This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
File: 8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json)
Hash identifier: +FfV718+H1nScZjKzLByTOJlllr9z9rwlnpoF8aKj34=
Subject key identifier: D1:E1:E2:DE:16:4E:9B:34:AF:32:DE:EF:32:1D:15:B9:D9:5E:90:83
Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14
Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414
Certificate serial: 059A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
Manifest number: 0594
Signing time: Sat 06 Dec 2025 22:01:04 +0000
Manifest this update: Sat 06 Dec 2025 22:01:03 +0000
Manifest next update: Sat 13 Dec 2025 22:01:03 +0000
Files and hashes: 1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: EBvkbLJq/90jT7DFzLyfWFqGhXPUrQDc5NPuGmfnLXk=)
2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: 9gxRC5js1FiufwEU1KdLZ+ZBBpP4QjbLjPfn8nzB2wQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl
rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1434 (0x59a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414
Validity
Not Before: Dec 6 22:01:03 2025 GMT
Not After : Dec 13 22:01:03 2025 GMT
Subject: CN=6934a79f-5a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:f1:76:74:3c:b1:25:b8:e6:3d:85:65:7b:
35:c7:b7:ba:11:ca:df:8e:9e:40:c4:1e:bf:e4:20:
ee:43:2e:db:d0:14:66:f7:b1:7e:50:76:51:33:9b:
89:1f:41:5d:39:a1:14:89:00:8f:a2:cf:b0:5f:67:
9b:a8:6c:06:27:2b:bb:cf:8b:51:fa:01:cb:39:f1:
1d:22:b5:f2:fb:83:90:4a:1e:cc:3e:dc:09:48:77:
39:16:6a:33:b3:1d:16:7b:0e:62:66:7a:8f:c2:3e:
23:81:f9:f0:f6:77:ff:2c:4a:63:df:75:ed:10:56:
44:5a:b4:f5:38:22:9b:6a:d7:f8:24:1c:59:ed:28:
b6:15:02:d4:9e:d8:53:0c:6c:39:4b:53:8a:b1:2f:
8f:6b:94:62:81:ad:70:8a:8c:c2:e2:cb:ef:aa:02:
e2:f6:ea:18:3b:42:09:31:59:2e:6f:6e:f3:c1:b6:
7a:a6:2d:17:bd:cd:af:ec:8b:79:fd:84:f4:35:4a:
ff:09:88:50:f1:17:b4:26:93:56:e7:1e:6c:11:ef:
e7:ac:f5:ee:35:92:74:e9:96:a8:76:18:a4:fc:b9:
e0:99:5d:3b:b6:9f:0c:4a:5a:9f:91:a9:29:c6:85:
e8:ef:28:4b:d9:3c:89:59:3e:7d:1f:69:8d:42:31:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E1:E2:DE:16:4E:9B:34:AF:32:DE:EF:32:1D:15:B9:D9:5E:90:83
X509v3 Authority Key Identifier:
keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:99:44:0b:c3:97:72:58:e2:01:51:ba:9a:b9:5e:be:7c:5e:
17:62:b8:20:f8:d2:0b:83:aa:61:37:bf:12:bd:97:95:94:16:
d4:4a:2e:30:e0:57:8e:88:40:55:45:9c:1c:87:51:85:51:b6:
0a:4d:a3:7f:fa:0f:9d:35:d4:6f:12:6b:08:1d:ec:54:ba:a4:
b4:a0:27:10:fa:c0:c5:cd:0f:87:e8:b1:e1:51:97:d8:be:c7:
ca:a4:49:7f:24:15:6b:82:85:04:b2:2c:ab:dc:d5:28:e9:6f:
75:e6:80:41:0a:6f:87:81:55:3d:08:79:3c:4d:9c:ee:e8:ce:
ef:e4:9f:6e:f7:87:62:1b:f5:f6:f0:2d:4a:35:cf:87:f9:21:
1d:46:f3:96:d1:16:42:f7:ed:59:5f:d0:9d:f0:bb:01:18:ec:
3d:ce:d4:4a:d3:b5:d8:ca:72:f1:21:c6:53:3b:49:cd:7b:5e:
7e:aa:30:ea:7d:8f:04:25:97:c9:0f:b2:11:ea:84:a5:9c:a3:
26:54:02:ad:a8:0c:50:d2:98:7f:e0:1d:5e:25:96:f9:9e:22:
ea:5a:52:41:50:c5:86:14:ae:3a:87:7e:8a:84:db:aa:df:35:
83:f7:e5:a1:44:8b:16:c1:d0:12:bf:c8:f2:04:94:ee:9c:48:
a6:f5:67:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy
OUExRTI0MTQwHhcNMjUxMjA2MjIwMTAzWhcNMjUxMjEzMjIwMTAzWjAYMRYwFAYD
VQQDEw02OTM0YTc5Zi01YTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqrLxdnQ8sSW45j2FZXs1x7e6Ecrfjp5AxB6/5CDuQy7b0BRm97F+UHZRM5uJ
H0FdOaEUiQCPos+wX2ebqGwGJyu7z4tR+gHLOfEdIrXy+4OQSh7MPtwJSHc5Fmoz
sx0Wew5iZnqPwj4jgfnw9nf/LEpj33XtEFZEWrT1OCKbatf4JBxZ7Si2FQLUnthT
DGw5S1OKsS+Pa5Riga1wiozC4svvqgLi9uoYO0IJMVkub27zwbZ6pi0Xvc2v7It5
/YT0NUr/CYhQ8Re0JpNW5x5sEe/nrPXuNZJ06Zaodhik/LngmV07tp8MSlqfkakp
xoXo7yhL2TyJWT59H2mNQjEi4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHh4t4W
Tps0rzLe7zIdFbnZXpCDMB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5
RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDlCNy8xNDk4MDQ5OEY5RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hX
R3pPMlRlRkxBUjhwb2VKQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDmUQLw5dyWOIBUbqauV6+fF4XYrgg+NILg6phN78SvZeVlBbUSi4w
4FeOiEBVRZwch1GFUbYKTaN/+g+dNdRvEmsIHexUuqS0oCcQ+sDFzQ+H6LHhUZfY
vsfKpEl/JBVrgoUEsiyr3NUo6W915oBBCm+HgVU9CHk8TZzu6M7v5J9u94diG/X2
8C1KNc+H+SEdRvOW0RZC9+1ZX9Cd8LsBGOw9ztRK07XYynLxIcZTO0nNe15+qjDq
fY8EJZfJD7IR6oSlnKMmVAKtqAxQ0ph/4B1eJZb5niLqWlJBUMWGFK46h36KhNuq
3zWD9+WhRIsWwdASv8jyBJTunEim9WfJ
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:19:18 2025 by rpki-client