This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: FRDn2MfjjBlI8srwJ3gKOVDTYvuwDW7sT8ymSLZ9+g4= Subject key identifier: 7D:00:1D:1D:21:CB:A1:92:14:DB:08:20:56:DA:72:5B:BC:CD:57:CB Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0C72 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0C6B Signing time: Sat 06 Dec 2025 16:14:33 +0000 Manifest this update: Sat 06 Dec 2025 16:14:32 +0000 Manifest next update: Sat 13 Dec 2025 16:14:32 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: X8H31hIZduD3yb1TP23raZ7HU0/iaQMptOiTaU/ezIw=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: KZLdlP1OQSAqnUANoQynhHKfuaNstAKbyzLi1TUSbtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3186 (0xc72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: Dec 6 16:14:32 2025 GMT Not After : Dec 13 16:14:32 2025 GMT Subject: CN=69345669-3e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:bf:31:af:07:87:bc:ef:53:b9:da:dc:97:2e: 0e:e5:52:16:c6:77:32:e2:2b:5f:25:a6:f4:af:c2: c4:f8:2e:20:85:14:3f:fa:55:ea:a8:54:12:e4:cd: 68:66:0d:a7:82:ac:7d:30:80:55:53:55:85:01:49: 8b:39:2a:18:c7:7b:bb:36:ed:3f:52:15:91:f6:6f: 30:7f:21:74:63:af:95:e2:17:6b:9a:9a:ba:8d:8a: 8d:fb:cc:e7:2e:0c:5c:9f:54:93:cc:c7:08:fb:f6: 49:79:e5:c2:8c:17:3a:ac:e3:3c:d6:c3:d2:af:90: af:59:b5:8f:8a:2e:71:f0:7f:36:e8:40:93:20:2c: 74:7b:d5:71:dc:35:36:ee:bd:15:4f:3d:a5:4a:73: 27:f3:2f:1c:7b:a9:3c:f1:20:29:c4:11:47:2b:4a: 43:01:d5:1f:30:2c:92:f9:7d:f2:8d:8a:f4:37:ad: 57:de:2c:c1:2a:57:07:a1:9b:2d:98:7c:02:9a:28: bf:8c:41:85:00:d2:6c:08:33:3c:d5:f5:b1:4f:26: a7:08:38:c7:c8:1b:7f:a9:17:8b:e3:79:e2:0b:24: 44:02:28:2b:78:d4:83:57:8f:da:c1:a6:1e:87:67: 77:49:3f:fc:7c:4b:5b:c6:72:cb:51:2f:62:0e:41: 40:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:00:1D:1D:21:CB:A1:92:14:DB:08:20:56:DA:72:5B:BC:CD:57:CB X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:bf:be:d5:1d:6e:81:81:71:e3:de:d7:cd:a3:a9:8d:46:71: a7:84:90:d0:29:2a:aa:39:c4:8d:dd:32:70:f1:ad:60:89:40: b8:68:33:5a:eb:31:bf:89:de:ff:a7:80:13:20:7e:3e:80:17: 13:3c:26:4a:3e:6a:69:7b:26:09:ba:27:c9:df:8b:11:04:05: 7f:35:35:5e:ff:df:6b:a9:c8:16:52:1b:e9:63:d7:bd:e7:42: db:46:78:75:4e:21:83:50:37:31:36:96:3d:f7:f1:1f:19:3a: 5d:7c:05:12:d7:11:86:a8:8f:07:6b:ed:d1:93:78:6f:70:a4: df:3c:dd:95:8e:fe:a8:7a:eb:54:91:78:be:b7:1e:d2:87:a1: d3:1f:b3:d0:14:87:44:2f:24:b2:9b:dd:c1:fb:18:c5:97:38: 79:69:aa:c0:db:34:b6:16:b9:20:95:bb:09:5e:b9:1f:02:77: da:fe:bb:fa:f7:5d:91:8a:31:e7:28:96:93:43:29:53:d0:c2: f9:44:c0:d8:90:93:20:3e:c0:93:e7:8f:22:26:fe:de:4a:fb: 79:49:d1:d2:6f:fb:c5:fb:32:87:99:38:d2:68:74:84:7e:e6: 6c:47:f1:de:80:1e:e0:d8:f8:c3:74:0d:bc:d6:f9:47:c5:8d: 48:ce:07:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjUxMjA2MTYxNDMyWhcNMjUxMjEzMTYxNDMyWjAYMRYwFAYD VQQDEw02OTM0NTY2OS0zZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+b8xrweHvO9Tudrcly4O5VIWxncy4itfJab0r8LE+C4ghRQ/+lXqqFQS5M1o Zg2ngqx9MIBVU1WFAUmLOSoYx3u7Nu0/UhWR9m8wfyF0Y6+V4hdrmpq6jYqN+8zn Lgxcn1STzMcI+/ZJeeXCjBc6rOM81sPSr5CvWbWPii5x8H826ECTICx0e9Vx3DU2 7r0VTz2lSnMn8y8ce6k88SApxBFHK0pDAdUfMCyS+X3yjYr0N61X3izBKlcHoZst mHwCmii/jEGFANJsCDM81fWxTyanCDjHyBt/qReL43niCyREAigreNSDV4/awaYe h2d3ST/8fEtbxnLLUS9iDkFApQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0AHR0h y6GSFNsIIFbaclu8zVfLMB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVv77VHW6BgXHj3tfNo6mNRnGnhJDQKSqqOcSN3TJw8a1giUC4aDNa 6zG/id7/p4ATIH4+gBcTPCZKPmppeyYJuifJ34sRBAV/NTVe/99rqcgWUhvpY9e9 50LbRnh1TiGDUDcxNpY99/EfGTpdfAUS1xGGqI8Ha+3Rk3hvcKTfPN2Vjv6oeutU kXi+tx7Sh6HTH7PQFIdELySym93B+xjFlzh5aarA2zS2FrkglbsJXrkfAnfa/rv6 912RijHnKJaTQylT0ML5RMDYkJMgPsCT548iJv7eSvt5SdHSb/vF+zKHmTjSaHSE fuZsR/HegB7g2PjDdA281vlHxY1Izgeb -----END CERTIFICATE-----Generated at Sun Dec 7 07:26:09 2025 by rpki-client