This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft File: rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json) Hash identifier: bUsOWVKHLBTOuZykdWM+l5MBhsACdIhmXrX+lqAHiHk= Subject key identifier: 71:3C:02:5B:9F:12:B6:FD:A2:BC:A6:5F:AA:18:2F:F3:55:E8:D5:B5 Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2 Certificate issuer: /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2 Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft Manifest number: 051A Signing time: Thu 04 Dec 2025 22:10:52 +0000 Manifest this update: Thu 04 Dec 2025 22:10:51 +0000 Manifest next update: Thu 11 Dec 2025 22:10:51 +0000 Files and hashes: 1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: MQSmtUlAnzSzyWtNa0zNX7QaZxPP8LEBEt80s9sMabg=) 2: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: XSnUK976UXwYHciWW5wccgOD7fOjMode6M1FzFFnvQ4=) 3: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: hGiilfSQIcgKH4NIdZJeXzdl+FpDj03CR4zzG/JcbXg=) 4: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: H8xjH5y20P1rOG3WSUPBDAJqjIZUNQTVo2FaxmnxQzw=) 5: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: wwz7C2WhiFB/fPJcMxt1QlkPUOWQEV9jMcZeemu9/Kg=) 6: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: 0rs0STSm9B6q1ImRupSPhNQw8yrXD67mSzQRxhTWeyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2 Validity Not Before: Dec 4 22:10:51 2025 GMT Not After : Dec 11 22:10:51 2025 GMT Subject: CN=693206eb-69f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:7e:37:f8:0c:96:cd:35:11:1d:6d:8d:13: 44:d9:8d:73:1a:09:b3:8d:a8:b4:95:2d:a1:d0:67: 3d:0a:29:37:28:64:01:d0:15:24:c4:6c:c5:41:d1: 79:bd:98:b4:26:62:dc:6f:1b:9f:08:97:34:e9:55: e6:6e:76:d5:94:89:7f:fd:d5:4b:f9:0f:84:ba:ff: 20:d0:7d:8d:87:8c:60:5a:40:c6:06:e6:14:bc:c2: d5:ae:98:59:f5:8e:09:3b:d2:4c:46:74:d1:20:dc: 39:0d:a5:07:59:12:98:87:f2:ff:b6:c7:d9:00:bb: 2b:5f:19:68:77:cb:32:15:9e:96:11:d1:87:31:7e: 55:3e:62:a2:2b:cc:9c:49:87:1f:d1:0d:8f:ca:b1: 3d:ee:87:d9:f4:db:1a:f5:06:7d:4c:07:6a:43:47: f4:a3:31:50:96:f3:c6:1e:3f:cd:bc:83:a6:73:d7: 55:d7:75:2d:db:59:77:e9:db:2e:57:b7:c6:99:c5: b5:86:69:ec:9e:45:da:27:bb:b5:90:b3:27:83:22: 1b:08:31:39:34:8b:d6:02:db:5f:af:73:ea:a8:b8: 22:e0:11:9d:8d:34:87:a1:d2:4e:3f:00:a2:65:ce: 0a:d1:3a:d1:1f:dc:7f:75:68:9d:6f:a6:f4:a3:99: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3C:02:5B:9F:12:B6:FD:A2:BC:A6:5F:AA:18:2F:F3:55:E8:D5:B5 X509v3 Authority Key Identifier: keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:05:7d:7d:87:ce:f8:d2:42:3d:76:d2:19:07:54:5e:aa:90: 39:4f:3e:ac:7a:eb:03:6f:a0:8a:57:c8:c3:7c:aa:90:86:74: 28:56:76:56:69:2e:ef:0f:80:26:ef:6d:99:a2:21:b0:25:f2: 66:d6:57:06:17:62:a0:34:70:ea:05:ab:e0:9b:93:af:37:bc: 1b:70:1b:a3:44:04:12:44:8d:f6:3d:e1:0e:87:23:34:76:9b: cf:27:a9:01:83:5f:02:0c:6c:10:4a:c5:37:b2:3f:55:3c:91: af:a7:f1:07:4f:05:ee:15:75:e1:e8:38:d9:c4:89:44:6c:3e: e4:ac:e3:ff:c8:c3:b4:75:76:3e:cf:00:ca:49:8e:a2:7b:d1: f1:e4:64:33:8e:2e:04:e9:8f:0e:2f:6a:9c:d5:a4:dc:4f:b7: a9:d4:5c:7e:a8:02:7c:76:b8:61:20:b9:71:36:44:d8:69:f4: 84:13:a6:f3:db:b0:35:ac:1a:66:71:4c:92:5d:5a:2a:41:6a: 10:c7:0d:34:61:19:0b:81:4c:42:5a:c1:f6:76:9a:eb:80:89: 07:d8:2f:16:f0:07:06:39:ee:20:62:49:f9:f8:92:5d:fe:49: 3e:84:9a:91:11:5c:16:48:ee:53:06:39:b1:e1:77:4d:63:bf: 7c:fa:81:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg1QTgxMTAvBgNVBAUTKEFFMEEwRjk4QTA5MDNFMDE1RTVGQzU0Q0I4Q0UwODFE NDI0REI0RDIwHhcNMjUxMjA0MjIxMDUxWhcNMjUxMjExMjIxMDUxWjAYMRYwFAYD VQQDEw02OTMyMDZlYi02OWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/1+N/gMls01ER1tjRNE2Y1zGgmzjai0lS2h0Gc9Cik3KGQB0BUkxGzFQdF5 vZi0JmLcbxufCJc06VXmbnbVlIl//dVL+Q+Euv8g0H2Nh4xgWkDGBuYUvMLVrphZ 9Y4JO9JMRnTRINw5DaUHWRKYh/L/tsfZALsrXxlod8syFZ6WEdGHMX5VPmKiK8yc SYcf0Q2PyrE97ofZ9Nsa9QZ9TAdqQ0f0ozFQlvPGHj/NvIOmc9dV13Ut21l36dsu V7fGmcW1hmnsnkXaJ7u1kLMngyIbCDE5NIvWAttfr3PqqLgi4BGdjTSHodJOPwCi Zc4K0TrRH9x/dWidb6b0o5lbBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHE8Aluf Erb9orymX6oYL/NV6NW1MB8GA1UdIwQYMBaAFK4KD5igkD4BXl/FTLjOCB1CTbTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVBOC9BNTMwODE0NjJD REUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBnRmVYOFZNdU00SUhVSk50 TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jnb1BtS0NRUGdGZVg4Vk11TTRJSFVKTnROSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODVBOC9BNTMwODE0NjJDREUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBn RmVYOFZNdU00SUhVSk50TkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnBX19h8740kI9dtIZB1ReqpA5Tz6seusDb6CKV8jDfKqQhnQoVnZW aS7vD4Am722ZoiGwJfJm1lcGF2KgNHDqBavgm5OvN7wbcBujRAQSRI32PeEOhyM0 dpvPJ6kBg18CDGwQSsU3sj9VPJGvp/EHTwXuFXXh6DjZxIlEbD7krOP/yMO0dXY+ zwDKSY6ie9Hx5GQzji4E6Y8OL2qc1aTcT7ep1Fx+qAJ8drhhILlxNkTYafSEE6bz 27A1rBpmcUySXVoqQWoQxw00YRkLgUxCWsH2dprrgIkH2C8W8AcGOe4gYkn5+JJd /kk+hJqREVwWSO5TBjmx4XdNY798+oGj -----END CERTIFICATE-----Generated at Sat Dec 6 14:34:32 2025 by rpki-client