This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft File: GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json) Hash identifier: M9LIZUf3dxmK40zNzfLKkKhmkrvgqmzPq8dKoeS8i5I= Subject key identifier: D0:D8:D2:81:0D:F7:9A:33:EB:5A:8E:5D:D9:C3:2C:5C:6D:4E:2D:00 Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Certificate serial: 1126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft Manifest number: 10D2 Signing time: Sat 06 Dec 2025 16:52:15 +0000 Manifest this update: Sat 06 Dec 2025 16:52:15 +0000 Manifest next update: Sat 13 Dec 2025 16:52:15 +0000 Files and hashes: 1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: fclcPogIxoWvM94XLrSKb3aquxwerJYNuZKDJty/nlw=) 2: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (hash: cZ6PZrYDDvwfg8CUMPN9ghZZSt3c2YnNiECXmtMGmPE=) 3: 446826648F3511EE8864C25EC4F9AE02.roa (hash: 8tTNRgYzxDcPfSgi9IReJJ4NFmUmoxXMh8TQHcuSNic=) 4: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: T690o+zlmCjPk931+I/aCbChbJkL8SqS+o/0AQYcZ0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4390 (0x1126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Validity Not Before: Dec 6 16:52:15 2025 GMT Not After : Dec 13 16:52:15 2025 GMT Subject: CN=69345f3f-edba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b1:63:ff:70:cd:cd:fe:a6:d7:3a:c7:ae:c8: 43:3b:36:ba:e2:ef:2e:54:56:69:61:f8:f1:99:cc: 3c:37:e0:c5:2c:53:cb:d2:00:85:af:6a:ad:33:1e: 4c:4d:77:07:bf:db:eb:df:9c:7c:a5:4c:23:4f:9f: 58:29:81:96:7c:5d:4b:7e:95:c5:22:5f:0c:f6:6c: 2f:d3:86:7d:e0:c6:b3:83:a3:89:01:46:a2:82:52: 5f:2c:c4:1c:0f:3e:fa:cf:53:63:ed:02:f6:8d:bd: 2c:48:67:2b:7f:0e:1d:c7:ce:6e:c3:65:7f:d5:1f: 2d:d6:cf:a1:6f:4c:fa:47:9c:6e:d2:00:70:b0:d2: 2d:0e:cf:9e:0d:e5:83:14:2f:47:a9:f2:c1:31:75: 80:de:53:80:23:48:ad:8d:3c:6b:e9:e8:5c:f5:f9: 54:f4:16:47:ff:f9:91:24:15:8b:ed:21:16:3d:e1: b0:01:a0:a7:d6:69:a3:4e:a3:04:98:c6:22:f7:ab: 33:f0:51:22:40:71:18:f3:16:23:b4:20:f1:e0:df: 10:e2:8b:74:bf:0f:9d:4c:08:42:de:30:a9:3e:1c: 71:43:b6:38:83:e3:9d:c0:a8:01:ba:20:a3:89:5b: 7e:44:80:bb:89:3a:7e:a0:7c:70:ff:db:a6:1e:36: 46:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D8:D2:81:0D:F7:9A:33:EB:5A:8E:5D:D9:C3:2C:5C:6D:4E:2D:00 X509v3 Authority Key Identifier: keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:04:be:66:28:16:56:fa:e7:99:26:5e:ad:d1:b8:20:3a:77: 7f:9a:22:c5:29:f1:b4:74:e8:f5:92:2e:ed:8e:e2:00:6c:9c: 67:fb:02:1a:82:e1:36:db:46:db:16:92:26:55:7b:1a:51:2b: 8e:3c:9c:61:37:46:78:ea:a8:18:0b:c9:1d:1b:47:00:96:e7: 76:ab:7d:45:f9:50:bb:22:f1:a0:a8:f7:88:ff:34:f1:b0:51: 67:99:68:bf:84:5f:ea:44:92:9d:86:f6:b2:c1:75:08:c4:01: f3:77:dc:ea:7a:59:02:1b:fb:70:c6:da:fd:6e:b5:6f:ba:cc: ab:71:d5:8c:3a:01:b3:d7:1e:f1:ed:ae:63:ea:93:8d:6f:be: 96:8a:84:36:55:be:7f:ce:a3:13:e9:0f:b1:28:b0:9b:cf:ef: d0:95:5d:03:f5:f2:25:01:4e:b3:0a:2d:70:c7:43:7c:cf:f9: e5:b2:d0:92:30:0f:29:29:fe:ce:4a:6b:45:fe:ba:81:39:e4: 45:54:b6:ce:a4:8c:b7:4f:54:c6:1d:f2:e4:b3:b5:f5:9b:5e: 2f:07:ba:37:19:4a:ac:f2:24:b4:4a:1c:d5:54:91:90:8e:c5: 2d:07:28:e3:2f:51:3a:0f:36:68:b1:f0:f8:ba:ca:c5:88:4f: c5:8c:c4:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0RDExMTAvBgNVBAUTKDE4RUY0MzI3OEQ0NjMzMUU5QUFGMEZENzcyQTczMjgw RDEzQUFBNTIwHhcNMjUxMjA2MTY1MjE1WhcNMjUxMjEzMTY1MjE1WjAYMRYwFAYD VQQDEw02OTM0NWYzZi1lZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bFj/3DNzf6m1zrHrshDOza64u8uVFZpYfjxmcw8N+DFLFPL0gCFr2qtMx5M TXcHv9vr35x8pUwjT59YKYGWfF1LfpXFIl8M9mwv04Z94Mazg6OJAUaiglJfLMQc Dz76z1Nj7QL2jb0sSGcrfw4dx85uw2V/1R8t1s+hb0z6R5xu0gBwsNItDs+eDeWD FC9HqfLBMXWA3lOAI0itjTxr6ehc9flU9BZH//mRJBWL7SEWPeGwAaCn1mmjTqME mMYi96sz8FEiQHEY8xYjtCDx4N8Q4ot0vw+dTAhC3jCpPhxxQ7Y4g+OdwKgBuiCj iVt+RIC7iTp+oHxw/9umHjZGGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDY0oEN 95oz61qOXdnDLFxtTi0AMB8GA1UdIwQYMBaAFBjvQyeNRjMemq8P13KnMoDROqpS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDREMS9FRjA5NThFRTQ0 NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014NmFyd19YY3FjeWdORTZx bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPOURKNDFHTXg2YXJ3X1hjcWN5Z05FNnFsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDREMS9FRjA5NThFRTQ0NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014 NmFyd19YY3FjeWdORTZxbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNBL5mKBZW+ueZJl6t0bggOnd/miLFKfG0dOj1ki7tjuIAbJxn+wIa guE220bbFpImVXsaUSuOPJxhN0Z46qgYC8kdG0cAlud2q31F+VC7IvGgqPeI/zTx sFFnmWi/hF/qRJKdhvaywXUIxAHzd9zqelkCG/twxtr9brVvusyrcdWMOgGz1x7x 7a5j6pONb76WioQ2Vb5/zqMT6Q+xKLCbz+/QlV0D9fIlAU6zCi1wx0N8z/nlstCS MA8pKf7OSmtF/rqBOeRFVLbOpIy3T1TGHfLks7X1m14vB7o3GUqs8iS0ShzVVJGQ jsUtByjjL1E6DzZosfD4usrFiE/FjMQP -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:10 2025 by rpki-client