This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json) Hash identifier: mhoMbZ/BRddjl1De7N2i/nMx34U1QKnRDfLR3eCi/ng= Subject key identifier: B7:9E:95:D2:0B:A1:64:72:66:20:B4:EB:FF:15:80:F7:D2:BB:67:64 Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft Manifest number: 063F Signing time: Thu 04 Dec 2025 21:26:35 +0000 Manifest this update: Thu 04 Dec 2025 21:26:34 +0000 Manifest next update: Thu 11 Dec 2025 21:26:34 +0000 Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: bABm5ide8YIFAHysKM+iLjUifUNZYClOJh2dxA1mSCg=) 2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: ClA7TsoBf9is9kiaEyUF4SSCiNxpgXXELAtT3dKemLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Validity Not Before: Dec 4 21:26:34 2025 GMT Not After : Dec 11 21:26:34 2025 GMT Subject: CN=6931fc8a-d237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:1f:f3:30:4b:82:ad:9a:5e:42:00:44:e6: b7:73:64:80:8f:bc:e5:64:98:e5:d2:32:0f:2a:c3: 2d:e2:14:5c:b4:14:b5:98:ce:3c:18:bf:af:ac:62: a0:48:9e:23:bf:ae:c5:fa:ea:cc:40:84:e8:f1:0d: c7:3e:b2:4b:c5:c0:79:9c:fc:a2:91:a0:8e:8d:d2: d0:10:b3:09:32:17:a0:fb:6a:84:9c:0a:f8:aa:6d: 18:1c:25:a3:b8:db:42:79:75:c7:37:75:5b:db:78: 8d:fe:c1:49:6d:d1:53:20:90:49:9e:3b:15:ee:60: e8:ae:c8:d9:03:df:31:98:78:b2:7d:8a:87:76:bb: 5c:56:a4:28:0f:0e:81:63:d4:87:3b:f1:09:30:7a: b2:eb:2e:35:bb:58:d1:cb:cf:56:72:16:7c:d9:f3: 70:72:ec:71:8c:e6:29:42:6c:f4:65:b2:68:dc:66: bd:d2:f9:58:4f:b9:74:53:58:6c:fd:89:a9:40:e8: 8d:8c:43:bc:9e:66:80:dd:16:6c:21:01:4a:89:5a: e3:3d:a8:48:7d:d0:c8:63:f6:dc:e2:93:90:ec:a0: 8b:e9:0a:17:56:51:5c:de:e2:98:6c:47:7f:4c:4e: 0d:64:2b:c5:fd:9f:59:58:7e:10:2d:02:c2:24:0d: 0e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9E:95:D2:0B:A1:64:72:66:20:B4:EB:FF:15:80:F7:D2:BB:67:64 X509v3 Authority Key Identifier: keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fb:ca:c6:9b:c1:7d:d5:e4:c1:fa:99:26:1d:a2:6c:a9:c8: a0:d5:49:5b:00:5b:24:f7:fb:b6:82:2f:55:88:3f:29:0a:b4: 96:55:ef:92:ff:61:53:4e:11:98:39:41:3d:be:c3:52:d5:ad: 4c:ae:c1:93:a1:d5:d8:64:d2:a6:0d:32:33:b3:35:06:63:80: 2f:22:a7:b2:23:53:16:49:bd:ad:7c:c7:21:8d:c1:cb:6e:b4: 20:4d:41:83:23:5a:b4:b2:17:54:70:4f:93:5b:97:dc:d8:d1: 1f:57:e0:87:10:16:a8:77:af:73:45:57:40:c2:59:61:02:6c: fb:54:f6:26:46:e6:4a:8c:c1:3b:1a:1a:ca:98:e1:96:ff:40: 61:6b:16:ec:85:11:da:c7:bf:08:9e:f6:d4:f1:af:e7:ba:24: 29:b6:77:b1:cd:84:1c:49:0b:30:eb:2b:47:42:0f:ee:0b:45: e2:62:74:93:ff:14:91:bf:1c:8a:16:18:07:79:5e:e2:51:ee: 67:43:57:da:7f:22:86:f5:82:fa:69:27:48:2a:ad:a1:48:3a: 73:0a:12:48:41:ca:67:5d:a9:b3:4f:07:fe:77:42:a3:75:94: 90:c1:11:e2:69:31:88:72:76:58:de:c3:8f:4e:90:f1:9c:1b: 11:f8:14:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQzkxMTAvBgNVBAUTKEFERTc2MzM0OEQwMjU5QUQxMkNEODhCNzY0RDM5OENC OEFDNzQwQzkwHhcNMjUxMjA0MjEyNjM0WhcNMjUxMjExMjEyNjM0WjAYMRYwFAYD VQQDEw02OTMxZmM4YS1kMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKIf8zBLgq2aXkIAROa3c2SAj7zlZJjl0jIPKsMt4hRctBS1mM48GL+vrGKg SJ4jv67F+urMQITo8Q3HPrJLxcB5nPyikaCOjdLQELMJMheg+2qEnAr4qm0YHCWj uNtCeXXHN3Vb23iN/sFJbdFTIJBJnjsV7mDorsjZA98xmHiyfYqHdrtcVqQoDw6B Y9SHO/EJMHqy6y41u1jRy89WchZ82fNwcuxxjOYpQmz0ZbJo3Ga90vlYT7l0U1hs /YmpQOiNjEO8nmaA3RZsIQFKiVrjPahIfdDIY/bc4pOQ7KCL6QoXVlFc3uKYbEd/ TE4NZCvF/Z9ZWH4QLQLCJA0OzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeeldIL oWRyZiC06/8VgPfSu2dkMB8GA1UdIwQYMBaAFK3nYzSNAlmtEs2It2TTmMuKx0DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNDOS9EMzBCMTVDMEI2 Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dhMFN6WWkzWk5PWXk0ckhR TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlZGpOSTBDV2EwU3pZaTNaTk9ZeTRySFFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNDOS9EMzBCMTVDMEI2Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dh MFN6WWkzWk5PWXk0ckhRTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB+8rGm8F91eTB+pkmHaJsqcig1UlbAFsk9/u2gi9ViD8pCrSWVe+S /2FTThGYOUE9vsNS1a1MrsGTodXYZNKmDTIzszUGY4AvIqeyI1MWSb2tfMchjcHL brQgTUGDI1q0shdUcE+TW5fc2NEfV+CHEBaod69zRVdAwllhAmz7VPYmRuZKjME7 GhrKmOGW/0BhaxbshRHax78InvbU8a/nuiQptnexzYQcSQsw6ytHQg/uC0XiYnST /xSRvxyKFhgHeV7iUe5nQ1fafyKG9YL6aSdIKq2hSDpzChJIQcpnXamzTwf+d0Kj dZSQwRHiaTGIcnZY3sOPTpDxnBsR+BRc -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:01 2025 by rpki-client