This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json) Hash identifier: 1ryAhufbiLaiq9L7bdSaL6DHYK1G6kkZL1ZMYYeSOW0= Subject key identifier: 8B:97:10:C9:CE:AD:5B:B4:CC:22:25:9F:1D:85:2D:56:26:1D:37:F3 Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 0444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft Manifest number: 043D Signing time: Thu 04 Dec 2025 22:46:11 +0000 Manifest this update: Thu 04 Dec 2025 22:46:11 +0000 Manifest next update: Thu 11 Dec 2025 22:46:11 +0000 Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: /TINLunAejdfOf2UNw+WxRq4zSWE2F+dSzuYMqf0JP4=) 2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: Yv9ClrwAFACGSqITuh9ooZXNuE+9WgMW5OezB268l+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Validity Not Before: Dec 4 22:46:11 2025 GMT Not After : Dec 11 22:46:11 2025 GMT Subject: CN=69320f33-2ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:16:43:1b:74:12:6a:91:d7:33:d9:ad:1d: 69:69:5a:f3:16:53:fb:a2:3f:48:44:8f:b1:57:c2: a6:98:8a:be:66:5e:c0:f8:61:99:51:8a:5b:67:51: 7b:af:cd:95:a3:99:c7:d6:69:88:b6:3a:b9:fa:38: fe:ba:42:6d:23:5f:0f:c2:eb:3d:85:be:dd:ba:ff: ce:19:14:a7:b5:f7:e8:4d:6d:85:90:ef:8a:e5:ca: 9b:80:df:cb:bf:0c:bf:71:5d:52:ae:8a:23:06:fd: b0:71:cd:35:ac:bd:a5:d5:a2:4a:fb:7e:8b:3d:af: ab:fe:a4:d6:01:e5:20:25:88:2f:50:77:23:99:6c: e8:cc:8e:aa:1b:82:0f:3f:fb:5e:e4:ec:85:d5:94: 5c:98:5f:c9:64:4f:34:24:76:45:cb:0a:c7:db:f6: 56:dd:23:5f:d1:26:94:0f:a4:26:17:1f:6f:01:19: fc:c1:86:06:fc:13:d8:77:6b:4c:52:9b:f8:01:4f: a4:c4:53:1d:12:0c:d1:e8:60:bf:8d:b1:d6:01:99: a0:94:4e:f9:96:af:8b:3c:dc:53:9c:28:59:38:c5: 0c:f3:6b:4c:47:f8:12:1d:80:98:fe:fd:1a:b6:51: 72:45:13:0a:fd:55:d9:3d:66:58:a2:c9:bf:32:6f: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:97:10:C9:CE:AD:5B:B4:CC:22:25:9F:1D:85:2D:56:26:1D:37:F3 X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b5:7f:fa:57:20:e3:93:20:8a:f0:06:ba:94:e2:77:58:e6: 37:48:e2:45:4b:82:d6:b9:74:ab:f4:20:00:7d:83:34:c2:78: d6:27:c2:55:6d:82:56:ec:a1:cd:33:10:1c:35:05:5c:6d:d1: 63:5a:2d:19:6f:d9:b0:b7:4d:7e:4f:97:e7:f2:12:32:02:a9: 5d:31:43:6d:1c:db:7f:35:f3:9e:fe:a4:d9:2a:3d:9b:38:1b: 0a:fb:75:ea:23:17:a3:40:01:02:86:a6:0e:f9:19:ce:32:75: f0:7b:fd:20:bd:95:8c:1b:e8:6d:0c:1e:25:2a:83:cf:16:47: d4:e1:84:c4:8a:5b:0b:16:55:bc:26:e3:b2:e2:08:2f:8d:40: e2:a7:bd:22:e1:55:bb:3e:76:82:fa:d2:a1:85:0c:74:c5:d3: cf:3c:f3:a3:87:79:f7:d5:a5:46:92:96:06:7b:cf:6b:f7:84: 10:53:69:d4:2c:0f:c6:7a:cc:26:80:a8:4b:5b:ca:81:13:f8: 11:62:08:1e:36:14:20:a7:c6:c9:c3:95:3a:da:af:3a:64:0e: d0:2e:90:4d:4c:fa:51:70:66:c8:67:b1:91:ec:dd:41:88:db: cc:95:e1:77:eb:58:33:47:e7:be:58:1f:ee:37:75:27:0d:f3: c4:9d:cd:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjUxMjA0MjI0NjExWhcNMjUxMjExMjI0NjExWjAYMRYwFAYD VQQDEw02OTMyMGYzMy0yY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwUWQxt0EmqR1zPZrR1paVrzFlP7oj9IRI+xV8KmmIq+Zl7A+GGZUYpbZ1F7 r82Vo5nH1mmItjq5+jj+ukJtI18Pwus9hb7duv/OGRSntffoTW2FkO+K5cqbgN/L vwy/cV1SroojBv2wcc01rL2l1aJK+36LPa+r/qTWAeUgJYgvUHcjmWzozI6qG4IP P/te5OyF1ZRcmF/JZE80JHZFywrH2/ZW3SNf0SaUD6QmFx9vARn8wYYG/BPYd2tM Upv4AU+kxFMdEgzR6GC/jbHWAZmglE75lq+LPNxTnChZOMUM82tMR/gSHYCY/v0a tlFyRRMK/VXZPWZYosm/Mm/0gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuXEMnO rVu0zCIlnx2FLVYmHTfzMB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZGQi85MkZCNzFBMDgzRjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZj Q2ZxQ0xoRk45RFh3c09obG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQtX/6VyDjkyCK8Aa6lOJ3WOY3SOJFS4LWuXSr9CAAfYM0wnjWJ8JV bYJW7KHNMxAcNQVcbdFjWi0Zb9mwt01+T5fn8hIyAqldMUNtHNt/NfOe/qTZKj2b OBsK+3XqIxejQAEChqYO+RnOMnXwe/0gvZWMG+htDB4lKoPPFkfU4YTEilsLFlW8 JuOy4ggvjUDip70i4VW7PnaC+tKhhQx0xdPPPPOjh3n31aVGkpYGe89r94QQU2nU LA/GeswmgKhLW8qBE/gRYggeNhQgp8bJw5U62q86ZA7QLpBNTPpRcGbIZ7GR7N1B iNvMleF361gzR+e+WB/uN3UnDfPEnc1n -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:32 2025 by rpki-client