This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
File: GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json)
Hash identifier: KxboWT1vK3dnWjwYOb4HCl0fX69iA9mzrNhJFN9Ye2s=
Subject key identifier: 7A:AB:C9:E2:EB:22:CD:AC:4F:66:03:7E:5E:B2:E2:AA:E3:B6:ED:4A
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
Manifest number: 020E
Signing time: Fri 05 Dec 2025 00:36:01 +0000
Manifest this update: Fri 05 Dec 2025 00:36:00 +0000
Manifest next update: Fri 12 Dec 2025 00:36:00 +0000
Files and hashes: 1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: 8FzdnhwhY2/CLHqYaI1J/Lp5geGQkcyuDGIk8tQXVWM=)
2: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: x5jTQA8XBSMQ8Q+xjjenfP78ItEEc+vCjF2dnXQMxgg=)
3: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: EuI+jy3jz6zplStWvLeJaw92baXncm4w2hV/GfKLDMk=)
4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Validity
Not Before: Dec 5 00:36:00 2025 GMT
Not After : Dec 12 00:36:00 2025 GMT
Subject: CN=693228f0-60c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:87:c7:7e:7d:e5:97:2c:ed:44:97:54:97:
05:2b:8f:70:6d:7f:9f:bf:61:f4:2f:a3:ba:fa:b9:
b4:5a:b1:eb:36:ac:d4:30:89:c2:5e:8b:fa:f5:a3:
7d:3f:33:83:41:97:74:3e:e3:9b:76:8f:d8:74:a9:
42:e0:9b:2a:11:a7:39:99:2b:c8:fd:0e:b3:05:de:
6b:8c:fb:a4:4a:f8:df:97:c6:ac:4b:86:53:af:d9:
81:2f:79:00:9b:46:c8:32:82:ac:96:3f:47:d5:ec:
4d:2b:4d:6e:4c:4c:12:55:81:98:37:38:88:7f:6f:
a5:2c:d4:cb:fa:80:f1:fb:fd:20:33:54:a2:60:5f:
d0:c1:e4:0b:ba:aa:bc:62:50:a4:a0:c3:56:db:19:
99:97:df:84:4a:7c:7d:f0:44:17:b3:4e:f7:a8:83:
af:3d:36:fc:4c:bf:60:ed:6a:b0:98:13:50:76:02:
ad:09:7c:8c:a6:47:75:04:e2:d0:fc:03:d7:3d:92:
fe:9a:89:1c:b9:a8:96:c4:db:b2:bd:9f:c5:8c:ae:
ba:ea:f9:8a:91:89:ec:aa:b7:b4:4d:46:24:ce:bb:
f9:b3:2c:28:70:05:0c:a1:e0:62:3b:17:2e:d6:42:
f6:e4:6d:cc:52:9d:53:7e:1e:1f:d3:5c:b6:32:1d:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AB:C9:E2:EB:22:CD:AC:4F:66:03:7E:5E:B2:E2:AA:E3:B6:ED:4A
X509v3 Authority Key Identifier:
keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:56:81:e8:c3:14:4f:8f:f7:e9:30:19:fb:88:5d:2a:fd:9f:
40:d4:9b:c4:74:c2:71:0b:8a:df:1f:3e:ed:c7:d6:4c:c0:e9:
8f:81:68:c0:e7:b2:87:31:03:46:37:c1:6c:1a:2d:05:00:ad:
e9:71:b2:5c:88:75:a3:c5:ee:4d:4c:51:0a:79:1b:79:e6:0c:
4d:f7:00:f3:b1:91:06:aa:e0:cc:fe:aa:ac:f6:d4:54:ba:31:
70:2f:bc:b6:d9:72:80:33:bf:73:6c:55:90:34:52:66:18:bd:
e1:84:09:52:0b:ab:51:c4:80:b2:23:45:4f:03:2f:1a:51:15:
25:7c:ae:8c:b2:3f:1f:bc:36:47:cb:1c:34:0e:fc:c4:2d:10:
8b:27:be:3f:cb:28:65:99:ae:9e:b9:b9:6f:37:df:52:5b:8b:
a0:5f:08:f4:8e:1d:36:af:09:ad:9b:9e:46:ec:06:34:ea:d4:
21:20:46:00:46:be:a3:94:ef:ea:ab:55:23:e9:c4:ea:aa:e7:
36:46:7e:01:f0:4e:cf:83:85:6b:6c:99:60:f5:95:62:ac:25:
62:09:5c:e5:48:f0:df:9c:b5:d6:f2:9f:dd:67:8c:f7:7d:3f:
7f:92:e8:ce:85:93:16:af:d5:4b:cd:a3:89:b2:09:bb:74:13:
5c:10:82:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1
RTFGMkNBNTIwHhcNMjUxMjA1MDAzNjAwWhcNMjUxMjEyMDAzNjAwWjAYMRYwFAYD
VQQDEw02OTMyMjhmMC02MGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwFGHx3595Zcs7USXVJcFK49wbX+fv2H0L6O6+rm0WrHrNqzUMInCXov69aN9
PzODQZd0PuObdo/YdKlC4JsqEac5mSvI/Q6zBd5rjPukSvjfl8asS4ZTr9mBL3kA
m0bIMoKslj9H1exNK01uTEwSVYGYNziIf2+lLNTL+oDx+/0gM1SiYF/QweQLuqq8
YlCkoMNW2xmZl9+ESnx98EQXs073qIOvPTb8TL9g7WqwmBNQdgKtCXyMpkd1BOLQ
/APXPZL+mokcuaiWxNuyvZ/FjK666vmKkYnsqre0TUYkzrv5sywocAUMoeBiOxcu
1kL25G3MUp1Tfh4f01y2Mh3v1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqryeLr
Is2sT2YDfl6y4qrjtu1KMB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE
MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5
bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjAwRS81QUExODIyRUFEMzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBE
bHpvYXpTTEJOb3BlSHl5bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyVoHowxRPj/fpMBn7iF0q/Z9A1JvEdMJxC4rfHz7tx9ZMwOmPgWjA
57KHMQNGN8FsGi0FAK3pcbJciHWjxe5NTFEKeRt55gxN9wDzsZEGquDM/qqs9tRU
ujFwL7y22XKAM79zbFWQNFJmGL3hhAlSC6tRxICyI0VPAy8aURUlfK6Msj8fvDZH
yxw0DvzELRCLJ74/yyhlma6eublvN99SW4ugXwj0jh02rwmtm55G7AY06tQhIEYA
Rr6jlO/qq1Uj6cTqquc2Rn4B8E7Pg4VrbJlg9ZVirCViCVzlSPDfnLXW8p/dZ4z3
fT9/kujOhZMWr9VLzaOJsgm7dBNcEIKd
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:43 2025 by rpki-client