This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json) Hash identifier: 4aapZVCn7kXsol1mIcsHWzFYM8l6Y1Yi7hqrh6OdCcw= Subject key identifier: 4E:9F:82:0E:80:7C:5E:1D:BC:C6:98:D1:DC:4F:E7:C5:44:97:0F:82 Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 044D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft Manifest number: 0446 Signing time: Mon 22 Dec 2025 23:19:02 +0000 Manifest this update: Mon 22 Dec 2025 23:19:01 +0000 Manifest next update: Mon 29 Dec 2025 23:19:01 +0000 Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: 6F7YCje8lXQ1pO56pDKXdwzWQ50RCVI0Di0vIK660Bs=) 2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: Yv9ClrwAFACGSqITuh9ooZXNuE+9WgMW5OezB268l+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Validity Not Before: Dec 22 23:19:01 2025 GMT Not After : Dec 29 23:19:01 2025 GMT Subject: CN=6949d1e6-eaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:56:5f:2c:00:98:60:a0:84:f6:5c:8e:f8:b9: 37:e9:6a:a6:61:9e:02:be:82:23:63:53:d2:4c:2d: fd:c3:73:70:0b:c0:9f:25:a1:86:1b:fa:ce:12:b7: a2:b5:07:b4:73:d3:5b:11:ed:10:4f:28:1f:73:6e: 1b:a2:99:b4:2e:ba:b4:b8:b3:8c:31:54:86:fb:86: bb:4e:10:d4:da:28:16:97:53:cd:42:e9:73:30:e3: 97:a8:42:e7:65:91:f2:55:08:5d:e1:31:d7:a9:c4: e3:4c:b1:1e:e3:bc:44:57:0a:ac:3e:1b:9a:8f:86: d9:5c:78:08:48:74:a9:87:65:7d:c7:7a:e9:a3:34: 8e:e3:5f:15:bd:f5:a0:16:00:d2:dc:de:df:50:91: fc:9a:dd:78:28:39:89:87:58:58:54:e6:bc:bd:73: d1:64:2e:06:a0:9e:d2:47:0f:02:86:db:f5:5b:b3: f4:56:a5:43:6c:bc:24:45:70:b3:c0:6b:e3:ec:f6: 9f:5b:77:b8:f4:8c:46:60:49:e9:66:d6:28:e7:b8: 49:2c:9f:10:25:9f:bb:db:bc:a1:a3:34:c0:e2:36: 3c:6c:e3:03:9c:47:58:23:b1:42:e5:e0:9e:69:d9: 79:c6:74:fa:65:65:2c:32:f6:c3:50:04:f4:15:f9: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9F:82:0E:80:7C:5E:1D:BC:C6:98:D1:DC:4F:E7:C5:44:97:0F:82 X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4b:64:e2:08:09:7f:63:59:c5:5f:cf:31:6b:1e:f2:9c:d4: 30:3d:09:61:05:1c:1f:6a:f3:94:69:eb:30:1c:91:49:e9:17: a3:b4:75:77:3c:96:2b:c3:e8:0a:16:da:31:e1:60:9c:3c:16: 51:10:a1:d3:e3:78:17:c5:17:bd:11:8f:9f:19:c1:03:1e:23: 76:cd:58:9f:f8:9d:49:c1:84:b2:64:0f:7e:2e:59:a0:c5:b3: 00:b8:a3:f6:bf:01:1b:65:64:0f:c7:f0:4d:f9:f3:54:49:17: ab:de:d3:5b:23:b1:52:47:6f:0d:70:c2:2e:32:54:db:0b:84: 2c:f8:15:56:5c:67:25:07:51:4e:7e:ca:d9:8a:c6:61:e0:67: ce:e7:0e:48:f4:c5:bb:dd:8a:55:ff:ac:c7:3e:63:a0:8b:0b: e2:7e:7c:e5:a7:34:84:ad:97:71:66:79:c1:6c:e4:4c:71:d5: 3a:9e:ec:c7:44:90:82:62:d8:74:64:0b:74:b8:6f:ec:77:9a: 76:86:bc:06:ea:4f:70:36:1a:09:b2:54:18:e1:d3:41:8c:7d: 24:64:91:69:49:aa:38:2d:c1:8f:e7:ab:65:59:b5:80:01:62: 78:76:70:6b:3e:e4:74:21:22:eb:22:c6:0d:f5:89:5a:fd:08: 6b:6d:4f:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjUxMjIyMjMxOTAxWhcNMjUxMjI5MjMxOTAxWjAYMRYwFAYD VQQDDA02OTQ5ZDFlNi1lYWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA71ZfLACYYKCE9lyO+Lk36WqmYZ4CvoIjY1PSTC39w3NwC8CfJaGGG/rOErei tQe0c9NbEe0QTygfc24bopm0Lrq0uLOMMVSG+4a7ThDU2igWl1PNQulzMOOXqELn ZZHyVQhd4THXqcTjTLEe47xEVwqsPhuaj4bZXHgISHSph2V9x3rpozSO418VvfWg FgDS3N7fUJH8mt14KDmJh1hYVOa8vXPRZC4GoJ7SRw8Chtv1W7P0VqVDbLwkRXCz wGvj7PafW3e49IxGYEnpZtYo57hJLJ8QJZ+727yhozTA4jY8bOMDnEdYI7FC5eCe adl5xnT6ZWUsMvbDUAT0FfmWkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6fgg6A fF4dvMaY0dxP58VElw+CMB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZGQi85MkZCNzFBMDgzRjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZj Q2ZxQ0xoRk45RFh3c09obG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+S2TiCAl/Y1nFX88xax7ynNQwPQlhBRwfavOUaeswHJFJ6RejtHV3 PJYrw+gKFtox4WCcPBZREKHT43gXxRe9EY+fGcEDHiN2zVif+J1JwYSyZA9+Llmg xbMAuKP2vwEbZWQPx/BN+fNUSRer3tNbI7FSR28NcMIuMlTbC4Qs+BVWXGclB1FO fsrZisZh4GfO5w5I9MW73YpV/6zHPmOgiwvifnzlpzSErZdxZnnBbORMcdU6nuzH RJCCYth0ZAt0uG/sd5p2hrwG6k9wNhoJslQY4dNBjH0kZJFpSao4LcGP56tlWbWA AWJ4dnBrPuR0ISLrIsYN9Yla/QhrbU+I -----END CERTIFICATE-----Generated at Wed Dec 24 14:13:49 2025 by rpki-client