This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
File:                     GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft (raw, json)
Hash identifier:          aeWQAwNd5zM3XILIFs0cOi9zy3lpQ4/vzxa5UuEBJzc=
Subject key identifier:   4D:56:8E:07:61:69:37:3A:6C:83:EC:FF:A4:47:8B:AE:15:8D:E4:00
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Certificate issuer:       /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial:       0685
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
Manifest number:          0675
Signing time:             Mon 22 Dec 2025 21:45:42 +0000
Manifest this update:     Mon 22 Dec 2025 21:45:41 +0000
Manifest next update:     Mon 29 Dec 2025 21:45:41 +0000
Files and hashes:         1: GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl (hash: sz8aho09wGy5ANf0kwO7Stv3dbajPKX76FO/khLsy8k=)
                          2: 3D83702E66CB11EFA2A66984C4F9AE02.roa (hash: yvSBH+mrjORJ3IfyqCLbdhmcmwjpugy8guoGWStrajY=)
                          3: B945FB7A386011F0A5422D16C4F9AE02.roa (hash: SZrDdn156862qKjcsqUSXFw0VIWLJHX0aKveUMI7Crc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
                          rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
        Validity
            Not Before: Dec 22 21:45:41 2025 GMT
            Not After : Dec 29 21:45:41 2025 GMT
        Subject: CN=6949bc06-5ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:c8:88:c9:b1:70:69:b1:05:29:be:75:75:
                    e5:f2:c1:a7:00:ad:fa:58:4d:75:f6:b5:be:32:88:
                    30:0d:72:58:e4:7d:b6:1b:06:75:5f:59:3e:10:1b:
                    c8:f2:41:34:ea:fc:ee:a9:f1:a6:2f:1a:b3:c2:50:
                    fc:2f:cc:41:73:88:1a:b0:2f:71:75:03:d9:f3:17:
                    f3:0b:26:e6:a6:74:5c:76:86:f3:1c:e1:4d:70:72:
                    85:6a:87:a4:08:d3:7a:a6:ba:f6:b5:24:5a:d7:7f:
                    72:c1:e3:8b:7c:58:dc:f5:6a:b0:46:79:e3:12:5a:
                    dc:13:28:4b:ad:8c:8f:19:60:9f:d3:a4:6f:db:8d:
                    5b:d2:1e:49:d1:82:0d:a6:ae:a0:08:7f:55:b5:89:
                    fa:42:a9:c0:5f:0f:9e:73:26:98:95:6d:90:30:d2:
                    2a:d5:5e:3b:f8:f8:ac:62:3a:d7:48:1d:a8:ec:9e:
                    e3:bd:1b:40:c5:d2:29:c6:d2:a2:02:5f:1e:1f:a3:
                    cb:f8:7c:fa:f7:56:a9:3b:78:fd:40:32:3f:60:d8:
                    f0:db:98:4a:c6:85:88:fa:1f:17:e5:ac:27:3c:ea:
                    78:97:44:53:2a:27:0a:a1:fd:1f:0a:c1:79:41:79:
                    36:21:f6:ac:6d:a7:17:49:91:16:49:10:1c:c3:19:
                    50:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:56:8E:07:61:69:37:3A:6C:83:EC:FF:A4:47:8B:AE:15:8D:E4:00
            X509v3 Authority Key Identifier:
                keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4e:a6:72:58:5d:09:28:1e:02:e8:80:e2:ef:4c:3d:90:28:
         75:67:98:1b:2e:98:e9:b6:6d:14:8d:a1:97:24:84:cb:72:55:
         b7:1e:05:6b:f8:05:3c:c8:3a:0f:f0:39:32:67:42:8b:45:af:
         f3:13:ad:82:fa:1c:57:d2:4a:35:b6:67:23:2b:9e:4b:d2:3e:
         4f:1c:61:3a:e6:2f:9c:ce:f0:28:56:6b:32:58:ef:6c:b6:8f:
         86:b5:09:65:d1:18:f2:bc:0b:24:b6:14:0f:3a:9e:4a:93:da:
         74:a6:e6:3a:a6:70:f8:36:29:9a:b8:56:5d:82:4c:72:8c:ca:
         44:a2:2c:18:52:c7:6b:e9:f2:59:bb:da:48:90:14:0b:27:27:
         af:ce:98:33:48:ea:e7:06:4e:da:4f:fc:e0:84:a1:fc:fb:ee:
         3c:c8:3a:bf:27:86:76:13:24:92:9a:56:15:50:4a:c4:e7:c5:
         71:b7:c1:0c:95:3e:1c:e3:16:fc:12:1a:e4:9d:56:c0:3e:59:
         38:6a:78:fb:21:59:3c:84:1e:87:97:76:cb:cf:99:a0:41:15:
         1e:bc:43:f5:b8:70:d8:1a:64:e9:bc:63:5f:cd:6a:de:1d:41:
         3d:08:bf:3f:03:07:bc:e3:9f:fd:02:98:b4:53:2c:b0:10:f8:
         ca:68:01:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 19:21:41 2025 by rpki-client