This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft File: rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json) Hash identifier: jAXe51hOdK3CDJsozgX8rF1Sf0vgi6s1UHvCP/G+DoM= Subject key identifier: 11:ED:07:12:06:74:9E:DE:71:A3:24:90:A2:63:B3:EA:C6:5B:BF:FA Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft Manifest number: 049B Signing time: Tue 23 Dec 2025 00:02:30 +0000 Manifest this update: Tue 23 Dec 2025 00:02:29 +0000 Manifest next update: Tue 30 Dec 2025 00:02:29 +0000 Files and hashes: 1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: MW2K9tued0NEHHzJNiTGp2h4cmJTuPnwpfNa5YCfCQw=) 2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: 7mnEbW853H0TtxSAAqitSldZ+gKZe1bS6fxCspOc670=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Validity Not Before: Dec 23 00:02:29 2025 GMT Not After : Dec 30 00:02:29 2025 GMT Subject: CN=6949dc15-a156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:84:28:9b:c3:23:b2:13:4e:05:74:1f:90: b4:68:36:86:75:a7:d6:4e:d6:a2:ef:b4:f5:c0:d8: 30:55:23:02:0d:ca:43:03:01:23:16:18:e7:28:c8: 3f:ac:95:23:09:cf:11:8b:fd:82:6d:fc:31:ec:89: 79:51:51:07:49:17:dd:90:47:74:d3:62:58:53:a9: d3:56:45:ff:9f:04:2c:e0:86:44:4f:dd:75:cd:50: 02:2a:87:2c:18:f7:e4:d0:f6:57:41:29:e7:b5:47: ce:da:b3:fa:86:4a:f5:99:76:1d:4e:8d:6d:5e:ea: 8b:55:b1:c9:97:e9:eb:ed:bb:0d:8e:1b:ca:be:3f: b5:fd:79:f5:a1:5d:77:61:55:dd:67:87:23:b2:e4: 29:9b:41:37:10:ac:2c:ad:1c:c7:98:d8:af:dc:e5: 90:98:f7:42:8e:3b:5a:4b:bb:78:9d:82:de:41:7e: 55:45:73:7d:a8:d8:58:2e:8d:64:cc:84:c7:65:88: f3:23:e3:aa:2a:35:56:a9:5e:50:84:17:83:02:86: 42:3a:20:68:44:bb:aa:e9:30:4d:b3:59:d6:50:79: 42:c4:a3:a6:aa:24:af:b1:32:c3:35:52:19:61:23: 7e:d1:17:f7:09:95:ca:eb:ce:d0:bd:01:4f:86:00: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:ED:07:12:06:74:9E:DE:71:A3:24:90:A2:63:B3:EA:C6:5B:BF:FA X509v3 Authority Key Identifier: keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:bf:d3:4c:24:dd:93:11:68:5a:20:d3:25:5c:26:eb:35:5f: f9:ad:0c:bd:87:3f:30:46:2a:44:58:31:ab:54:f6:02:30:14: bf:cc:25:0a:c1:a7:8f:62:d2:94:a4:77:e2:ad:d6:b5:03:9a: 82:d4:60:9a:f2:0d:da:62:80:1b:c7:28:52:e0:b9:3c:a9:48: 40:05:a1:6e:24:2c:36:58:39:f4:10:a2:03:80:67:7e:7a:66: 8f:11:f6:56:1a:3a:91:38:36:07:99:2a:22:00:89:ba:24:10: dc:80:5c:71:2e:e6:ef:34:79:e3:c3:d2:17:67:fc:88:3a:e6: ce:c0:df:c0:ed:21:49:2f:19:39:f1:43:af:4e:b5:fb:73:a3: 91:bb:7c:07:c8:64:ff:57:cf:a6:25:8f:05:62:b0:a2:90:09: 0e:ec:a2:39:52:3e:26:c2:b6:fb:ac:c5:95:cb:89:83:f3:86: 84:72:98:c3:f1:72:4d:47:bb:1f:fe:4b:63:1f:33:ce:24:9a: 4e:7b:98:8e:c3:1f:84:f6:e6:54:68:d1:67:be:d2:65:3e:c4: 48:dd:4f:9c:9c:f1:6b:60:36:fa:84:6a:94:5b:f7:b6:86:09: 18:6a:35:18:ed:95:a9:57:77:e7:3e:9d:6e:d4:9d:a4:b6:b0: 75:96:51:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKEFDNkEyMkYxRTRFMTY1MEFDRkI1Mjg5RjVEQ0I1RDUz OTIwRkNGMzQwHhcNMjUxMjIzMDAwMjI5WhcNMjUxMjMwMDAwMjI5WjAYMRYwFAYD VQQDDA02OTQ5ZGMxNS1hMTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhWEKJvDI7ITTgV0H5C0aDaGdafWTtai77T1wNgwVSMCDcpDAwEjFhjnKMg/ rJUjCc8Ri/2Cbfwx7Il5UVEHSRfdkEd002JYU6nTVkX/nwQs4IZET911zVACKocs GPfk0PZXQSnntUfO2rP6hkr1mXYdTo1tXuqLVbHJl+nr7bsNjhvKvj+1/Xn1oV13 YVXdZ4cjsuQpm0E3EKwsrRzHmNiv3OWQmPdCjjtaS7t4nYLeQX5VRXN9qNhYLo1k zITHZYjzI+OqKjVWqV5QhBeDAoZCOiBoRLuq6TBNs1nWUHlCxKOmqiSvsTLDNVIZ YSN+0Rf3CZXK687QvQFPhgDmLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHtBxIG dJ7ecaMkkKJjs+rGW7/6MB8GA1UdIwQYMBaAFKxqIvHk4WUKz7Uon13LXVOSD880 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpRclB0U2lmWGN0ZFU1SVB6 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHb2k4ZVRoWlFyUHRTaWZYY3RkVTVJUHp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpR clB0U2lmWGN0ZFU1SVB6elEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5v9NMJN2TEWhaINMlXCbrNV/5rQy9hz8wRipEWDGrVPYCMBS/zCUK waePYtKUpHfirda1A5qC1GCa8g3aYoAbxyhS4Lk8qUhABaFuJCw2WDn0EKIDgGd+ emaPEfZWGjqRODYHmSoiAIm6JBDcgFxxLubvNHnjw9IXZ/yIOubOwN/A7SFJLxk5 8UOvTrX7c6ORu3wHyGT/V8+mJY8FYrCikAkO7KI5Uj4mwrb7rMWVy4mD84aEcpjD 8XJNR7sf/ktjHzPOJJpOe5iOwx+E9uZUaNFnvtJlPsRI3U+cnPFrYDb6hGqUW/e2 hgkYajUY7ZWpV3fnPp1u1J2ktrB1llH3 -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:31 2025 by rpki-client