This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json) Hash identifier: 54jTq52O6mj2TanSquuuqfKfkCkBBRx8xZX4/edEtxI= Subject key identifier: 88:25:74:C0:81:C7:2E:3A:58:F4:74:11:EB:F5:8F:A0:7E:8B:57:E2 Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft Manifest number: 0C82 Signing time: Sat 20 Dec 2025 18:10:13 +0000 Manifest this update: Sat 20 Dec 2025 18:10:13 +0000 Manifest next update: Sat 27 Dec 2025 18:10:13 +0000 Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: 1Nb+UgOyroyf3jfHs7zgA3eoTOwOJaVA5M7Lh+UbaLQ=) 2: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: o9KgCgIfk9qmZZ9pgzWFPU4WMxKkFhiZ4bjzLNQ6ffs=) 3: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: ltU83qHdHMX+gE2JiPsnwwizXD7fI0umImKJHXZ+qiY=) 4: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: 3CkpfzzdlD3cY7gMPcsoVBDo+GHLrm85uXTpFP0fJ9Q=) 5: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: X2T86WPoFoEyZcogT1ndr7RJyh96AHdCumJauzM/7xw=) 6: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: bKIVbhRs5w35IIfwUaxKPcUoIg+dZW+Orr/jkzvA1ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Dec 20 18:10:13 2025 GMT Not After : Dec 27 18:10:13 2025 GMT Subject: CN=6946e685-9b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:37:d7:b5:24:ba:88:87:c8:f7:86:99:51:6f: 5b:a0:6d:64:64:4a:61:4b:59:d1:e8:ac:19:92:33: 6f:0c:e6:0d:b4:83:7c:88:5d:11:80:ae:a6:2f:ed: ef:91:2e:8c:22:6c:0a:23:04:c4:3b:32:0b:12:6d: 05:14:be:a9:c7:cb:d6:63:28:56:8e:84:0c:97:36: 15:fd:9a:ae:40:ca:bb:da:12:b3:40:bb:64:72:49: 26:4a:27:f7:5d:b8:20:08:93:a2:db:4e:20:d5:29: 15:0d:ef:3b:1e:c0:a6:f6:3e:09:4d:99:d3:aa:a3: 16:f8:5a:3d:57:5b:8c:0e:c0:81:8e:37:97:4c:2a: 67:50:35:87:65:45:fe:51:8d:89:9c:de:69:19:43: 06:64:ac:a5:a6:94:28:ef:90:ff:47:9b:2c:42:d5: 2b:bf:de:20:75:e8:4c:76:47:33:90:21:b7:89:f0: 3c:57:fc:51:85:2c:71:5d:00:ec:a7:8e:64:d9:8d: a0:23:8f:ce:5e:a3:48:93:06:69:04:70:44:84:4f: 93:63:38:e0:b8:7a:b9:ec:e6:6f:72:41:90:5e:73: 88:f0:35:b1:7c:81:43:1e:c7:8e:63:94:68:49:39: 1a:d0:0c:3c:0d:b1:8f:20:91:24:3e:c4:70:96:02: 92:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:25:74:C0:81:C7:2E:3A:58:F4:74:11:EB:F5:8F:A0:7E:8B:57:E2 X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a7:0e:b7:84:c8:63:e9:ec:d3:a9:20:ba:d6:70:0b:66:6c: cc:56:67:6b:40:34:1d:35:a1:10:84:7b:c1:d5:4e:cf:63:be: 4c:e8:69:20:24:26:99:66:67:dc:cd:82:bb:23:8a:e6:4c:d4: 11:62:9f:4d:5d:27:73:b5:d5:fc:53:d3:4a:cf:18:85:52:95: 8b:95:e9:06:b0:a6:ae:87:be:fb:cc:6b:ec:bd:bb:c1:1c:2c: c8:2a:7b:93:87:cd:2c:c9:66:17:44:4f:b8:b7:c1:60:9a:10: 8c:6f:65:57:5a:68:e2:02:02:80:57:47:59:e2:a7:4d:94:da: e2:08:ce:79:6b:d4:f7:e6:d9:03:bc:b6:14:99:ab:35:14:06: 40:76:6f:7f:f9:c2:1e:49:07:e4:0a:a4:6e:ac:aa:f1:ba:2e: aa:17:aa:9b:85:4e:a6:53:67:2e:dd:67:27:e3:3e:dd:a0:f4: 66:04:87:4c:84:42:1c:29:ac:5c:1d:e2:76:ab:0a:2a:cf:c8: 59:5d:56:e9:6a:5f:71:c0:4a:7e:d5:7a:dc:c9:b3:89:5b:22: 37:3a:9d:78:7a:aa:e8:60:82:5b:db:8f:7f:3f:10:79:f6:9e: fd:13:c4:28:8e:08:78:49:8b:23:a1:6b:b2:bc:77:46:f4:82: 16:bc:d9:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjUxMjIwMTgxMDEzWhcNMjUxMjI3MTgxMDEzWjAYMRYwFAYD VQQDDA02OTQ2ZTY4NS05YjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DfXtSS6iIfI94aZUW9boG1kZEphS1nR6KwZkjNvDOYNtIN8iF0RgK6mL+3v kS6MImwKIwTEOzILEm0FFL6px8vWYyhWjoQMlzYV/ZquQMq72hKzQLtkckkmSif3 XbggCJOi204g1SkVDe87HsCm9j4JTZnTqqMW+Fo9V1uMDsCBjjeXTCpnUDWHZUX+ UY2JnN5pGUMGZKylppQo75D/R5ssQtUrv94gdehMdkczkCG3ifA8V/xRhSxxXQDs p45k2Y2gI4/OXqNIkwZpBHBEhE+TYzjguHq57OZvckGQXnOI8DWxfIFDHseOY5Ro STka0Aw8DbGPIJEkPsRwlgKSVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgldMCB xy46WPR0Eev1j6B+i1fiMB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVFMC8yM0JGMkYyNjExM0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlW XzVRbW5YcWJ3Z0poY0UzT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAspw63hMhj6ezTqSC61nALZmzMVmdrQDQdNaEQhHvB1U7PY75M6Gkg JCaZZmfczYK7I4rmTNQRYp9NXSdztdX8U9NKzxiFUpWLlekGsKauh777zGvsvbvB HCzIKnuTh80syWYXRE+4t8FgmhCMb2VXWmjiAgKAV0dZ4qdNlNriCM55a9T35tkD vLYUmas1FAZAdm9/+cIeSQfkCqRurKrxui6qF6qbhU6mU2cu3Wcn4z7doPRmBIdM hEIcKaxcHeJ2qwoqz8hZXVbpal9xwEp+1XrcybOJWyI3Op14eqroYIJb249/PxB5 9p79E8Qojgh4SYsjoWuyvHdG9IIWvNnO -----END CERTIFICATE-----Generated at Mon Dec 22 07:59:07 2025 by rpki-client