This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
File:                     -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json)
Hash identifier:          9V+1qkKxQY2J/p0KyZZTD8M21cjtowo8atVnT2gMl0Q=
Subject key identifier:   A7:F1:B8:69:A6:C5:04:B2:81:E1:02:56:F7:F1:DA:54:E1:4B:A5:1B
Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
Certificate issuer:       /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Certificate serial:       0443
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
Manifest number:          043C
Signing time:             Thu 18 Dec 2025 23:37:40 +0000
Manifest this update:     Thu 18 Dec 2025 23:37:40 +0000
Manifest next update:     Thu 25 Dec 2025 23:37:40 +0000
Files and hashes:         1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: +z9a0hWzHOWHwqwKnSBCqn98LtBub3oxxAtshXXxdqw=)
                          2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: tt7O9YQ0p71DCEEFVfdI/EIIH0WIFOY0otBzHdQ0+Os=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl
                          rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
        Validity
            Not Before: Dec 18 23:37:40 2025 GMT
            Not After : Dec 25 23:37:40 2025 GMT
        Subject: CN=69449044-b8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:33:ea:52:2b:5e:24:ab:e8:df:8a:91:35:
                    70:2e:1b:0a:29:a5:d7:5c:6d:0c:9a:45:78:34:76:
                    33:62:4b:9c:a2:fe:97:05:aa:50:c8:31:2a:38:05:
                    ff:d9:7e:09:cf:ac:34:dd:ce:2a:37:41:d2:f3:b5:
                    dc:58:43:c1:23:70:49:a0:e1:06:b6:22:95:f7:d9:
                    f1:c1:b4:38:17:39:15:81:53:6b:a3:bc:80:60:0b:
                    f3:18:75:0c:31:68:20:b0:85:9a:0a:25:cc:55:07:
                    61:04:92:0e:5d:fa:dc:de:72:b3:e4:98:a5:19:e4:
                    33:aa:0b:9c:1a:e1:17:51:6a:5c:9c:cf:96:60:45:
                    0a:cd:80:2c:5a:08:4c:f6:59:6f:ff:6c:2c:aa:8d:
                    7c:2c:fe:4a:aa:d4:a0:7f:09:7f:13:6f:f1:29:15:
                    58:25:76:f6:bd:22:9d:3d:23:ed:1d:c2:6e:6f:ed:
                    75:df:0f:53:e1:d3:d8:ba:44:ca:ee:9e:21:5e:8e:
                    5c:c1:c9:84:00:bb:b3:cf:fd:85:32:17:9c:be:53:
                    0f:f5:67:84:b4:b2:5f:17:2c:2b:1a:5e:2a:ea:56:
                    43:21:bf:1d:c7:ad:39:30:65:e6:ce:07:21:88:11:
                    1f:3c:b0:28:14:97:7a:f3:ae:f0:0c:71:a3:43:03:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F1:B8:69:A6:C5:04:B2:81:E1:02:56:F7:F1:DA:54:E1:4B:A5:1B
            X509v3 Authority Key Identifier:
                keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e8:c9:16:ac:fa:86:27:ba:f2:36:92:70:74:23:92:8a:c5:
         e8:dc:cb:ae:81:eb:1b:c3:ac:22:27:16:7f:5c:d9:c4:65:ac:
         f6:89:70:08:ec:6e:bc:c8:97:bd:5d:ce:5a:08:59:d2:29:e6:
         37:ec:1d:85:d7:0c:c6:d6:42:b2:a0:ca:69:1a:d9:1a:90:c1:
         bc:7b:59:3a:8d:aa:b3:cb:88:22:a4:7d:7e:8f:e7:1b:59:b3:
         44:a9:29:72:54:20:c2:5d:1b:3b:ce:79:61:2b:05:19:fa:a7:
         89:cd:15:d8:ef:5a:28:eb:a1:19:47:58:eb:f3:25:52:f7:ee:
         9a:ee:ea:ce:88:aa:23:42:40:2d:c5:2f:13:30:ec:18:15:c2:
         9f:d3:9e:de:4e:4a:cb:51:53:7f:da:f0:4d:cc:13:9c:85:30:
         d3:5f:3a:80:c2:b9:15:1b:23:4b:40:07:f7:e7:cd:8b:dc:c3:
         ba:b3:ad:6e:70:b8:b7:46:07:74:bc:a3:a4:46:e8:30:5b:38:
         7a:b5:d3:11:7d:eb:73:b3:d7:c9:0a:ef:93:e7:28:b2:a4:40:
         a3:ab:27:16:9c:92:bb:7b:47:7f:5c:71:62:74:40:87:2f:80:
         d8:3e:17:03:df:a5:d5:ad:dc:00:b0:95:f1:fb:c0:76:4e:24:
         15:84:c0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:25:39 2025 by rpki-client