This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft File: rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json) Hash identifier: ySKSU2qlwfRuGbehFGm/NvL7Wde3IZ4dtibbrF5rJes= Subject key identifier: 98:B1:C7:40:74:84:D8:55:4D:82:0C:06:62:DC:29:CF:9B:71:BE:7F Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 Certificate issuer: /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft Manifest number: 3D Signing time: Fri 19 Dec 2025 06:24:10 +0000 Manifest this update: Fri 19 Dec 2025 06:24:10 +0000 Manifest next update: Fri 26 Dec 2025 06:24:10 +0000 Files and hashes: 1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: +9KtjoB5Uy14fgVub/dJZRJI4LFBzN3OavmvQ2tfBGo=) 2: DE43ED5E814111F09CB97D40C4F9AE02.roa (hash: dTfOPNG1kntTr8AnSgtfUPWTvUN95iBYag0K3k/COcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Validity Not Before: Dec 19 06:24:10 2025 GMT Not After : Dec 26 06:24:10 2025 GMT Subject: CN=6944ef8a-24e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:33:76:1a:98:60:ea:fe:d2:e4:48:74:b8:66: 18:ec:fb:a1:7c:86:84:38:32:11:57:0d:6d:9b:13: 26:71:f4:5a:83:98:c1:1b:82:c4:18:91:03:77:69: c6:56:c2:f5:5d:7e:33:04:85:6b:c7:6e:c6:83:59: 82:ad:86:ad:07:10:25:cd:83:a9:80:cf:ec:34:74: be:70:35:80:17:93:ad:97:dd:c9:4c:8c:84:26:00: c4:97:05:25:24:70:53:fb:f1:3f:4e:39:8c:0a:22: ee:d5:cd:49:33:71:16:a5:b5:ed:00:92:14:3a:c7: 8a:8d:11:47:3e:ac:be:23:08:99:de:72:92:7c:58: 6a:9c:8a:83:09:04:bb:97:56:3a:f1:c7:be:b8:b0: 9c:b5:fa:b1:23:b7:93:ff:13:d8:27:37:f0:59:71: d3:7e:da:f0:d6:ca:34:c7:9a:76:14:03:1b:c5:0c: 53:7e:1b:3c:aa:3e:b3:01:bf:fe:47:2d:9b:b4:0d: 63:b3:5f:6c:91:c9:6a:07:a0:0b:3b:0a:62:f7:d5: 6c:5b:33:3d:bc:2f:68:e4:c7:40:fc:43:6e:be:96: 7e:56:70:b2:e5:7a:b2:2e:64:fb:9c:30:02:b5:d0: d5:0c:07:0f:e0:6c:df:4c:c7:59:f1:e3:29:f8:d5: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B1:C7:40:74:84:D8:55:4D:82:0C:06:62:DC:29:CF:9B:71:BE:7F X509v3 Authority Key Identifier: keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f3:27:2f:1a:6d:b3:6f:3e:c6:78:54:50:bf:f9:bc:4e:cf: 54:56:12:07:92:95:4c:d1:6a:af:7b:89:27:98:92:fc:74:90: 90:06:a8:59:7e:d9:da:08:b0:df:39:84:8a:b6:56:a4:3e:74: 82:6b:77:a7:d4:a8:74:4b:72:7a:c3:94:71:a6:8d:ce:17:1b: ce:bd:fb:f0:4c:5a:eb:18:c3:4e:d1:8c:70:02:89:24:42:4a: ea:e9:df:28:30:a8:49:4f:8c:88:f1:7f:f9:bd:9c:f9:73:df: 50:4d:85:c1:f6:54:a7:dc:2a:ef:0d:b5:41:ba:4e:00:90:7a: 31:8f:30:51:6d:3b:90:8b:ed:83:4e:d1:69:8f:c1:2a:3e:d8: 8c:cd:05:d9:ae:b0:b6:21:11:66:c6:1e:cb:8b:32:d0:82:ab: a3:cd:39:d9:87:b0:fa:eb:80:91:08:4d:13:c0:70:6d:da:33: cf:65:1c:10:3c:99:41:34:1c:9c:12:91:ee:76:18:f2:e8:de: 4b:2f:ec:50:ae:86:cc:19:02:9a:39:f6:5b:4a:df:17:a3:f3: 11:b7:43:d4:c0:2d:e1:3d:70:f9:fa:db:3c:5f:6e:6c:64:95: e8:57:e7:6d:7c:ab:fa:56:a1:90:ea:c2:ce:92:29:e6:e4:60: 4b:1f:3d:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUJBRTExMC8GA1UEBRMoQUM2QTA1QzE5REUzNzdGQUZFQURBODg3MEM5MEU0M0RE REU4MkQzMjAeFw0yNTEyMTkwNjI0MTBaFw0yNTEyMjYwNjI0MTBaMBgxFjAUBgNV BAMMDTY5NDRlZjhhLTI0ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMM3YamGDq/tLkSHS4Zhjs+6F8hoQ4MhFXDW2bEyZx9FqDmMEbgsQYkQN3acZW wvVdfjMEhWvHbsaDWYKthq0HECXNg6mAz+w0dL5wNYAXk62X3clMjIQmAMSXBSUk cFP78T9OOYwKIu7VzUkzcRalte0AkhQ6x4qNEUc+rL4jCJnecpJ8WGqcioMJBLuX Vjrxx764sJy1+rEjt5P/E9gnN/BZcdN+2vDWyjTHmnYUAxvFDFN+GzyqPrMBv/5H LZu0DWOzX2yRyWoHoAs7CmL31WxbMz28L2jkx0D8Q26+ln5WcLLlerIuZPucMAK1 0NUMBw/gbN9Mx1nx4yn41SwjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmLHHQHSE 2FVNggwGYtwpz5txvn8wHwYDVR0jBBgwFoAUrGoFwZ3jd/r+raiHDJDkPd3oLTIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQkFFLzcyMDM3OUEyODE0 MTExRjA4OEQwNTEzRkM0RjlBRTAyL3JHb0Z3WjNqZF9yLXJhaUhESkRrUGQzb0xU SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckdvRndaM2pkX3ItcmFpSERKRGtQZDNvTFRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx QkFFLzcyMDM3OUEyODE0MTExRjA4OEQwNTEzRkM0RjlBRTAyL3JHb0Z3WjNqZF9y LXJhaUhESkRrUGQzb0xUSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGPzJy8abbNvPsZ4VFC/+bxOz1RWEgeSlUzRaq97iSeYkvx0kJAGqFl+ 2doIsN85hIq2VqQ+dIJrd6fUqHRLcnrDlHGmjc4XG869+/BMWusYw07RjHACiSRC Surp3ygwqElPjIjxf/m9nPlz31BNhcH2VKfcKu8NtUG6TgCQejGPMFFtO5CL7YNO 0WmPwSo+2IzNBdmusLYhEWbGHsuLMtCCq6PNOdmHsPrrgJEITRPAcG3aM89lHBA8 mUE0HJwSke52GPLo3ksv7FCuhswZApo59ltK3xej8xG3Q9TALeE9cPn62zxfbmxk lehX5218q/pWoZDqws6SKebkYEsfPcQ= -----END CERTIFICATE-----Generated at Sun Dec 21 04:41:34 2025 by rpki-client