This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
File: rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json)
Hash identifier: tEEJakinG2+u5z7ZcZBfdbiH9zV/SrglTf4KScSIIUM=
Subject key identifier: 11:4C:29:18:6E:6D:8B:46:6A:80:EB:2B:01:15:59:A6:AB:17:ED:53
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Certificate issuer: /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial: 0538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
Manifest number: 051F
Signing time: Sun 14 Dec 2025 22:53:44 +0000
Manifest this update: Sun 14 Dec 2025 22:53:43 +0000
Manifest next update: Sun 21 Dec 2025 22:53:43 +0000
Files and hashes: 1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: ZP2M8wF7Dz02LpiA9dnseglVzkcsNvf8OMeyWlfxpDA=)
2: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: 0rs0STSm9B6q1ImRupSPhNQw8yrXD67mSzQRxhTWeyM=)
3: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: H8xjH5y20P1rOG3WSUPBDAJqjIZUNQTVo2FaxmnxQzw=)
4: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: XSnUK976UXwYHciWW5wccgOD7fOjMode6M1FzFFnvQ4=)
5: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: hGiilfSQIcgKH4NIdZJeXzdl+FpDj03CR4zzG/JcbXg=)
6: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: wwz7C2WhiFB/fPJcMxt1QlkPUOWQEV9jMcZeemu9/Kg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 22:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Validity
Not Before: Dec 14 22:53:43 2025 GMT
Not After : Dec 21 22:53:43 2025 GMT
Subject: CN=693f3ff8-760c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:79:69:15:35:fb:30:79:aa:a6:fa:ab:29:
44:6a:72:d2:79:6f:2d:63:6b:30:25:cd:0a:a3:19:
0f:ba:92:27:7c:85:5b:ec:fb:ba:0c:3a:b1:4d:fd:
df:c7:2d:7c:b4:eb:ae:c9:46:cc:6c:e4:0e:ec:ed:
e6:74:82:c8:40:2e:33:60:5a:9c:03:df:e7:40:a2:
3f:ae:1d:f8:01:7e:b2:06:fa:ea:89:68:0a:a8:06:
8e:11:47:07:23:26:87:eb:63:98:10:49:bb:6f:d9:
55:be:a3:b4:01:ba:2d:2f:81:85:ca:50:e9:ec:e1:
85:8f:fc:a1:90:fd:a0:7f:07:6a:72:c5:7e:0d:ce:
df:fd:ed:a1:7b:b6:87:a4:70:9b:4c:d3:d7:6c:11:
55:78:f1:20:14:7a:5e:70:72:73:f7:56:63:8b:95:
03:7e:3f:d9:53:ba:52:b5:df:59:dd:26:45:8d:08:
24:83:66:e7:ea:8e:01:47:e7:77:06:7e:74:95:93:
0a:ce:7a:a8:7f:a3:92:03:29:66:30:41:92:f0:ef:
f0:2c:9a:5c:e3:e2:8a:d4:a4:77:6c:a3:5b:2f:35:
c1:47:e9:21:86:85:2c:95:c9:60:fb:5d:48:e4:c5:
82:04:92:ca:6c:43:dd:c5:5c:80:b5:ed:0f:a6:dd:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4C:29:18:6E:6D:8B:46:6A:80:EB:2B:01:15:59:A6:AB:17:ED:53
X509v3 Authority Key Identifier:
keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:a9:ba:52:90:82:72:8e:f2:e2:86:ed:3b:49:75:62:4a:09:
1e:78:ad:12:fe:ce:a1:1a:04:b6:28:9d:96:3c:89:fa:aa:3e:
e1:41:9f:49:20:0c:16:94:59:58:7d:b1:41:18:15:f0:d9:f4:
fb:7e:df:22:26:c9:00:36:70:4c:69:f4:0e:b3:a5:4d:0d:0b:
16:e3:b6:61:67:e5:54:24:94:52:4b:5b:0b:68:ae:0e:ac:3b:
51:3f:bb:72:6f:24:3b:ea:9c:8d:71:a7:41:4a:a8:1a:20:38:
18:03:02:47:06:a6:83:9b:72:05:b6:d5:f7:ab:1c:30:74:f9:
31:8b:5b:45:f3:87:77:3a:79:c6:96:dd:4a:72:3a:f6:e0:92:
39:98:15:f1:c0:37:24:0c:36:ac:42:02:c3:7d:9b:09:b5:1e:
c1:4c:f4:5d:c4:c5:79:6a:c4:fc:98:6d:79:1a:54:eb:65:3e:
4e:7b:79:c3:cc:b6:37:64:c5:bd:c9:46:0a:be:34:51:b3:d2:
23:87:3b:47:9f:72:ad:9a:b7:c5:00:81:67:27:5c:c2:d9:78:
a1:8a:00:39:99:49:e0:32:8e:ad:e4:2a:fe:e8:4c:47:96:6a:
97:19:78:2b:50:2d:58:9c:59:ff:ba:37:86:c4:38:9e:4f:fa:
6c:de:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:43:16 2025 by rpki-client