This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: fJMzeA06QaZPGvAVypwbHl8jiHBBJkDIibABKSbNvYA= Subject key identifier: DF:4D:39:B5:5E:B0:DE:CD:B6:3B:D0:86:B6:82:63:63:60:B6:11:E0 Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0CCF Signing time: Thu 04 Dec 2025 17:39:53 +0000 Manifest this update: Thu 04 Dec 2025 17:39:52 +0000 Manifest next update: Thu 11 Dec 2025 17:39:52 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: EiHjpbxHo8hoFmAmhzg84tghJivEeiLyObd0GLJKBAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: Dec 4 17:39:52 2025 GMT Not After : Dec 11 17:39:52 2025 GMT Subject: CN=6931c769-c512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:0d:79:4a:89:86:be:9a:e0:f6:ff:ec:4f: 49:87:17:bb:0e:fe:e3:b0:1f:dc:37:cb:4d:9e:f2: ee:6f:82:0e:5e:ce:d8:49:af:48:b4:e3:6a:31:6b: ac:98:8c:bc:86:13:e9:7c:15:df:de:1a:62:97:7e: 73:de:3c:50:3c:b8:1a:cb:d5:9c:3a:a4:27:79:f7: 2e:1e:12:aa:ff:71:96:32:19:e4:3c:16:1d:04:58: 2f:a2:6f:d7:3a:02:0c:f1:9e:fc:f3:8b:64:f5:16: 0b:b0:4d:34:8f:ef:fa:2f:06:e1:cd:1d:54:21:3e: ad:d2:95:a7:5e:e9:5d:79:16:55:f5:66:82:03:77: 22:35:cd:3d:79:9e:de:31:93:84:d7:3b:fa:97:f9: dc:e3:cc:43:2a:97:f3:86:c9:39:be:15:65:37:2a: 56:d1:ce:7c:7f:ea:d7:87:2b:d1:c3:a7:2a:a1:48: 22:f8:cc:e4:8a:e8:7c:c2:5a:b3:2c:58:17:0f:59: c6:87:27:56:a1:98:7e:c7:72:4d:92:02:79:11:bb: 78:ca:8d:4e:11:91:b3:d5:51:13:ce:1f:b1:8a:9e: 8a:e3:b3:8d:c9:a0:be:20:91:fe:fc:cf:4d:f7:6d: 2f:af:95:99:02:48:7a:92:b7:0b:a7:9c:81:2b:3a: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4D:39:B5:5E:B0:DE:CD:B6:3B:D0:86:B6:82:63:63:60:B6:11:E0 X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:95:bc:d9:55:fe:a0:da:34:5c:0f:84:34:18:9f:e7:49:40: 9b:c4:d8:c2:8c:35:f5:d9:a4:0d:5c:eb:b4:ff:3c:1c:3d:31: 5b:a3:7b:4c:48:78:a6:06:bb:de:4d:eb:87:2b:e6:5b:92:d2: 0c:f1:f1:ce:6b:c2:ec:37:aa:47:3e:a1:c1:93:2b:21:e8:6f: dd:14:cb:2c:42:ee:e8:7e:38:98:16:36:a2:ac:1a:6d:b5:97: 3b:09:ca:51:82:a8:43:47:30:99:e3:dc:d1:08:3a:05:f4:bb: ca:1c:52:7f:7f:f3:e8:f0:12:d8:fa:bb:59:20:40:0c:2b:e8: 7f:18:75:52:04:82:48:ec:60:5c:18:1d:21:75:50:0d:7c:99: 18:e5:b5:90:7e:e0:60:e2:a3:cc:89:21:48:a7:88:52:09:d0: 8d:d3:e9:5b:66:38:3b:0c:ac:7d:7a:11:35:ef:3b:8a:1d:03: a3:df:49:ff:1f:6f:99:c4:e9:4d:d3:a3:c8:de:bc:a1:af:64: c0:52:f5:fc:c8:24:8b:f2:d0:0e:d4:5a:12:52:74:84:92:61: 6d:8f:79:eb:57:63:02:d8:f1:51:7d:ad:33:23:dc:d5:72:f5: 32:2f:0a:06:f5:31:72:7d:85:41:69:ca:92:9c:4c:9f:f4:9d: fb:4f:ff:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjUxMjA0MTczOTUyWhcNMjUxMjExMTczOTUyWjAYMRYwFAYD VQQDEw02OTMxYzc2OS1jNTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyP4NeUqJhr6a4Pb/7E9Jhxe7Dv7jsB/cN8tNnvLub4IOXs7YSa9ItONqMWus mIy8hhPpfBXf3hpil35z3jxQPLgay9WcOqQnefcuHhKq/3GWMhnkPBYdBFgvom/X OgIM8Z7884tk9RYLsE00j+/6LwbhzR1UIT6t0pWnXuldeRZV9WaCA3ciNc09eZ7e MZOE1zv6l/nc48xDKpfzhsk5vhVlNypW0c58f+rXhyvRw6cqoUgi+Mzkiuh8wlqz LFgXD1nGhydWoZh+x3JNkgJ5Ebt4yo1OEZGz1VETzh+xip6K47ONyaC+IJH+/M9N 920vr5WZAkh6krcLp5yBKzoPxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9NObVe sN7NtjvQhraCY2NgthHgMB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAplbzZVf6g2jRcD4Q0GJ/nSUCbxNjCjDX12aQNXOu0/zwcPTFbo3tM SHimBrveTeuHK+ZbktIM8fHOa8LsN6pHPqHBkysh6G/dFMssQu7ofjiYFjairBpt tZc7CcpRgqhDRzCZ49zRCDoF9LvKHFJ/f/Po8BLY+rtZIEAMK+h/GHVSBIJI7GBc GB0hdVANfJkY5bWQfuBg4qPMiSFIp4hSCdCN0+lbZjg7DKx9ehE17zuKHQOj30n/ H2+ZxOlN06PI3ryhr2TAUvX8yCSL8tAO1FoSUnSEkmFtj3nrV2MC2PFRfa0zI9zV cvUyLwoG9TFyfYVBacqSnEyf9J37T/8P -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:49 2025 by rpki-client