This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft File: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json) Hash identifier: 1PiO4TEqUVjCY9i/wGkZYbFUu2ED5RcDblTqtiTUQZw= Subject key identifier: 53:51:80:48:1C:8E:0A:A3:61:C1:E2:CF:93:49:36:96:CB:68:27:F3 Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B Certificate issuer: /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft Manifest number: 0397 Signing time: Mon 22 Dec 2025 23:46:45 +0000 Manifest this update: Mon 22 Dec 2025 23:46:44 +0000 Manifest next update: Mon 29 Dec 2025 23:46:44 +0000 Files and hashes: 1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: y0Y+mg9mQ+f5ftyzDwVzdVmRFeRXuSIosIuf9iwaJIY=) 2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: VrhPXWtsHfk2lJWy8i4sbHEkjus4/qGWqNNqlObOXf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D32, serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B Validity Not Before: Dec 22 23:46:44 2025 GMT Not After : Dec 29 23:46:44 2025 GMT Subject: CN=6949d865-5207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:e0:d5:a2:8f:96:86:a6:8e:f4:92:48:63: 11:b0:33:69:6e:61:2b:2f:5e:9c:59:f5:12:b7:4b: 7a:03:5c:6c:e1:66:53:ee:f2:0a:88:eb:8e:a9:76: 46:cd:1d:48:fe:39:f3:70:73:8c:3b:87:97:9b:32: 98:1c:5f:f9:34:1d:1e:8e:24:91:21:46:3e:f5:d7: be:1b:cd:0c:c9:36:54:76:b0:10:0f:c0:4a:1d:51: 3a:26:82:2a:53:f6:f6:ce:67:ed:ea:ea:67:23:c3: 6e:0e:10:b7:74:40:67:28:9b:81:1c:6f:83:8e:18: 3b:68:14:3b:31:82:89:7d:54:1c:47:f6:81:b4:9d: 00:b7:7a:c0:cb:d0:82:97:ae:4c:79:d4:d6:2e:d1: ce:f8:95:dd:ab:61:f0:ea:19:d9:6b:b4:c8:ff:c7: 99:de:76:7c:8d:ee:11:0a:e4:aa:a8:e6:00:05:c9: db:6a:02:4c:4e:47:19:a9:1b:88:5e:d9:66:2f:c7: 42:51:c0:63:05:c1:c8:82:6b:d8:04:5c:8a:9b:50: 31:a5:b2:5f:ab:a8:b3:9f:fd:61:b3:f4:27:98:2a: 5f:46:b0:0e:da:72:74:10:85:05:d0:86:e3:18:f3: 6b:b8:47:9d:55:b0:41:9e:a5:e5:1e:33:45:84:5d: 9f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:51:80:48:1C:8E:0A:A3:61:C1:E2:CF:93:49:36:96:CB:68:27:F3 X509v3 Authority Key Identifier: keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:63:01:29:ae:d0:ce:90:fd:bc:c6:19:24:c7:da:f5:dc:f0: b6:29:5a:d4:a2:41:93:b5:16:4a:82:02:da:ef:61:05:4b:95: eb:2a:79:d9:c5:c5:a2:3f:50:02:13:2d:23:61:8d:65:54:08: 23:e4:1a:b7:23:38:a4:6a:c4:45:26:f9:7d:c5:db:86:69:df: 2a:87:1b:6c:43:97:8a:47:e2:d5:d8:b3:10:7c:f5:aa:a8:82: 82:20:4e:c2:6d:f6:09:75:6a:0c:74:65:20:ad:3a:09:de:2b: 78:00:40:1e:dd:38:a8:31:c9:96:15:dd:1a:8d:d0:14:54:f4: 84:ac:0f:23:42:6a:5c:ec:fd:7e:a4:94:e2:ff:7a:45:1b:ff: ab:1f:33:ce:38:87:eb:1d:79:b1:01:0b:f1:be:03:80:8f:0a: f1:30:34:89:a1:03:af:c3:f4:14:4f:e6:ed:d0:17:d2:c6:d3: b7:98:ba:2a:dd:31:51:14:b5:e0:af:f1:10:26:3d:28:66:f9: 35:2a:d6:61:fe:6b:89:38:9f:dd:78:0d:2d:80:1b:d8:21:b0: e3:b6:bb:2d:d3:5e:39:3f:ea:40:3a:15:e4:a5:f3:4b:3a:f3: 60:55:b6:ea:44:86:7b:72:26:a3:ce:53:97:04:91:e5:59:10: f6:33:ae:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEMzIxMTAvBgNVBAUTKDFBODJEMUM2ODg4QUI3MzA5OUY4RTU5QUVCMjg4QzBE NDhCQjI5MkIwHhcNMjUxMjIyMjM0NjQ0WhcNMjUxMjI5MjM0NjQ0WjAYMRYwFAYD VQQDDA02OTQ5ZDg2NS01MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiiDg1aKPloamjvSSSGMRsDNpbmErL16cWfUSt0t6A1xs4WZT7vIKiOuOqXZG zR1I/jnzcHOMO4eXmzKYHF/5NB0ejiSRIUY+9de+G80MyTZUdrAQD8BKHVE6JoIq U/b2zmft6upnI8NuDhC3dEBnKJuBHG+Djhg7aBQ7MYKJfVQcR/aBtJ0At3rAy9CC l65MedTWLtHO+JXdq2Hw6hnZa7TI/8eZ3nZ8je4RCuSqqOYABcnbagJMTkcZqRuI XtlmL8dCUcBjBcHIgmvYBFyKm1AxpbJfq6izn/1hs/QnmCpfRrAO2nJ0EIUF0Ibj GPNruEedVbBBnqXlHjNFhF2fswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNRgEgc jgqjYcHiz5NJNpbLaCfzMB8GA1UdIwQYMBaAFBqC0caIircwmfjlmusojA1Iuykr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQzMi9DNzU2NkU2NEM1 RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6Q1otT1dhNnlpTURVaTdL U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dvTFJ4b2lLdHpDWi1PV2E2eWlNRFVpN0tTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQzMi9DNzU2NkU2NEM1RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6 Q1otT1dhNnlpTURVaTdLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZYwEprtDOkP28xhkkx9r13PC2KVrUokGTtRZKggLa72EFS5XrKnnZ xcWiP1ACEy0jYY1lVAgj5Bq3IzikasRFJvl9xduGad8qhxtsQ5eKR+LV2LMQfPWq qIKCIE7CbfYJdWoMdGUgrToJ3it4AEAe3TioMcmWFd0ajdAUVPSErA8jQmpc7P1+ pJTi/3pFG/+rHzPOOIfrHXmxAQvxvgOAjwrxMDSJoQOvw/QUT+bt0BfSxtO3mLoq 3TFRFLXgr/EQJj0oZvk1KtZh/muJOJ/deA0tgBvYIbDjtrst0145P+pAOhXkpfNL OvNgVbbqRIZ7ciajzlOXBJHlWRD2M671 -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:35 2025 by rpki-client