This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json) Hash identifier: luJtdVyyR7WgQsS6Cc7SsMXnK2GJ7p0PBwTRfCjPxvk= Subject key identifier: 81:2F:6C:B9:F8:DE:E8:EB:F6:89:61:98:E5:D9:4C:02:40:67:1B:04 Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Certificate serial: 0907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft Manifest number: 0900 Signing time: Mon 22 Dec 2025 19:41:03 +0000 Manifest this update: Mon 22 Dec 2025 19:41:03 +0000 Manifest next update: Mon 29 Dec 2025 19:41:03 +0000 Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: G9Lszi+hVKKxD6SY065eQe5qZD6oJMYaSjEMQlsRBBI=) 2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: RBbk8UhQUJAo0+DivNUUdglkSzsFknX4rSnxZW8gCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2311 (0x907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Validity Not Before: Dec 22 19:41:03 2025 GMT Not After : Dec 29 19:41:03 2025 GMT Subject: CN=69499ecf-f7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:43:40:f0:d6:86:e5:43:d3:c8:cc:e7:c7: bf:90:76:79:a4:0b:f9:04:d2:c5:72:57:a9:28:f6: 1c:76:23:6b:09:50:8c:12:54:6c:b6:a0:5f:7e:ab: 25:86:4f:f8:da:34:c1:b1:92:26:99:80:1c:56:95: 8c:1d:f7:da:e8:90:a5:14:f5:2d:02:cd:35:78:f4: 46:c3:e5:86:15:50:ee:cc:16:68:29:0d:cc:b9:70: d2:c7:28:d3:17:49:57:b7:bb:6a:11:d8:7a:a5:06: 17:7f:fb:ed:9e:04:ee:68:c5:9e:06:aa:c0:39:ca: 23:62:19:f5:57:08:15:8e:ae:de:e9:38:82:5e:1c: ff:29:bd:fd:27:06:b1:18:72:80:a3:43:00:1f:af: b1:8d:d1:6b:f2:e4:2b:43:60:ba:32:92:52:08:fd: b8:ed:01:f5:13:dd:2c:5b:8f:70:8d:1f:09:c0:ee: ba:04:12:ca:ea:0a:f3:10:e2:b2:a6:9d:74:60:53: 04:46:7c:1f:a8:cc:27:85:29:4b:a7:35:ba:1d:9b: be:3a:e1:16:b4:00:47:be:08:17:a6:9d:bc:23:bc: 84:63:74:f2:28:f5:71:63:89:c8:7a:e1:84:ee:91: 37:a9:06:04:f3:58:de:be:33:b9:74:90:47:e2:e2: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2F:6C:B9:F8:DE:E8:EB:F6:89:61:98:E5:D9:4C:02:40:67:1B:04 X509v3 Authority Key Identifier: keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:c3:e7:94:bd:15:76:e0:00:09:b8:2d:d2:fe:27:87:d3:23: f7:4e:be:0c:b7:1d:85:7d:01:7a:cb:d4:00:f6:7d:80:44:27: 91:a7:25:00:d0:29:71:8c:4f:03:32:67:bb:9e:d8:6c:f1:68: ce:dd:40:ef:54:4e:0e:ba:ed:9c:d9:5b:db:ac:cb:e3:9e:a5: c2:0d:3e:75:e8:83:d2:69:48:79:91:a9:78:59:d8:d7:91:ec: e3:0b:15:00:15:f1:8f:85:42:d5:39:b0:84:b1:b2:33:22:ce: 25:9e:3e:b4:fa:aa:e1:1b:cb:1d:7d:17:e6:9d:ae:ca:d3:e8: 88:46:b1:9b:2a:94:13:44:01:fd:88:d3:1e:05:51:a5:a9:65: 3c:65:33:aa:5c:c5:4e:d1:4c:ee:f8:6a:81:03:c2:cc:e5:8e: 3a:58:f0:fb:d8:d8:98:e7:73:db:bf:e4:b9:16:31:51:31:dc: c1:bd:c6:71:59:16:dd:4a:8d:0e:ef:85:f5:68:a3:e7:81:4f: 3e:9d:ff:69:ec:fa:b7:5e:80:f1:40:97:40:5a:df:b5:43:54: ff:1c:4c:07:8c:c3:23:cc:39:d6:0d:e4:36:e9:df:d0:47:2c: 7f:f0:18:ed:3e:3c:c0:18:8d:2d:ab:a1:63:43:f3:5a:ce:12: 14:4e:0f:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB QTBENkY1MTcwHhcNMjUxMjIyMTk0MTAzWhcNMjUxMjI5MTk0MTAzWjAYMRYwFAYD VQQDDA02OTQ5OWVjZi1mN2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNVDQPDWhuVD08jM58e/kHZ5pAv5BNLFclepKPYcdiNrCVCMElRstqBffqsl hk/42jTBsZImmYAcVpWMHffa6JClFPUtAs01ePRGw+WGFVDuzBZoKQ3MuXDSxyjT F0lXt7tqEdh6pQYXf/vtngTuaMWeBqrAOcojYhn1VwgVjq7e6TiCXhz/Kb39Jwax GHKAo0MAH6+xjdFr8uQrQ2C6MpJSCP247QH1E90sW49wjR8JwO66BBLK6grzEOKy pp10YFMERnwfqMwnhSlLpzW6HZu+OuEWtABHvggXpp28I7yEY3TyKPVxY4nIeuGE 7pE3qQYE81jevjO5dJBH4uLI4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEvbLn4 3ujr9olhmOXZTAJAZxsEMB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0 c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACw+eUvRV24AAJuC3S/ieH0yP3Tr4Mtx2FfQF6y9QA9n2ARCeRpyUA 0ClxjE8DMme7nths8WjO3UDvVE4Ouu2c2VvbrMvjnqXCDT516IPSaUh5kal4WdjX kezjCxUAFfGPhULVObCEsbIzIs4lnj60+qrhG8sdfRfmna7K0+iIRrGbKpQTRAH9 iNMeBVGlqWU8ZTOqXMVO0Uzu+GqBA8LM5Y46WPD72NiY53Pbv+S5FjFRMdzBvcZx WRbdSo0O74X1aKPngU8+nf9p7Pq3XoDxQJdAWt+1Q1T/HEwHjMMjzDnWDeQ26d/Q Ryx/8BjtPjzAGI0tq6FjQ/NazhIUTg81 -----END CERTIFICATE-----Generated at Wed Dec 24 21:06:37 2025 by rpki-client