This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
File: goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json)
Hash identifier: T0EYz9lC5ETT+2abdB/OCbef7XvCzYlqfTT5rIiZO9E=
Subject key identifier: 72:81:BE:DE:84:CC:6F:21:3F:4B:E7:E3:1A:F7:D6:FE:AC:59:9C:FC
Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49
Certificate issuer: /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49
Certificate serial: 06E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
Manifest number: 06E2
Signing time: Sat 20 Dec 2025 21:20:06 +0000
Manifest this update: Sat 20 Dec 2025 21:20:06 +0000
Manifest next update: Sat 27 Dec 2025 21:20:06 +0000
Files and hashes: 1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: GME6eEL432F07yTsdTaquOT8/IlYCmqXHt0OZDqGOT0=)
2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: ElM40kRXls4915TJFeuEiV6vcriAHquSzfVrwEFHIlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl
rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D4B2, serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49
Validity
Not Before: Dec 20 21:20:06 2025 GMT
Not After : Dec 27 21:20:06 2025 GMT
Subject: CN=69471306-e757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:97:be:f5:1d:b3:56:e9:16:f2:3e:10:51:
1a:b4:45:98:08:ba:22:21:f2:63:d6:49:2d:a9:bd:
98:95:c2:e9:fe:01:23:5f:74:9a:ea:df:c4:c3:63:
37:46:df:3c:f9:cc:ed:19:46:91:ec:fe:cb:8e:11:
97:3c:c1:ca:68:09:40:45:f7:f2:19:0e:d8:7c:04:
bc:af:79:5b:9b:0d:91:c0:23:6d:d4:09:4f:6c:60:
7c:56:d9:71:86:32:2d:69:57:5c:11:f2:2f:87:65:
33:45:78:68:46:51:0f:84:09:3e:db:5f:34:bf:26:
a6:e1:44:c8:5e:3d:6f:cf:b9:c9:cc:8a:be:4b:5a:
c6:93:7e:01:15:50:c4:39:26:a8:ff:58:06:ee:9b:
60:04:20:08:1c:83:83:73:1b:61:9e:5a:a4:98:7f:
d9:0f:40:2d:72:fe:e9:df:a5:62:9c:f6:62:61:b4:
90:11:72:47:4e:e0:be:69:6a:43:09:36:40:52:d2:
9a:96:d6:3d:f4:e6:2f:60:4f:11:05:35:f8:c3:8c:
cf:62:cc:0d:fc:f3:36:17:ab:36:a5:46:ff:e6:1b:
ff:4b:12:53:b2:c0:11:f2:37:4d:01:40:84:c4:c8:
38:da:3b:13:dc:6e:39:6c:2f:c9:50:6b:48:c4:bd:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:81:BE:DE:84:CC:6F:21:3F:4B:E7:E3:1A:F7:D6:FE:AC:59:9C:FC
X509v3 Authority Key Identifier:
keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:2e:ab:bf:02:a9:89:3f:e7:63:5e:a1:25:54:66:83:82:67:
9d:a5:3b:d3:ad:3d:c4:3e:c3:c3:6f:da:2f:44:e4:e8:2a:aa:
c2:ca:86:ff:01:e8:6f:de:2f:0c:67:9b:f2:7c:b8:b3:5e:83:
ea:2d:07:44:a0:02:a0:c6:4c:f0:cf:fc:d0:92:3d:1c:9b:97:
15:d6:57:7f:f4:b3:98:64:9e:90:2b:72:48:38:eb:77:b8:2e:
65:19:b6:1b:81:60:94:30:98:53:fd:7f:81:c9:4a:08:ca:f2:
df:e8:b2:ed:75:f8:8b:de:a4:03:81:c9:03:05:fb:3d:a9:23:
04:a0:33:ed:e4:0f:bc:44:7c:08:8f:a9:8d:c2:80:f1:0f:5d:
eb:d8:c8:2b:51:1c:30:f6:28:d5:e6:61:d3:8c:87:ba:1b:5f:
fe:67:2a:ef:00:2a:09:5c:c7:bf:9f:7d:85:22:2a:f4:e0:d4:
5b:4b:35:ab:be:13:b5:61:26:56:4e:63:6b:a9:54:07:88:ce:
37:ab:aa:50:0e:7f:79:af:3b:34:17:05:0c:25:69:29:16:9a:
78:3c:b4:38:03:61:16:d9:9a:70:5d:8c:86:44:7b:20:29:28:
74:88:e0:a7:8f:44:c1:c7:0d:58:14:64:e5:b9:6c:08:68:ee:
df:e6:a9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:43:13 2025 by rpki-client