This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: N/qsPiolDLfHTrliV1ZuvFr/Uu7yrNgqy/mmPWle+ow= Subject key identifier: 42:1B:62:5A:6C:40:02:F0:88:F2:80:D9:31:08:59:29:C6:EA:8B:9B Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0D0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0D06 Signing time: Mon 22 Dec 2025 17:42:05 +0000 Manifest this update: Mon 22 Dec 2025 17:42:04 +0000 Manifest next update: Mon 29 Dec 2025 17:42:04 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: tcTyrFlo5LkpL29pqqt7D/uusi2GhpkRYaQgud/tMwg=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: ubWolQt+8+l24CDrG/8jAKrnFMju79IVwrQ7ghSshi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3343 (0xd0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: Dec 22 17:42:04 2025 GMT Not After : Dec 29 17:42:04 2025 GMT Subject: CN=694982ed-010d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6d:71:e0:d7:b3:11:bd:d8:12:8d:3a:9d:e4: fb:05:3a:d3:38:43:3c:f6:77:ab:1a:11:40:20:05: c3:c3:2f:33:47:73:5b:02:9b:3c:57:45:cd:d5:cb: dd:01:61:03:55:2a:fc:2e:fa:90:5b:a5:9d:df:4d: 7e:50:8b:40:c9:bf:19:15:63:bb:c0:9e:5f:d6:3c: 3b:31:5b:5f:df:3f:31:8c:92:cf:cf:6d:13:29:b8: c6:6e:61:ee:6a:ff:41:0d:3e:56:c4:ab:29:9a:9a: 8d:27:e1:a5:50:e7:de:35:5e:b8:69:d2:e3:b5:44: fd:9a:4e:45:8c:ae:db:81:c4:e1:15:1c:a2:1a:cd: a8:b2:13:9e:23:29:7e:1c:f4:8b:2b:2e:b4:dd:60: 68:39:e7:66:6f:43:63:57:74:9e:b6:37:3b:45:7e: a4:06:1e:bc:7c:7e:51:dc:40:26:5e:77:c5:9d:c3: 2f:bb:e7:52:c9:70:9c:3f:1f:5c:f3:d8:ee:34:ac: 64:ef:bd:2b:e9:ce:62:11:14:3a:e8:63:36:9e:66: 2b:f5:d6:a5:14:c0:42:e9:f0:91:6d:d7:69:09:4f: 28:a2:d8:e4:99:70:79:e4:4f:ac:b4:00:2b:d8:5a: 71:3d:79:ac:0b:19:50:af:01:33:12:7a:b9:21:1b: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1B:62:5A:6C:40:02:F0:88:F2:80:D9:31:08:59:29:C6:EA:8B:9B X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:91:7a:72:ac:f0:21:b7:58:31:f4:a9:22:bb:ba:7c:b3:48: 47:c2:c0:97:6d:d0:5f:7f:e3:1e:db:41:67:8b:37:13:cb:fa: bb:3c:f3:7c:37:29:ec:26:8c:e3:1e:a0:31:50:72:80:f4:d6: d0:98:c1:04:ec:c0:cf:b5:76:db:62:c4:ab:1c:11:2f:8b:fb: 70:bf:3f:8a:99:d9:3d:56:e8:ab:e5:c8:be:53:de:38:8f:cb: 06:ba:20:5f:f6:45:3b:f8:35:fd:0b:e5:0f:c8:74:ef:4e:cd: f9:34:30:7b:af:ea:f1:b5:48:f4:87:d7:77:3d:45:b5:b7:55: 9a:f2:dc:59:80:5f:0a:af:43:e3:26:69:80:77:09:f2:c7:1d: 3a:b1:e6:fc:78:1a:6b:d9:ca:b5:78:bf:ba:7d:01:af:42:42: e4:65:6d:02:ca:bb:2d:f5:75:b7:9c:4d:7e:a2:08:cb:a4:75: c5:78:59:d5:19:31:ad:24:81:d4:12:83:9c:b8:20:17:ce:26: c3:e2:5f:ed:b7:3a:7e:0a:b8:e7:98:d4:a6:0a:a7:d8:0d:8b: 89:00:52:0a:08:8d:53:0a:75:ea:09:d2:53:06:e5:08:ec:47: 6a:82:fb:9c:d1:25:03:ff:06:d9:6a:d7:8d:b0:d8:ca:ef:da: 9c:6a:52:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjUxMjIyMTc0MjA0WhcNMjUxMjI5MTc0MjA0WjAYMRYwFAYD VQQDDA02OTQ5ODJlZC0wMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmm1x4NezEb3YEo06neT7BTrTOEM89nerGhFAIAXDwy8zR3NbAps8V0XN1cvd AWEDVSr8LvqQW6Wd301+UItAyb8ZFWO7wJ5f1jw7MVtf3z8xjJLPz20TKbjGbmHu av9BDT5WxKspmpqNJ+GlUOfeNV64adLjtUT9mk5FjK7bgcThFRyiGs2oshOeIyl+ HPSLKy603WBoOedmb0NjV3Setjc7RX6kBh68fH5R3EAmXnfFncMvu+dSyXCcPx9c 89juNKxk770r6c5iERQ66GM2nmYr9dalFMBC6fCRbddpCU8ootjkmXB55E+stAAr 2FpxPXmsCxlQrwEzEnq5IRueWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIbYlps QALwiPKA2TEIWSnG6oubMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+kXpyrPAht1gx9Kkiu7p8s0hHwsCXbdBff+Me20FnizcTy/q7PPN8 NynsJozjHqAxUHKA9NbQmMEE7MDPtXbbYsSrHBEvi/twvz+Kmdk9Vuir5ci+U944 j8sGuiBf9kU7+DX9C+UPyHTvTs35NDB7r+rxtUj0h9d3PUW1t1Wa8txZgF8Kr0Pj JmmAdwnyxx06seb8eBpr2cq1eL+6fQGvQkLkZW0Cyrst9XW3nE1+ogjLpHXFeFnV GTGtJIHUEoOcuCAXzibD4l/ttzp+CrjnmNSmCqfYDYuJAFIKCI1TCnXqCdJTBuUI 7Edqgvuc0SUD/wbZateNsNjK79qcalKf -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:30 2025 by rpki-client