This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
File:                     GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json)
Hash identifier:          JN6q5X57N5fs9LgQETdgHDWhZP15SiF0n6Fb/Fz6k/M=
Subject key identifier:   8E:57:8B:A7:22:C7:53:CE:D6:7A:93:82:1A:12:24:EF:5D:F4:E2:D8
Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77
Certificate issuer:       /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
Manifest number:          9D
Signing time:             Tue 23 Dec 2025 05:18:36 +0000
Manifest this update:     Tue 23 Dec 2025 05:18:36 +0000
Manifest next update:     Tue 30 Dec 2025 05:18:36 +0000
Files and hashes:         1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: nEaIcWn+ItRsN7b2EuZWffYTHXn0Cg1lS7nEuyU/NKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
        Validity
            Not Before: Dec 23 05:18:36 2025 GMT
            Not After : Dec 30 05:18:36 2025 GMT
        Subject: CN=694a262c-ba15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f8:03:62:d9:45:fd:74:0d:15:f5:cb:a9:df:
                    f9:88:3d:04:b3:59:ce:f6:9e:a1:c5:a7:f3:5a:47:
                    40:cc:03:24:1c:a8:86:2b:55:5a:37:36:1e:06:38:
                    30:de:8d:9e:72:ce:ae:fd:a0:55:90:a3:25:9d:35:
                    d8:0d:93:22:10:1a:76:5e:f4:e1:6a:e0:83:ce:c9:
                    d7:56:eb:ef:85:99:28:4d:10:30:6c:45:33:b3:23:
                    35:d7:cd:9b:c2:74:95:de:80:65:bc:f7:88:0f:57:
                    91:9c:ce:33:65:c2:0b:ef:e6:ab:2d:5c:34:58:33:
                    f2:63:ea:8b:20:4a:57:2d:5f:f7:a9:81:3f:e1:4d:
                    35:24:99:d1:4a:28:b0:83:53:3b:dc:ee:8b:6e:36:
                    6e:4e:4b:3d:a2:0a:c7:2d:43:0a:9a:21:fd:a2:96:
                    2c:e0:b4:59:17:7c:ef:43:ea:6d:26:e4:8c:da:4d:
                    32:2c:82:0a:6c:cd:c8:14:ea:84:e4:91:f0:90:e4:
                    47:bb:be:9e:24:ae:5f:ee:f4:3e:a7:61:e5:04:f3:
                    17:cb:a1:92:36:6b:5d:64:a1:e2:fa:1c:55:cc:c3:
                    c2:26:34:90:47:3f:87:9f:94:0b:8c:e2:95:53:dc:
                    bc:cc:fe:77:7f:07:ec:21:67:7c:3f:77:5d:5b:81:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:57:8B:A7:22:C7:53:CE:D6:7A:93:82:1A:12:24:EF:5D:F4:E2:D8
            X509v3 Authority Key Identifier:
                keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5b:34:3b:f0:6b:c5:83:33:8c:b8:86:ac:fc:9f:92:4d:03:
         1f:a7:52:25:bf:19:bd:ea:35:eb:b0:54:a4:18:da:d1:85:f3:
         91:e4:71:fa:ea:f4:d1:17:a6:60:4a:68:17:15:ee:89:bb:2e:
         7b:41:46:e0:cb:29:3e:fc:0a:ce:0a:ac:eb:a6:4d:3f:39:58:
         e0:cc:d3:b6:bf:e3:1b:d6:16:9b:d4:52:ec:c3:5c:8b:f5:5e:
         fc:2d:62:dd:d1:cc:1b:23:f3:91:a4:67:fc:0b:2d:9d:70:ce:
         2e:3c:7a:0a:49:46:86:fa:d0:ae:2d:64:23:a9:61:12:3b:4d:
         a8:bc:0c:09:8a:4f:f0:42:bd:e7:90:06:eb:0c:3e:01:21:3b:
         21:a3:b9:39:c3:93:49:c6:2a:b7:89:eb:21:e1:7e:35:36:64:
         d8:5f:29:8b:08:19:2f:4d:3e:ef:f0:f1:4b:87:e9:5a:03:26:
         47:45:1a:11:f0:a8:7f:01:92:85:3c:2f:2d:bd:d9:09:d7:52:
         44:bf:b9:ab:5a:99:5c:5f:da:48:ec:b2:4d:38:6a:01:dd:91:
         a6:2c:d1:b3:1b:a4:f3:ec:50:11:ba:b4:aa:7c:65:1d:ee:88:
         92:21:44:3e:50:d1:ae:ef:2a:81:c5:44:ef:c3:72:ff:d0:de:
         8b:a5:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:21:24 2025 by rpki-client