This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: Iiw+ymkFxxr+xV/eOZVoVESMsx8tdSvD/GUIRvFGQu4= Subject key identifier: CF:02:87:8D:62:5B:90:AF:CA:D8:7B:CA:40:19:44:04:12:9C:56:7C Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0D46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0D24 Signing time: Wed 24 Dec 2025 17:44:07 +0000 Manifest this update: Wed 24 Dec 2025 17:44:06 +0000 Manifest next update: Wed 31 Dec 2025 17:44:06 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: Kg+H4Mo1dmIM7gxB+UrXkk/BYhP66TN62I+TwyfREkQ=) 2: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: FMw40XVAdGd77UkmIqYoD247AipDSUL3njDNeC4HGuM=) 3: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: es9j3LKTp+AUW2ig2BE9iWWW6VD0Nb77D+iullPdt18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3398 (0xd46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Dec 24 17:44:06 2025 GMT Not After : Dec 31 17:44:06 2025 GMT Subject: CN=694c2666-2285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:80:0f:0d:1c:e9:90:bc:6b:36:50:d7:3f: c7:f5:45:67:24:fd:99:4d:56:82:7e:d9:ee:21:5a: 57:84:9d:37:31:56:b2:f5:e2:f6:56:4b:42:cd:01: 3e:52:38:3b:a6:d0:1a:5d:31:25:93:89:f2:d6:f1: 6e:5e:16:a4:f7:8c:fe:bf:15:8c:fd:f8:af:76:4a: f4:5b:4e:a5:8a:7b:f2:23:12:2e:16:49:f4:53:48: ee:2b:0c:6b:29:4f:24:0b:70:ea:ab:9a:4b:4a:97: c9:61:35:b2:19:b4:4c:84:94:49:e5:89:99:fb:e4: 29:d3:52:fd:ab:e9:83:1a:d3:39:e0:7c:a7:a3:fd: 87:01:e2:e4:8f:51:6d:3b:8c:2a:7d:4c:ed:e4:15: 80:02:67:ea:2c:e5:25:09:d1:75:3e:12:13:02:b3: ea:cd:77:96:81:6f:d4:6b:2a:13:b4:d1:2c:ff:c1: 02:1e:86:fd:ea:37:33:41:ca:2f:5e:66:83:f7:37: e3:67:a8:78:6d:d5:51:ca:1c:c8:df:90:3d:89:9a: 05:91:ad:c5:66:3b:99:56:62:15:91:30:43:34:66: cd:67:b2:34:20:29:b6:f0:b2:19:4f:ec:9b:49:84: fd:7e:fb:2c:7e:db:ce:e7:a2:bd:24:e2:2b:73:e0: bf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:02:87:8D:62:5B:90:AF:CA:D8:7B:CA:40:19:44:04:12:9C:56:7C X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:23:a9:03:ec:ef:a4:37:9f:5e:de:e1:5d:3a:5c:bb:8d:cd: 2a:88:4f:50:e5:9b:92:40:cb:a2:dc:5a:d5:26:cb:70:84:26: ee:d0:1b:38:cb:f5:e0:09:33:5e:aa:81:df:88:ae:a0:54:ce: e6:11:25:f8:45:d2:37:eb:a9:1f:9f:49:29:74:ad:bf:94:b4: ed:b6:0a:48:2c:21:00:e8:e3:c5:88:dc:1c:ca:28:c0:17:dc: 75:ba:c5:08:3b:57:95:c2:bb:35:55:7b:a4:79:64:db:54:05: 8b:0c:01:df:e6:59:0a:2f:d9:4c:b4:de:75:27:14:4c:3f:36: 68:64:1a:60:08:4b:45:9f:a1:da:d8:57:42:03:12:9f:32:18: 41:19:96:67:27:12:ce:a1:90:e8:4e:9d:37:57:2e:b5:87:bb: 26:55:4e:94:48:1b:c5:fc:8c:ec:a9:0e:92:14:6b:a3:b0:b2: 55:cc:a9:e4:e6:09:25:f4:4b:4d:1c:42:85:53:de:ec:36:b9: 5d:75:4a:05:16:c7:10:b7:e6:c4:9f:8b:84:79:50:e3:d0:de: 07:72:d7:83:3c:c5:bc:14:d2:ef:af:1b:cb:73:e8:8e:81:cf: 65:6a:01:4a:aa:7d:0f:5f:6b:b5:97:f9:2d:ce:1b:9c:3b:c9: 11:74:b4:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUxMjI0MTc0NDA2WhcNMjUxMjMxMTc0NDA2WjAYMRYwFAYD VQQDDA02OTRjMjY2Ni0yMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1GADw0c6ZC8azZQ1z/H9UVnJP2ZTVaCftnuIVpXhJ03MVay9eL2VktCzQE+ Ujg7ptAaXTElk4ny1vFuXhak94z+vxWM/fivdkr0W06linvyIxIuFkn0U0juKwxr KU8kC3Dqq5pLSpfJYTWyGbRMhJRJ5YmZ++Qp01L9q+mDGtM54Hyno/2HAeLkj1Ft O4wqfUzt5BWAAmfqLOUlCdF1PhITArPqzXeWgW/UayoTtNEs/8ECHob96jczQcov XmaD9zfjZ6h4bdVRyhzI35A9iZoFka3FZjuZVmIVkTBDNGbNZ7I0ICm28LIZT+yb SYT9fvssftvO56K9JOIrc+C/wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8Ch41i W5Cvyth7ykAZRAQSnFZ8MB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqI6kD7O+kN59e3uFdOly7jc0qiE9Q5ZuSQMui3FrVJstwhCbu0Bs4 y/XgCTNeqoHfiK6gVM7mESX4RdI366kfn0kpdK2/lLTttgpILCEA6OPFiNwcyijA F9x1usUIO1eVwrs1VXukeWTbVAWLDAHf5lkKL9lMtN51JxRMPzZoZBpgCEtFn6Ha 2FdCAxKfMhhBGZZnJxLOoZDoTp03Vy61h7smVU6USBvF/IzsqQ6SFGujsLJVzKnk 5gkl9EtNHEKFU97sNrlddUoFFscQt+bEn4uEeVDj0N4HcteDPMW8FNLvrxvLc+iO gc9lagFKqn0PX2u1l/ktzhucO8kRdLRl -----END CERTIFICATE-----Generated at Thu Dec 25 23:56:23 2025 by rpki-client