This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json)
Hash identifier: qO9aEMOnXA962CHGRPL+a4axRyfTjEHpJ1GkMki+0SQ=
Subject key identifier: F8:5D:FF:34:2B:FF:4B:43:E0:BE:B5:9F:18:FE:93:EA:BD:7C:3C:00
Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Certificate serial: 05FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
Manifest number: 05F8
Signing time: Thu 18 Dec 2025 22:16:22 +0000
Manifest this update: Thu 18 Dec 2025 22:16:21 +0000
Manifest next update: Thu 25 Dec 2025 22:16:21 +0000
Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: 62NUhbfubvjLmn8OskvbsbwYhZoahrqrIwJ/OwVELzc=)
2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: bTxB6rDqe5W838nV/qkoLeLUMklQqO8XCDilOupFQgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1533 (0x5fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Validity
Not Before: Dec 18 22:16:21 2025 GMT
Not After : Dec 25 22:16:21 2025 GMT
Subject: CN=69447d36-becd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:e3:e3:f9:54:9f:b6:95:a8:b8:5c:21:93:
3c:87:fe:73:b6:c1:6c:fd:c4:0a:6b:8d:76:fa:31:
b5:a4:4d:65:fa:c3:b9:c6:fd:b1:30:6d:7b:6d:03:
96:28:7f:17:33:a2:1c:82:fc:34:a9:97:f8:0e:21:
92:e8:07:2c:41:23:c2:3a:ad:f7:32:20:d4:51:3d:
9a:a4:bb:b6:65:29:3b:ca:3c:7f:cc:f6:55:74:af:
7c:af:88:72:4b:8a:cd:57:d6:1a:29:74:9d:6a:39:
0a:80:a6:0b:d1:4c:37:eb:5e:c7:5e:20:3e:1e:ad:
e1:ed:d1:84:7a:b9:68:12:6b:42:0d:b6:eb:cd:1a:
65:13:8f:00:0e:20:96:e7:f3:d7:54:f0:f0:05:bb:
05:1f:b4:f7:7b:d1:77:b4:97:8b:a3:84:41:b4:1d:
ec:1d:1b:c4:d2:65:0d:6f:ef:46:9a:30:e2:b5:26:
9b:32:c4:24:c4:5e:24:15:c2:d2:0c:17:85:b3:50:
ed:95:cd:0f:14:d1:b6:f8:df:63:57:7c:d2:94:50:
ff:c4:f3:84:4c:cf:60:cb:77:d1:f3:83:61:29:02:
e5:53:6a:73:f7:b0:9a:2c:f6:23:07:50:de:36:77:
45:69:19:4b:6f:6b:90:aa:9f:97:ad:53:2f:b0:33:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5D:FF:34:2B:FF:4B:43:E0:BE:B5:9F:18:FE:93:EA:BD:7C:3C:00
X509v3 Authority Key Identifier:
keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:08:9b:bc:2b:cc:6b:4e:1d:e7:aa:18:ec:67:ef:4e:ee:a4:
16:66:19:cc:2d:4c:9c:2d:76:65:4f:a5:84:6f:cb:a1:71:b6:
72:47:53:5d:79:11:60:10:3f:7e:74:af:97:4a:88:bb:70:94:
02:34:f0:7b:61:fe:cb:37:6a:22:d6:4c:f7:42:e1:98:b9:46:
f5:c3:7f:0d:90:75:a4:d5:43:b6:b3:81:03:d1:c8:95:40:c0:
a5:bc:48:a7:e4:ed:00:7c:e1:a3:7a:5c:9e:92:b8:32:32:25:
c0:13:39:cd:f9:79:a4:94:b6:7e:3b:7f:2a:d0:03:39:6a:83:
28:ca:3a:7e:bf:20:50:81:3c:aa:0a:98:8e:e1:3d:a7:c1:b9:
99:65:9d:e3:f5:15:e4:31:5e:64:a1:25:9e:54:51:ea:68:6f:
6a:c9:35:3d:e8:14:90:b3:df:af:3a:77:56:6a:4f:0c:6a:5b:
26:92:fe:47:02:2a:ff:c9:17:db:af:c7:24:6a:b6:e6:31:58:
16:93:58:0c:af:a2:87:0b:03:c5:57:34:ea:16:d5:8f:72:86:
aa:64:b8:92:be:bb:0a:7e:85:82:d1:3f:27:89:bb:e5:15:a1:
0a:72:d3:04:af:a2:9a:23:8b:c5:7e:6f:60:75:2f:52:80:f3:
97:04:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:23 2025 by rpki-client