This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json) Hash identifier: gv2WT+R23lmvtsRDCFgbwHoS6+yfzLbx97T6Jdj3x5U= Subject key identifier: CB:9C:E1:A1:A5:9A:8E:22:96:55:5D:B2:87:07:BF:51:45:64:70:3F Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Certificate serial: 05F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft Manifest number: 05F2 Signing time: Sat 06 Dec 2025 21:46:57 +0000 Manifest this update: Sat 06 Dec 2025 21:46:56 +0000 Manifest next update: Sat 13 Dec 2025 21:46:56 +0000 Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: q4cl69njX3/gzcNU+0Zat3tiZ1Lh816oXYbVof5olPk=) 2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: bTxB6rDqe5W838nV/qkoLeLUMklQqO8XCDilOupFQgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1527 (0x5f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Validity Not Before: Dec 6 21:46:56 2025 GMT Not After : Dec 13 21:46:56 2025 GMT Subject: CN=6934a450-00ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:8c:a1:44:26:8a:19:a3:4c:98:44:2e:25:fd: d6:c7:cc:90:28:05:72:8c:98:b1:f5:0c:04:45:e3: 44:44:1b:dd:bf:a5:b1:91:a6:5d:53:ff:6c:2e:ce: 3f:71:75:14:aa:57:16:1f:a1:cc:00:8a:7a:ad:5b: 35:72:21:c6:97:32:9f:b3:ed:69:4c:fb:f7:93:e5: 34:84:b7:f1:eb:c6:2e:df:ce:7b:f4:5b:e2:38:4f: 4d:29:a9:dd:26:d9:db:3a:13:54:23:5b:4f:6d:f8: 94:ff:91:53:5f:08:8c:d0:79:7d:60:4e:d1:f2:a2: a1:15:66:bd:e8:3d:62:e5:4d:c4:0f:69:bb:66:e0: c5:7a:49:22:0f:56:d9:d5:2b:4e:3f:89:a7:09:f7: 29:36:aa:88:5c:0d:d7:ca:3a:16:12:65:93:58:60: 97:a9:12:88:0f:06:d0:f8:5a:21:46:f8:09:14:85: 99:1b:fd:6e:2e:6c:b2:eb:6d:53:88:48:11:47:0e: 24:31:07:b9:48:87:9c:2d:1b:8f:25:00:b9:e3:ae: f4:61:43:a0:f4:03:00:a0:ed:aa:5d:fd:02:26:06: 03:e2:b6:05:9e:31:a3:47:54:67:c9:b2:46:a5:12: ce:38:8e:1d:9f:31:69:9b:c6:2d:f9:e3:a1:ab:70: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9C:E1:A1:A5:9A:8E:22:96:55:5D:B2:87:07:BF:51:45:64:70:3F X509v3 Authority Key Identifier: keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a1:b5:c1:e1:ee:38:4e:91:aa:0a:bc:12:5c:12:6b:af:4b: 59:2f:ed:b9:7c:90:96:0a:51:2b:77:0a:20:42:09:78:8a:29: ad:80:f3:fc:14:3f:2c:36:7d:64:97:33:4b:a7:6f:9b:0e:fa: 01:d6:a9:80:99:3d:36:d8:9b:c3:e8:fe:42:ed:92:26:81:1f: 5b:9c:7f:84:ae:8f:2e:c4:20:2b:1f:ad:3a:81:78:98:ae:d1: e1:9d:49:b5:d8:78:d5:e9:61:d0:f0:c4:70:fb:73:2c:42:5e: 03:a1:a2:e6:2c:0c:44:06:78:5e:8e:ab:3b:67:e6:7f:8b:2b: 50:b5:2f:43:31:ff:42:46:3d:01:f4:8c:33:f7:51:44:b4:1c: 7f:ab:74:19:a4:af:b7:53:c0:37:79:bd:dd:01:a5:86:83:e3: 1c:37:ef:ce:b8:41:38:3c:83:53:d9:f6:d5:86:30:74:a5:9a: 6b:8f:bd:0f:2f:71:42:9d:a5:51:41:3e:a3:8e:a5:a7:38:1b: 28:4a:bb:35:6c:94:25:a5:b3:ad:bd:2a:81:d8:71:80:a0:ba: 83:04:9d:c1:16:4f:13:d6:70:30:43:08:9d:37:a2:82:fe:d6: 4e:46:0f:bf:63:37:33:08:a2:b1:73:b1:69:f2:82:a8:c0:8e: bb:29:c4:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5OUMxMTAvBgNVBAUTKDgyODE4REQyMjM5REU4MzM1RDIyQURDRTNERjE5MEEz MTBCNzAwMjQwHhcNMjUxMjA2MjE0NjU2WhcNMjUxMjEzMjE0NjU2WjAYMRYwFAYD VQQDEw02OTM0YTQ1MC0wMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+YyhRCaKGaNMmEQuJf3Wx8yQKAVyjJix9QwEReNERBvdv6WxkaZdU/9sLs4/ cXUUqlcWH6HMAIp6rVs1ciHGlzKfs+1pTPv3k+U0hLfx68Yu38579FviOE9NKand JtnbOhNUI1tPbfiU/5FTXwiM0Hl9YE7R8qKhFWa96D1i5U3ED2m7ZuDFekkiD1bZ 1StOP4mnCfcpNqqIXA3XyjoWEmWTWGCXqRKIDwbQ+FohRvgJFIWZG/1uLmyy621T iEgRRw4kMQe5SIecLRuPJQC54670YUOg9AMAoO2qXf0CJgYD4rYFnjGjR1RnybJG pRLOOI4dnzFpm8Yt+eOhq3C5mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuc4aGl mo4illVdsocHv1FFZHA/MB8GA1UdIwQYMBaAFIKBjdIjnegzXSKtzj3xkKMQtwAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qzk5Qy8yQTFBRTlFQ0Q1 NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZETmRJcTNPUGZHUW94QzNB Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvR04waU9kNkROZElxM09QZkdRb3hDM0FDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qzk5Qy8yQTFBRTlFQ0Q1NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZE TmRJcTNPUGZHUW94QzNBQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnobXB4e44TpGqCrwSXBJrr0tZL+25fJCWClErdwogQgl4iimtgPP8 FD8sNn1klzNLp2+bDvoB1qmAmT022JvD6P5C7ZImgR9bnH+Ero8uxCArH606gXiY rtHhnUm12HjV6WHQ8MRw+3MsQl4DoaLmLAxEBnhejqs7Z+Z/iytQtS9DMf9CRj0B 9Iwz91FEtBx/q3QZpK+3U8A3eb3dAaWGg+McN+/OuEE4PINT2fbVhjB0pZprj70P L3FCnaVRQT6jjqWnOBsoSrs1bJQlpbOtvSqB2HGAoLqDBJ3BFk8T1nAwQwidN6KC /tZORg+/YzczCKKxc7Fp8oKowI67KcQy -----END CERTIFICATE-----Generated at Mon Dec 8 09:12:10 2025 by rpki-client