This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
File: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft (raw, json)
Hash identifier: Z6UAnwCZiF6sWLyM3Zjy0HNAxfo0PvwigAlkvIM9COw=
Subject key identifier: 85:2D:54:4A:26:C6:D1:22:5B:04:92:E0:A6:19:E8:4F:18:87:DA:B5
Authority key identifier: 18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
Certificate issuer: /CN=A9155810/serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
Manifest number: C4
Signing time: Sat 03 Jan 2026 05:00:27 +0000
Manifest this update: Sat 03 Jan 2026 05:00:27 +0000
Manifest next update: Sat 10 Jan 2026 05:00:27 +0000
Files and hashes: 1: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl (hash: G6cxH7Zk58wgvXOo175q8dP2q+7xukleKwtrpW67ZbQ=)
2: 1BC9B310C88E11EF8E789228C4F9AE02.roa (hash: S0OXmYbNImJgx4uOC0U7mhQnmuYrYNwVWM5SzyT3w3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl
rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Jan 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155810, serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
Validity
Not Before: Jan 3 05:00:27 2026 GMT
Not After : Jan 10 05:00:27 2026 GMT
Subject: CN=6958a26b-06b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:59:75:a9:07:2f:d7:15:d5:06:26:62:6b:
0b:f5:d3:57:b4:e1:4c:ba:40:94:07:4b:8a:65:b9:
32:b1:e0:8b:cd:4a:b4:9a:98:ec:df:6c:2c:eb:91:
b1:d1:b0:38:f4:94:a9:52:c3:11:74:69:0c:c1:a4:
70:96:95:04:2b:3e:57:b7:37:05:85:cb:f1:88:5e:
43:16:a4:2d:33:a8:b9:53:36:45:79:d9:7e:a8:e6:
64:58:25:40:6a:f7:03:83:2e:8a:8e:84:65:e3:ea:
c7:e2:4f:a8:24:42:ec:67:5d:fa:ce:ba:65:41:e0:
5a:c4:06:3f:1a:49:30:8e:ad:0f:29:36:8d:7f:c1:
01:2d:e2:9d:6b:3f:8d:55:9a:b1:c2:d0:4f:02:5f:
56:5e:5c:12:00:c0:dd:3a:00:20:d6:f8:67:c5:e4:
4d:12:ab:bc:fa:a0:92:b2:eb:cd:be:9e:dc:5d:12:
1a:0f:9d:8a:9e:f5:d7:d6:ca:42:cb:37:23:7f:f7:
68:43:e8:2a:0a:d3:a0:64:7f:ae:72:94:96:b6:43:
4a:f9:a2:0f:60:98:05:80:61:ed:2b:7d:a4:c2:bc:
c9:23:f0:b5:b3:8d:6f:e6:d9:b8:38:ac:86:06:60:
b2:a2:95:49:a1:90:46:1a:2c:94:71:94:ac:7e:f2:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2D:54:4A:26:C6:D1:22:5B:04:92:E0:A6:19:E8:4F:18:87:DA:B5
X509v3 Authority Key Identifier:
keyid:18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c2:87:c4:c7:4d:db:54:7c:47:94:15:9a:7a:3f:90:e2:6e:
23:73:c4:ee:50:7c:d3:94:c6:0e:8f:fb:dc:c9:cc:19:56:dd:
c9:2c:2b:5b:93:ca:c7:7d:db:a2:5e:a5:cc:6b:ee:1c:09:71:
c5:f2:d0:fa:a7:bb:f2:f7:b8:cc:be:e4:7a:73:03:00:68:41:
ed:1c:8a:2e:15:99:dd:d9:e5:5c:14:6d:7b:d7:05:2e:2e:55:
d1:07:03:db:b8:f0:3c:3b:55:4a:ca:35:af:7c:fd:87:0d:95:
7a:54:ba:f7:e2:b6:df:78:a0:dd:84:1a:be:f9:0b:d1:1a:3f:
13:b7:40:55:9e:44:6e:ab:05:fe:e1:da:a5:bd:99:28:00:ca:
03:93:b0:37:ff:bd:e7:5a:c7:9b:ff:2b:d6:f3:b0:31:7a:52:
32:9a:de:38:e0:dc:3e:5c:75:33:10:4e:0b:16:52:61:3b:c9:
54:55:9e:f8:0b:f5:1b:0f:bc:ae:af:4c:8a:95:fa:87:2b:42:
c2:6e:f6:19:a1:cb:fe:68:ba:2e:e5:b0:ec:6c:4c:bc:15:85:
a5:40:68:00:4e:3b:98:9c:51:91:2d:35:3f:cb:7b:60:dc:64:
20:b5:26:00:32:82:ad:8a:b7:32:27:12:fd:0f:55:46:2f:5a:
c4:e2:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 12:52:47 2026 by rpki-client