This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json) Hash identifier: jsSDoFY1Kli/vaiY3PL/Z+E0HXgYzFW+OW7QvtoPuMI= Subject key identifier: 2E:26:6D:B6:3A:5A:8E:D3:FF:C1:AE:0B:DF:1A:71:24:69:A9:EF:93 Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Certificate serial: 08FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft Manifest number: 08F7 Signing time: Thu 04 Dec 2025 19:30:50 +0000 Manifest this update: Thu 04 Dec 2025 19:30:49 +0000 Manifest next update: Thu 11 Dec 2025 19:30:49 +0000 Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: DEz7tk5rq2odVRYWegJLZk1JohKH3LEnDYNwxXSPSc8=) 2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: RBbk8UhQUJAo0+DivNUUdglkSzsFknX4rSnxZW8gCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2302 (0x8fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Validity Not Before: Dec 4 19:30:49 2025 GMT Not After : Dec 11 19:30:49 2025 GMT Subject: CN=6931e169-5c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:c2:95:65:50:d8:66:15:e8:3a:06:a6:e2: d4:be:e9:e9:1c:86:10:a5:68:93:0a:cf:1f:a7:c6: 6c:af:f1:52:11:d3:ac:b1:57:ff:a1:71:f5:6b:b5: df:90:06:79:7e:84:0e:5e:6f:de:0a:7c:6d:8b:b7: e3:2a:35:89:be:63:52:24:b7:c7:63:5a:f3:a0:09: bb:ae:a7:79:2b:33:13:d6:e9:30:81:26:2d:89:b9: 17:06:8c:d5:e0:f0:a0:49:ec:7d:2c:d8:e3:27:13: 28:c1:94:3e:3a:bb:1b:89:d1:72:92:e9:88:ed:9a: 8c:cb:e2:e0:89:05:cf:83:cc:3d:54:c4:1b:11:6b: d2:6f:08:8d:8a:1f:7f:5b:34:6d:cf:85:37:4a:cd: 2e:6f:f8:14:db:ca:f6:f6:2e:7c:1d:dc:79:0a:25: 1d:0d:ef:6c:4c:62:9c:8f:ee:cf:ef:68:40:75:29: bb:2b:42:7d:d1:5f:54:56:3b:57:e7:c4:76:c5:3d: 8f:fd:ea:54:cb:f9:6f:88:4d:6c:96:39:da:82:44: 14:a2:96:4a:e9:f5:b7:14:0e:7d:c2:3d:d1:0c:c5: ab:06:c2:84:21:75:c8:b7:33:78:37:00:29:95:77: f0:89:d7:8e:ac:0f:ac:d2:d6:b6:69:f2:01:7c:eb: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:26:6D:B6:3A:5A:8E:D3:FF:C1:AE:0B:DF:1A:71:24:69:A9:EF:93 X509v3 Authority Key Identifier: keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f1:8d:03:29:05:ca:bf:db:ed:58:90:be:0a:7c:1f:19:59: 2d:ff:bc:81:1e:20:4c:7f:ef:01:16:e4:35:96:19:bc:c9:f1: 1e:55:96:c5:8d:6e:8a:a6:a3:50:bd:f3:1c:8a:e4:29:b9:b0: 85:33:22:9c:0c:d7:0b:b1:f7:00:d3:46:0d:68:99:90:e9:be: 87:15:fe:27:b4:d3:70:b0:f1:d7:db:43:f0:22:95:11:33:3c: 3d:f2:d9:af:6b:83:47:41:8b:a4:9e:f3:6e:ce:90:01:44:ea: 98:72:f4:0e:cd:08:3f:4f:de:8c:1c:36:a4:a8:e9:c7:7a:81: 0c:21:f3:17:24:ed:b5:e2:63:62:46:01:a0:d2:f9:23:24:20: e7:e4:1b:fa:0d:8a:62:65:bf:be:83:33:c7:9c:d5:b2:8b:7a: 80:00:e5:22:c3:4e:9e:7d:49:7f:20:7e:55:ab:f2:f7:da:f3: c3:ad:ac:4a:ea:53:40:6c:9f:64:19:78:5a:e0:9f:8e:d6:62: f7:db:33:30:cc:1d:ef:54:47:2b:0c:78:f2:fe:39:66:67:a8: cd:90:01:3e:3f:a7:91:a5:c3:1d:e7:c1:58:97:60:f9:4d:f5: 3f:4d:6d:70:a8:ff:0e:96:24:30:9b:61:9f:41:8e:f8:15:2a: 9e:fc:79:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB QTBENkY1MTcwHhcNMjUxMjA0MTkzMDQ5WhcNMjUxMjExMTkzMDQ5WjAYMRYwFAYD VQQDEw02OTMxZTE2OS01YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjfClWVQ2GYV6DoGpuLUvunpHIYQpWiTCs8fp8Zsr/FSEdOssVf/oXH1a7Xf kAZ5foQOXm/eCnxti7fjKjWJvmNSJLfHY1rzoAm7rqd5KzMT1ukwgSYtibkXBozV 4PCgSex9LNjjJxMowZQ+OrsbidFykumI7ZqMy+LgiQXPg8w9VMQbEWvSbwiNih9/ WzRtz4U3Ss0ub/gU28r29i58Hdx5CiUdDe9sTGKcj+7P72hAdSm7K0J90V9UVjtX 58R2xT2P/epUy/lviE1sljnagkQUopZK6fW3FA59wj3RDMWrBsKEIXXItzN4NwAp lXfwideOrA+s0ta2afIBfOu7BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4mbbY6 Wo7T/8GuC98acSRpqe+TMB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0 c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj8Y0DKQXKv9vtWJC+CnwfGVkt/7yBHiBMf+8BFuQ1lhm8yfEeVZbF jW6KpqNQvfMciuQpubCFMyKcDNcLsfcA00YNaJmQ6b6HFf4ntNNwsPHX20PwIpUR Mzw98tmva4NHQYuknvNuzpABROqYcvQOzQg/T96MHDakqOnHeoEMIfMXJO214mNi RgGg0vkjJCDn5Bv6DYpiZb++gzPHnNWyi3qAAOUiw06efUl/IH5Vq/L32vPDraxK 6lNAbJ9kGXha4J+O1mL32zMwzB3vVEcrDHjy/jlmZ6jNkAE+P6eRpcMd58FYl2D5 TfU/TW1wqP8OliQwm2GfQY74FSqe/HlA -----END CERTIFICATE-----Generated at Sat Dec 6 16:25:46 2025 by rpki-client