This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft File: 8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json) Hash identifier: zAZ54fp9tRNUozgD+ozeY871fTc7U5p7GYeLCqApZbg= Subject key identifier: A9:58:9F:43:E9:EF:CA:2E:D4:59:27:BA:62:3A:9C:30:A5:A4:EF:B2 Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Certificate serial: 05A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft Manifest number: 059C Signing time: Mon 22 Dec 2025 22:19:16 +0000 Manifest this update: Mon 22 Dec 2025 22:19:15 +0000 Manifest next update: Mon 29 Dec 2025 22:19:15 +0000 Files and hashes: 1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: 6LuOwzBhRNWvymH6tUiklWe0Q1y6F/Xmxbnb+gFUMuM=) 2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: 9gxRC5js1FiufwEU1KdLZ+ZBBpP4QjbLjPfn8nzB2wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1442 (0x5a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Validity Not Before: Dec 22 22:19:15 2025 GMT Not After : Dec 29 22:19:15 2025 GMT Subject: CN=6949c3e4-38d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:6f:be:4d:de:1b:f5:87:e8:db:f1:96:71: da:78:6d:e0:3f:f9:05:77:cd:b2:01:0d:7b:87:47: a4:bf:a9:4e:b1:b3:e2:40:6c:49:f9:46:b8:51:8d: 7a:21:1b:ad:ee:b1:24:5d:9b:78:51:5c:13:e2:a0: f9:01:9c:38:90:83:35:5f:b2:58:20:04:79:66:86: a1:00:bc:b9:fe:71:2f:07:3a:44:2b:94:6e:e9:c0: c0:c4:58:cd:c9:af:87:01:3e:e1:96:52:91:77:9b: f8:b2:dd:92:43:7d:5a:76:bf:6b:d2:01:f8:c9:73: a2:32:2d:4f:6a:16:9e:10:55:8e:89:44:a7:36:0c: 98:d9:e4:8a:36:52:d2:95:96:ee:86:aa:8a:8e:87: 00:dd:99:d8:51:30:49:16:f3:32:db:ec:2d:d6:b6: d7:76:2f:99:b7:3d:1f:7f:28:0b:b9:4c:9a:25:dd: e3:e5:c4:5f:9c:51:14:dc:1e:af:f2:f6:5d:03:50: de:46:3a:52:52:8a:a3:5a:96:5f:a5:35:4a:c2:bb: 2d:67:fe:0e:6b:c7:6e:c1:72:c7:a5:65:46:6d:79: 52:f4:41:ba:86:7e:70:76:d6:e5:38:da:48:b4:2d: 03:60:82:a8:d8:7c:9d:cd:35:03:a2:fd:16:0a:0d: 87:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:58:9F:43:E9:EF:CA:2E:D4:59:27:BA:62:3A:9C:30:A5:A4:EF:B2 X509v3 Authority Key Identifier: keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d8:bb:4c:93:52:88:59:95:9f:19:95:3c:d5:49:19:b7:25: a3:9b:bb:4c:b8:a0:a4:c9:ce:53:6d:4a:27:3d:7b:90:83:ba: fd:85:48:7d:33:b2:04:0c:80:c4:2b:19:c9:42:46:59:af:dd: 9d:cd:48:e7:6d:22:78:20:05:3e:9c:f8:78:f6:7d:40:56:15: 61:d9:f6:6f:1f:62:aa:92:a9:4b:be:69:2c:a4:04:cf:ca:30: 11:dd:24:51:f0:2a:04:6f:92:51:74:1d:64:2a:de:50:ea:d7: 4a:1c:b8:d5:0a:07:06:59:90:7c:63:ec:ea:e4:c3:39:5c:f0: 43:d7:36:d3:25:0e:18:09:10:a5:48:0e:96:e9:17:3a:3e:09: b9:f7:b0:2e:b3:78:5b:39:74:c9:db:c1:b3:c4:83:6c:fc:bb: 2e:58:dc:dc:0b:26:46:5f:90:30:44:9b:42:fc:74:dd:15:ab: fa:f1:0b:4e:51:85:87:98:31:89:b9:30:81:06:9c:e2:bc:f8: da:85:65:e4:14:a5:1e:a7:f2:02:99:3c:9f:d1:a2:2f:db:94: a7:f8:81:74:d6:78:80:66:82:1b:6a:0e:10:c0:bb:22:96:d8: fe:8f:4f:55:0e:59:6e:47:5d:53:8d:b1:2c:6f:6e:1f:aa:95: d3:6e:29:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy OUExRTI0MTQwHhcNMjUxMjIyMjIxOTE1WhcNMjUxMjI5MjIxOTE1WjAYMRYwFAYD VQQDDA02OTQ5YzNlNC0zOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfJvvk3eG/WH6NvxlnHaeG3gP/kFd82yAQ17h0ekv6lOsbPiQGxJ+Ua4UY16 IRut7rEkXZt4UVwT4qD5AZw4kIM1X7JYIAR5ZoahALy5/nEvBzpEK5Ru6cDAxFjN ya+HAT7hllKRd5v4st2SQ31adr9r0gH4yXOiMi1PahaeEFWOiUSnNgyY2eSKNlLS lZbuhqqKjocA3ZnYUTBJFvMy2+wt1rbXdi+Ztz0ffygLuUyaJd3j5cRfnFEU3B6v 8vZdA1DeRjpSUoqjWpZfpTVKwrstZ/4Oa8duwXLHpWVGbXlS9EG6hn5wdtblONpI tC0DYIKo2HydzTUDov0WCg2HnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlYn0Pp 78ou1FknumI6nDClpO+yMB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5 RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlCNy8xNDk4MDQ5OEY5RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hX R3pPMlRlRkxBUjhwb2VKQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ2LtMk1KIWZWfGZU81UkZtyWjm7tMuKCkyc5TbUonPXuQg7r9hUh9 M7IEDIDEKxnJQkZZr92dzUjnbSJ4IAU+nPh49n1AVhVh2fZvH2KqkqlLvmkspATP yjAR3SRR8CoEb5JRdB1kKt5Q6tdKHLjVCgcGWZB8Y+zq5MM5XPBD1zbTJQ4YCRCl SA6W6Rc6Pgm597Aus3hbOXTJ28GzxINs/LsuWNzcCyZGX5AwRJtC/HTdFav68QtO UYWHmDGJuTCBBpzivPjahWXkFKUep/ICmTyf0aIv25Sn+IF01niAZoIbag4QwLsi ltj+j09VDlluR11TjbEsb24fqpXTbinf -----END CERTIFICATE-----Generated at Wed Dec 24 14:06:49 2025 by rpki-client