f8: aa:f1:65:86:4c:27:f7:bf:be:54:88:ff:a0:5e:c1: 40:f7:8a:b8:b3:44:09:6c:e3:a2:22:7c:85:70:b2: 47:61:92:72:6a:f0:41:2e:40:c0:98:6e:13:f3:da: e8:c0:40:a4:c7:0a:12:07:3d:02:ba:00:1b:e6:e3: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:02:91:A8:79:6B:80:C1:BF:CD:F7:F6:C4:00:F4:76:5A:70:76:9C X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ce:36:82:fd:2c:b5:31:18:05:e8:91:27:f2:9a:83:8a:7a: e9:d2:70:c3:de:48:ef:82:a1:42:97:76:df:08:43:d0:d1:7b: 55:f4:96:63:1a:44:62:83:b8:d2:f8:cd:f1:f9:60:4b:c0:3c: 44:2b:8e:f1:b5:8b:1b:34:81:d1:9c:d5:d1:72:2a:59:4b:85: eb:35:50:49:94:3e:5d:7d:41:2f:af:0a:7d:eb:8c:ec:76:c6: c8:51:77:22:db:69:5f:c4:b5:3b:7c:e7:4d:df:c0:37:cf:66: b1:7a:09:9c:b8:2f:8d:a7:93:01:39:f2:72:82:26:ea:39:c1: 2f:8a:78:19:b3:39:6a:44:2d:50:5a:12:16:22:a0:3e:4d:57: 5e:c3:a0:ab:28:31:69:10:ec:e2:dd:1d:3d:9e:38:f7:6f:cf: bb:39:9d:a7:69:d2:03:c4:96:f3:ff:e0:be:cd:fa:43:6b:6b: 2a:84:23:70:f2:29:34:77:21:0e:7c:99:9e:88:0c:a9:e1:9b: f6:bf:26:71:05:4c:6f:a6:04:df:f9:ec:71:95:fa:7b:e0:0c: c6:97:ef:15:84:e4:bf:03:cf:78:ac:d2:50:4e:17:2a:f0:e3: 8a:2a:6d:24:f6:94:1e:89:39:30:af:de:91:d2:ba:29:51:c9: aa:2a:88:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjUxMjIyMTc0NjQ3WhcNMjUxMjI5MTc0NjQ3WjAYMRYwFAYD VQQDDA02OTQ5ODQwNy05NmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6LXhk6BHigQlwPtG9nKGRUrBRVzYk3jhYwuoNZfeR2si5+eLNUa/1pcfOLac 1pQfPYVkfV0POCvvo5uMRuBgshBA52Fd1105cjutZRg0Kq1XL7LWhljSDizVyEyw aXOO9vN1gZ2m3SCE2ys7pQdCl8b06VwEacMHH9iNhu8NepmAgwgqkHN234Y1xhfM bbyZj11A0Pt6U47IJikFK1+OAUl2VC1WDRhCqEtQ2IfIjn6dYYMSSqc+iuF7eRqu ln5fe/iq8WWGTCf3v75UiP+gXsFA94q4s0QJbOOiInyFcLJHYZJyavBBLkDAmG4T 89rowECkxwoSBz0CugAb5uMprwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMCkah5 a4DBv8339sQA9HZacHacMB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvzjaC/Sy1MRgF6JEn8pqDinrp0nDD3kjvgqFCl3bfCEPQ0XtV9JZj GkRig7jS+M3x+WBLwDxEK47xtYsbNIHRnNXRcipZS4XrNVBJlD5dfUEvrwp964zs dsbIUXci22lfxLU7fOdN38A3z2axegmcuC+Np5MBOfJygibqOcEvingZszlqRC1Q WhIWIqA+TVdew6CrKDFpEOzi3R09njj3b8+7OZ2nadIDxJbz/+C+zfpDa2sqhCNw 8ik0dyEOfJmeiAyp4Zv2vyZxBUxvpgTf+exxlfp74AzGl+8VhOS/A894rNJQThcq 8OOKKm0k9pQeiTkwr96R0ropUcmqKohM -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:51 2025 by rpki-client