This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft File: rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json) Hash identifier: tZONsO/IhCDERAU9xQQ5cW7F2bXMHW3YiD1D4zNNSmU= Subject key identifier: 29:E5:A9:4F:05:17:DE:83:5C:71:AB:54:06:64:48:F2:C6:23:85:50 Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 Certificate issuer: /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft Manifest number: 37 Signing time: Sun 07 Dec 2025 05:32:34 +0000 Manifest this update: Sun 07 Dec 2025 05:32:33 +0000 Manifest next update: Sun 14 Dec 2025 05:32:33 +0000 Files and hashes: 1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: BX+Kq6fQiIcTzNNCJLAotOUay5BbBL5zD4flH+/53Wk=) 2: DE43ED5E814111F09CB97D40C4F9AE02.roa (hash: dTfOPNG1kntTr8AnSgtfUPWTvUN95iBYag0K3k/COcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Validity Not Before: Dec 7 05:32:33 2025 GMT Not After : Dec 14 05:32:33 2025 GMT Subject: CN=69351172-ff84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e0:5f:43:cb:cf:c5:0e:db:d9:7c:4c:ab:ae: 9f:dc:bc:34:61:ec:5e:82:66:33:2f:36:81:1d:81: ad:8f:c3:3d:78:5f:51:39:3c:0f:73:eb:e8:43:1f: 05:51:3c:ad:02:59:30:b9:29:26:bb:2a:61:36:a2: af:ce:85:3f:fc:b9:e4:6b:1d:6e:5b:03:68:35:ff: e0:39:23:af:f5:4e:c4:94:b6:2d:b7:a7:74:f4:59: 36:22:6e:a2:32:47:8d:25:8a:ea:28:b8:cd:ec:8d: ab:6c:5a:9d:ed:39:d7:ac:ed:7b:eb:48:a2:90:5e: e4:0e:61:4f:5a:80:03:3c:fe:68:61:2b:0b:b1:3d: 42:f3:81:18:59:ac:39:c6:e6:99:cc:b5:94:9a:d3: d9:6f:f1:c1:a0:a7:e2:f4:5e:82:16:a0:77:bd:76: 90:41:2d:2c:3a:38:cc:3e:d3:10:42:8a:cd:f5:aa: 57:27:d0:32:4a:96:68:24:e2:1c:94:64:49:2c:d6: fd:92:5e:43:ab:91:c1:9f:76:d7:58:3b:d9:05:3c: e6:69:8d:b6:c2:fe:17:2b:eb:7e:40:b7:68:ce:cb: ef:4e:5f:f3:7a:2d:c3:4d:c0:8a:0a:a5:4d:3a:6d: 03:5f:c0:0e:a2:02:a2:83:7d:c1:43:37:3f:e7:ae: 87:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E5:A9:4F:05:17:DE:83:5C:71:AB:54:06:64:48:F2:C6:23:85:50 X509v3 Authority Key Identifier: keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:49:8b:3b:38:58:2d:7d:d2:61:50:2a:0a:d4:c1:59:13:0c: 69:38:8a:ab:02:78:41:69:06:68:10:70:4c:70:5e:f0:5e:93: a0:6e:02:c8:2b:29:12:34:45:d4:a8:f2:7d:03:45:7d:c9:ef: bf:53:07:22:a8:d9:00:66:c8:b6:65:a3:90:b5:51:0d:9a:02: f8:10:9f:93:c2:c7:b1:e5:05:41:84:55:e5:dd:00:d3:db:25: 87:49:fd:f2:c7:5f:5b:fd:1d:f1:33:21:61:28:1d:1e:30:af: 6f:85:9b:0c:13:8a:ab:83:38:a5:1f:e9:84:4e:b2:9d:20:b2: 3b:40:c0:64:94:e2:cb:ad:4e:92:da:aa:27:95:9a:39:ec:bf: 9c:18:4e:df:d7:92:fc:3a:61:da:6b:aa:53:bd:88:ed:e4:38: 75:7d:3e:ee:7c:bb:0f:54:14:6f:ff:8a:61:c7:f2:5f:46:18: 9b:40:d0:6a:af:84:e0:0b:82:68:c3:65:3f:0a:a8:b9:30:5c: f0:7b:12:36:5a:7c:6d:68:89:38:6a:1e:2d:1c:08:90:9d:51: a6:e7:1d:e2:5b:92:c2:f6:2d:fb:c2:63:b9:9d:b8:95:0a:b5: 70:6c:08:60:0b:32:34:59:f7:1e:57:b8:df:dc:72:5b:6f:f4: 1a:e0:7c:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUJBRTExMC8GA1UEBRMoQUM2QTA1QzE5REUzNzdGQUZFQURBODg3MEM5MEU0M0RE REU4MkQzMjAeFw0yNTEyMDcwNTMyMzNaFw0yNTEyMTQwNTMyMzNaMBgxFjAUBgNV BAMTDTY5MzUxMTcyLWZmODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC74F9Dy8/FDtvZfEyrrp/cvDRh7F6CZjMvNoEdga2Pwz14X1E5PA9z6+hDHwVR PK0CWTC5KSa7KmE2oq/OhT/8ueRrHW5bA2g1/+A5I6/1TsSUti23p3T0WTYibqIy R40liuoouM3sjatsWp3tOdes7XvrSKKQXuQOYU9agAM8/mhhKwuxPULzgRhZrDnG 5pnMtZSa09lv8cGgp+L0XoIWoHe9dpBBLSw6OMw+0xBCis31qlcn0DJKlmgk4hyU ZEks1v2SXkOrkcGfdtdYO9kFPOZpjbbC/hcr635At2jOy+9OX/N6LcNNwIoKpU06 bQNfwA6iAqKDfcFDNz/nrodLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKeWpTwUX 3oNccatUBmRI8sYjhVAwHwYDVR0jBBgwFoAUrGoFwZ3jd/r+raiHDJDkPd3oLTIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQkFFLzcyMDM3OUEyODE0 MTExRjA4OEQwNTEzRkM0RjlBRTAyL3JHb0Z3WjNqZF9yLXJhaUhESkRrUGQzb0xU SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckdvRndaM2pkX3ItcmFpSERKRGtQZDNvTFRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx QkFFLzcyMDM3OUEyODE0MTExRjA4OEQwNTEzRkM0RjlBRTAyL3JHb0Z3WjNqZF9y LXJhaUhESkRrUGQzb0xUSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH5Jizs4WC190mFQKgrUwVkTDGk4iqsCeEFpBmgQcExwXvBek6BuAsgr KRI0RdSo8n0DRX3J779TByKo2QBmyLZlo5C1UQ2aAvgQn5PCx7HlBUGEVeXdANPb JYdJ/fLHX1v9HfEzIWEoHR4wr2+FmwwTiquDOKUf6YROsp0gsjtAwGSU4sutTpLa qieVmjnsv5wYTt/Xkvw6YdprqlO9iO3kOHV9Pu58uw9UFG//imHH8l9GGJtA0Gqv hOALgmjDZT8KqLkwXPB7EjZafG1oiThqHi0cCJCdUabnHeJbksL2LfvCY7mduJUK tXBsCGALMjRZ9x5XuN/ccltv9BrgfCc= -----END CERTIFICATE-----Generated at Mon Dec 8 01:14:34 2025 by rpki-client