This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json)
Hash identifier: pRvXtcTszodu27XwUqZEIs3VEtmo6lTtgZyU3uoFW48=
Subject key identifier: 5C:6C:30:23:E2:8D:7B:BF:23:E5:27:F1:1D:28:67:C2:26:14:49:24
Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Certificate serial: 05FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
Manifest number: 05FA
Signing time: Mon 22 Dec 2025 22:04:14 +0000
Manifest this update: Mon 22 Dec 2025 22:04:14 +0000
Manifest next update: Mon 29 Dec 2025 22:04:14 +0000
Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: kd9r+7W+4q3/OPQ4YouDxECham8izQ2F6oUQbSXNyIU=)
2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: bTxB6rDqe5W838nV/qkoLeLUMklQqO8XCDilOupFQgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Validity
Not Before: Dec 22 22:04:14 2025 GMT
Not After : Dec 29 22:04:14 2025 GMT
Subject: CN=6949c05e-fdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:6c:f8:eb:cc:f0:78:5b:83:a5:fd:48:34:
35:b5:0b:49:f1:8f:e4:37:cb:73:45:fe:b8:0c:bf:
d5:0f:7e:45:26:4d:c5:ca:fd:6f:a7:3f:26:6c:13:
7f:06:66:f1:f3:a4:1f:58:83:fa:67:69:8a:c8:7a:
13:7b:43:b3:45:c4:bc:94:d9:a9:a6:50:f5:f9:a9:
f7:54:e9:9b:ec:b5:46:c1:ba:41:4c:15:04:f9:2d:
0b:ae:31:36:93:3b:93:97:8d:dc:f6:09:96:38:0f:
1c:a9:72:5a:58:7f:41:84:3b:8c:bd:16:df:eb:f2:
d6:50:e2:06:95:1b:97:b2:f0:ab:56:77:7c:39:4f:
a4:7f:43:c3:9c:18:a8:21:ea:70:69:c3:bc:93:a9:
6d:a6:5e:48:a2:56:3b:4b:5f:db:c5:72:f9:50:c1:
0e:67:4c:a8:76:6a:3e:a9:4f:e5:86:3d:f5:3d:47:
c6:24:76:c7:58:2d:d1:0f:f8:33:bb:b5:52:d8:69:
e1:ed:82:fa:cd:9b:4d:90:a2:bc:8d:9f:66:cf:a4:
ab:ea:da:68:8c:cf:69:df:a4:02:7c:9e:ef:8f:28:
c6:bb:92:70:76:29:ad:db:47:3c:38:47:1b:ff:84:
a4:f6:c1:0c:e2:cd:16:8b:b3:23:4f:76:fb:5d:83:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:30:23:E2:8D:7B:BF:23:E5:27:F1:1D:28:67:C2:26:14:49:24
X509v3 Authority Key Identifier:
keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:4b:82:18:22:1f:eb:17:ab:3e:2c:ee:dd:bb:30:f3:14:af:
9a:de:dc:0e:4e:76:ed:fc:fa:98:2b:3d:ca:7f:6f:fd:28:07:
06:06:18:14:31:6f:a3:50:b2:8f:7d:44:d3:fc:77:8f:fb:a6:
82:9a:3f:26:b0:2b:f9:d6:f9:73:55:26:c2:41:92:01:9c:c2:
21:d9:9b:fe:9b:2b:b4:ca:74:dc:9d:4c:e8:11:0d:f9:b7:ce:
30:08:27:5b:5f:3f:72:33:3c:ed:7e:78:0a:26:d5:2b:68:a2:
50:95:0c:3b:9e:ac:07:57:11:4c:2f:09:27:31:26:33:e3:ae:
b1:e0:fd:7d:5d:0a:ef:83:47:e9:ec:29:23:ea:9e:97:e9:24:
5f:22:e7:4f:a5:32:da:ef:d2:7b:d5:95:60:d7:56:f5:e5:04:
88:a6:84:02:6c:b4:39:2c:ec:20:11:8f:21:ca:d1:25:a0:59:
48:be:e6:fd:d8:09:7d:18:a9:9e:f3:61:28:66:05:4e:62:53:
4a:91:b0:76:3a:8c:7f:ae:57:bc:05:b4:fb:2a:02:65:cc:ce:
5b:20:00:d6:3b:60:04:84:45:1c:66:2f:53:b3:17:33:1d:bd:
14:29:31:4b:f1:68:72:6e:50:84:14:87:c9:d3:76:75:5c:66:
85:de:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:23 2025 by rpki-client