This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json)
Hash identifier: vt2oov3qhCyLAby/eNHIQuxaZiejnTxtY0sxyQu4KpE=
Subject key identifier: 5A:B1:F2:59:B9:1E:BA:C8:E3:D1:BA:DA:CE:18:EA:B6:EB:6E:E3:B9
Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17
Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
Certificate serial: 0905
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
Manifest number: 08FE
Signing time: Thu 18 Dec 2025 19:50:56 +0000
Manifest this update: Thu 18 Dec 2025 19:50:56 +0000
Manifest next update: Thu 25 Dec 2025 19:50:56 +0000
Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: hMRfTceztgIZJ3QCt8PQVfgwgR0WdlN5VPwjbdd5Qv8=)
2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: RBbk8UhQUJAo0+DivNUUdglkSzsFknX4rSnxZW8gCTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl
rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2309 (0x905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
Validity
Not Before: Dec 18 19:50:56 2025 GMT
Not After : Dec 25 19:50:56 2025 GMT
Subject: CN=69445b20-c363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:f6:87:07:de:1d:e1:fd:bf:83:23:8f:0c:
e3:d0:e5:a2:67:71:9b:82:cd:ea:ac:e9:be:7a:97:
d1:0b:bc:c6:f0:fc:5a:cd:55:1c:42:9f:81:93:a3:
a3:b1:44:fc:f5:47:80:52:ad:7b:5b:af:02:2e:3f:
00:7e:6a:a6:5e:e7:93:3e:8b:07:a3:47:39:99:43:
1a:36:b7:f0:44:37:30:e2:8c:2a:73:98:4d:08:6c:
9b:75:1d:39:a4:18:7a:d7:8a:56:38:11:84:e2:4f:
f6:18:d4:e2:09:be:3b:03:e5:7a:ae:49:39:48:d1:
8e:52:de:3f:4f:e0:e4:c7:f7:50:b9:72:38:34:99:
7e:4c:7e:02:c6:a5:80:87:84:6c:ff:18:83:27:c7:
53:1b:fe:a7:76:8c:5c:e2:9f:f5:52:0b:70:a5:c7:
0e:fb:ba:00:9b:72:37:67:54:c6:06:9b:9e:c7:96:
aa:e6:d5:c3:d5:08:a6:4b:13:22:33:73:22:dc:7c:
43:48:dc:ce:bc:2c:01:f5:46:28:b6:68:af:5e:38:
a9:fb:d2:03:5e:1b:2a:d3:e6:22:64:66:a4:02:72:
e0:e0:c6:ae:e5:b2:56:64:54:56:67:ef:51:2f:13:
3d:13:7d:28:9d:ac:82:9a:5b:f1:5c:fa:e5:63:42:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:F2:59:B9:1E:BA:C8:E3:D1:BA:DA:CE:18:EA:B6:EB:6E:E3:B9
X509v3 Authority Key Identifier:
keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:25:17:02:26:da:c6:51:2f:bb:a0:5c:b5:63:94:53:98:79:
86:ac:e5:cf:ce:ae:37:87:be:42:57:e4:3c:8c:e7:f6:dd:86:
23:c6:42:f5:ba:58:c9:7c:5a:c8:a4:0c:fc:26:ed:8d:9c:88:
4f:af:dd:bc:26:a9:eb:3c:4c:db:6f:b1:cf:8a:a7:a8:0f:20:
4c:fa:54:8a:a7:c4:d1:41:1c:e0:95:7c:c8:f2:15:09:d9:b0:
c2:ba:aa:b2:38:ec:5a:5f:0a:0d:13:47:ad:99:54:dc:64:aa:
df:33:94:7f:06:35:59:42:87:9f:7e:1f:f1:6a:f3:ed:cb:76:
01:37:2f:5f:b2:5a:4e:3e:f7:99:ee:6e:2a:9d:08:ea:94:cf:
2f:57:a6:b9:1e:1e:30:55:c8:95:68:ca:db:a1:40:5a:f6:31:
22:87:92:40:71:f4:fc:6e:74:cd:b2:bc:4d:56:81:b2:1b:b5:
82:bf:bb:3b:83:cb:c1:25:70:9f:a5:0b:5a:4f:e0:d7:e1:cc:
17:a3:69:35:5b:06:8c:b6:e9:55:26:fb:80:04:6b:6d:a0:32:
9b:22:f8:40:91:ce:9b:7d:8a:b6:b5:a5:fe:5c:d1:b2:38:dc:
e9:9e:1d:2a:d4:02:41:0e:eb:e0:aa:1b:7a:f5:3b:67:89:60:
05:13:92:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB
QTBENkY1MTcwHhcNMjUxMjE4MTk1MDU2WhcNMjUxMjI1MTk1MDU2WjAYMRYwFAYD
VQQDDA02OTQ0NWIyMC1jMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqqP2hwfeHeH9v4Mjjwzj0OWiZ3Gbgs3qrOm+epfRC7zG8PxazVUcQp+Bk6Oj
sUT89UeAUq17W68CLj8AfmqmXueTPosHo0c5mUMaNrfwRDcw4owqc5hNCGybdR05
pBh614pWOBGE4k/2GNTiCb47A+V6rkk5SNGOUt4/T+Dkx/dQuXI4NJl+TH4CxqWA
h4Rs/xiDJ8dTG/6ndoxc4p/1UgtwpccO+7oAm3I3Z1TGBpuex5aq5tXD1QimSxMi
M3Mi3HxDSNzOvCwB9UYotmivXjip+9IDXhsq0+YiZGakAnLg4Mau5bJWZFRWZ+9R
LxM9E30onayCmlvxXPrlY0K90wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqx8lm5
HrrI49G62s4Y6rbrbuO5MB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD
MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0
c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAmJRcCJtrGUS+7oFy1Y5RTmHmGrOXPzq43h75CV+Q8jOf23YYjxkL1
uljJfFrIpAz8Ju2NnIhPr928JqnrPEzbb7HPiqeoDyBM+lSKp8TRQRzglXzI8hUJ
2bDCuqqyOOxaXwoNE0etmVTcZKrfM5R/BjVZQoeffh/xavPty3YBNy9fslpOPveZ
7m4qnQjqlM8vV6a5Hh4wVciVaMrboUBa9jEih5JAcfT8bnTNsrxNVoGyG7WCv7s7
g8vBJXCfpQtaT+DX4cwXo2k1WwaMtulVJvuABGttoDKbIvhAkc6bfYq2taX+XNGy
ONzpnh0q1AJBDuvgqht69TtniWAFE5KV
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:46:57 2025 by rpki-client