This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft File: rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json) Hash identifier: vmr3yvQ0GlzLm4GbshSrHbyftsLSOR7H/ELecaP5/bY= Subject key identifier: 8E:B9:80:FD:2B:C6:B1:10:58:46:7B:88:B2:D0:65:DD:DE:00:5D:3F Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 Certificate issuer: /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft Manifest number: 3E Signing time: Sun 21 Dec 2025 06:27:34 +0000 Manifest this update: Sun 21 Dec 2025 06:27:33 +0000 Manifest next update: Sun 28 Dec 2025 06:27:33 +0000 Files and hashes: 1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: aPknm+yZHS+N70s500AejU3judlG6wZ+IM2ZlLJU2WA=) 2: DE43ED5E814111F09CB97D40C4F9AE02.roa (hash: dTfOPNG1kntTr8AnSgtfUPWTvUN95iBYag0K3k/COcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Validity Not Before: Dec 21 06:27:33 2025 GMT Not After : Dec 28 06:27:33 2025 GMT Subject: CN=69479356-f61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:3d:80:a0:91:c2:53:8e:b9:fa:74:6c:ec: 98:61:9e:06:4b:6f:0e:55:06:24:13:be:19:30:69: 94:00:56:4f:66:22:c6:af:ee:72:79:ef:e9:b7:53: cb:bd:1f:a4:72:a1:7e:90:ea:0e:0f:4b:4c:19:0c: df:65:ea:76:47:77:14:64:88:08:53:63:7a:fb:c4: b9:d8:90:79:81:ec:3e:82:3d:bd:f2:0e:c0:78:b7: 93:d2:ed:f1:be:20:dd:e8:d2:dc:6f:9c:35:ca:a2: 40:0a:a2:77:be:2f:09:6b:09:00:8b:1c:2f:13:cb: ba:2f:ff:3a:b1:fa:bf:4d:01:85:bb:e2:1d:08:6b: ff:db:c6:70:82:85:b3:ea:98:7b:9a:bd:9e:76:d4: bc:35:d3:1d:c5:0a:d0:4d:f5:5f:21:48:bf:99:0f: f0:ce:0b:29:03:dd:3d:71:b1:60:d2:25:8a:b4:73: d2:90:c4:bf:8d:1f:ca:f0:c7:ef:76:0d:df:0e:dd: 78:9a:b7:29:1c:77:09:96:49:8c:09:9d:1f:f4:c3: 37:27:a1:92:b6:29:4f:f5:f2:63:83:ee:0f:94:91: 5f:f3:72:f3:6c:c1:54:41:b3:90:f9:77:e5:15:cd: 00:2a:f4:f4:46:17:30:2b:e2:78:93:0f:75:c0:5f: c0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B9:80:FD:2B:C6:B1:10:58:46:7B:88:B2:D0:65:DD:DE:00:5D:3F X509v3 Authority Key Identifier: keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:c3:1a:4c:c3:db:8a:58:8b:d7:55:3e:3d:d4:1b:54:8f:eb: 7a:b0:de:a6:fa:86:f7:8d:98:b5:4a:fc:a4:3c:82:31:27:de: 18:36:ce:a5:15:e0:ae:f1:54:0c:f6:b1:b1:54:15:15:10:c5: c9:21:81:05:ce:93:f8:d7:5d:0d:b3:bf:60:80:64:98:9e:cf: 80:bf:4a:f8:2e:56:de:e4:1e:2f:ee:b0:29:91:7a:9c:98:b6: 8b:76:6f:70:7c:17:01:f3:55:28:cf:93:ce:fa:80:09:a6:58: a9:95:95:14:d8:ad:cc:4e:35:9d:2f:6e:d9:f3:25:50:d8:47: 59:76:c1:08:36:b9:f7:4f:ba:b6:37:b8:c9:0d:fa:9b:28:27: 53:15:9d:8c:f4:96:23:90:fe:1a:b9:b8:e8:c5:72:43:79:49: 34:a7:78:fe:79:86:5a:26:21:bf:bf:c0:20:c9:9a:f7:76:bd: 23:b1:b2:53:11:4b:10:43:be:55:17:99:bf:23:c5:6a:ca:c8: ae:db:2b:97:9a:b9:6f:da:0f:3d:d6:64:73:63:16:54:1e:71: b5:37:73:a8:e2:13:b8:b6:1e:0e:5c:d2:42:a8:1b:11:6e:dc: 24:93:36:74:af:0d:ee:4b:75:d6:9a:05:e9:f8:5c:59:45:20: 0a:8b:ce:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUJBRTExMC8GA1UEBRMoQUM2QTA1QzE5REUzNzdGQUZFQURBODg3MEM5MEU0M0RE REU4MkQzMjAeFw0yNTEyMjEwNjI3MzNaFw0yNTEyMjgwNjI3MzNaMBgxFjAUBgNV BAMMDTY5NDc5MzU2LWY2MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4UD2AoJHCU465+nRs7JhhngZLbw5VBiQTvhkwaZQAVk9mIsav7nJ57+m3U8u9 H6RyoX6Q6g4PS0wZDN9l6nZHdxRkiAhTY3r7xLnYkHmB7D6CPb3yDsB4t5PS7fG+ IN3o0txvnDXKokAKone+LwlrCQCLHC8Ty7ov/zqx+r9NAYW74h0Ia//bxnCChbPq mHuavZ521Lw10x3FCtBN9V8hSL+ZD/DOCykD3T1xsWDSJYq0c9KQxL+NH8rwx+92 Dd8O3XiatykcdwmWSYwJnR/0wzcnoZK2KU/18mOD7g+UkV/zcvNswVRBs5D5d+UV zQAq9PRGFzAr4niTD3XAX8DjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjrmA/SvG sRBYRnuIstBl3d4AXT8wHwYDVR0jBBgwFoAUrGoFwZ3jd/r+raiHDJDkPd3oLTIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQkFFLzcyMDM3OUEyODE0 MTExRjA4OEQwNTEzRkM0RjlBRTAyL3JHb0Z3WjNqZF9yLXJhaUhESkRrUGQzb0xU SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckdvRndaM2pkX3ItcmFpSERKRGtQZDNvTFRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx QkFFLzcyMDM3OUEyODE0MTExRjA4OEQwNTEzRkM0RjlBRTAyL3JHb0Z3WjNqZF9y LXJhaUhESkRrUGQzb0xUSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAInDGkzD24pYi9dVPj3UG1SP63qw3qb6hveNmLVK/KQ8gjEn3hg2zqUV 4K7xVAz2sbFUFRUQxckhgQXOk/jXXQ2zv2CAZJiez4C/SvguVt7kHi/usCmRepyY tot2b3B8FwHzVSjPk876gAmmWKmVlRTYrcxONZ0vbtnzJVDYR1l2wQg2ufdPurY3 uMkN+psoJ1MVnYz0liOQ/hq5uOjFckN5STSneP55hlomIb+/wCDJmvd2vSOxslMR SxBDvlUXmb8jxWrKyK7bK5eauW/aDz3WZHNjFlQecbU3c6jiE7i2Hg5c0kKoGxFu 3CSTNnSvDe5LddaaBen4XFlFIAqLzoA= -----END CERTIFICATE-----Generated at Sun Dec 21 10:02:23 2025 by rpki-client