This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft
File:                     GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft (raw, json)
Hash identifier:          jG/kxT6h7zHb7PdiQnAZiNPLeHaNjt9E/GcU10rAN5U=
Subject key identifier:   2F:0A:EF:13:13:89:6A:7A:D6:D7:F7:A2:69:CA:6A:C8:BC:F0:82:F0
Authority key identifier: 19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06
Certificate issuer:       /CN=A9160827/serialNumber=1933F62B910631D0494CACC47CB167C581045006
Certificate serial:       1F07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft
Manifest number:          1F02
Signing time:             Mon 22 Dec 2025 15:50:17 +0000
Manifest this update:     Mon 22 Dec 2025 15:50:16 +0000
Manifest next update:     Mon 29 Dec 2025 15:50:16 +0000
Files and hashes:         1: GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl (hash: Rv9J9c4WJSHZleiaFHWKsY3WhG3MeYWIyV3LS6DBHcw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl
                          rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 15:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7943 (0x1f07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160827, serialNumber=1933F62B910631D0494CACC47CB167C581045006
        Validity
            Not Before: Dec 22 15:50:16 2025 GMT
            Not After : Dec 29 15:50:16 2025 GMT
        Subject: CN=694968b8-8194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:84:ea:ad:b2:b6:a0:aa:06:30:72:b0:a7:
                    df:21:6c:71:2b:be:44:d7:3d:49:b2:ae:e0:91:75:
                    68:b0:3f:70:d1:0e:d2:6a:f9:9c:86:1c:b3:2d:ba:
                    d0:11:40:3d:67:94:98:56:24:03:a9:eb:9d:43:51:
                    9f:5f:9e:c0:4b:b8:ea:51:77:d4:8b:49:a5:3d:e7:
                    d4:72:2f:e4:d6:94:8f:a4:a4:10:df:83:4d:72:53:
                    50:d3:9a:f8:5a:8c:4d:a2:1b:af:13:41:1c:07:3d:
                    dc:03:01:21:1f:ce:b7:b5:cf:60:84:42:8a:ee:fa:
                    de:10:7b:a7:6e:ec:27:cb:66:c7:a1:eb:58:59:1e:
                    f5:bb:3e:fe:81:80:de:da:17:3c:ba:4a:f8:8e:7a:
                    a4:99:87:e2:90:e5:eb:99:f9:69:ab:63:5d:50:00:
                    f7:94:af:d1:14:e6:53:f3:48:95:61:ad:49:20:0e:
                    a3:1e:9c:c9:b7:9e:74:ea:da:b5:67:6c:e2:1f:43:
                    51:1f:44:dd:ea:9e:e6:02:65:fd:b0:4d:d6:f7:58:
                    85:a2:33:03:e3:6c:a4:3c:ad:ef:1d:03:42:ae:f4:
                    2c:2a:b9:30:c9:d9:7e:5c:34:ce:dc:11:7d:75:9c:
                    ef:06:1b:64:d9:de:b7:05:b0:eb:2f:46:04:9e:b5:
                    44:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0A:EF:13:13:89:6A:7A:D6:D7:F7:A2:69:CA:6A:C8:BC:F0:82:F0
            X509v3 Authority Key Identifier:
                keyid:19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:96:9a:2b:b6:1e:76:17:5b:bb:6d:5d:b9:fb:62:6b:5f:b3:
         fe:5a:fa:14:78:75:57:d2:23:ae:04:91:ed:68:2e:49:09:5f:
         29:81:4a:90:60:6e:35:63:60:12:a3:a0:89:52:55:54:50:55:
         ad:e8:b3:f3:e1:1a:08:18:d5:27:f4:04:f6:b9:2b:64:ac:6b:
         e4:79:a7:4e:20:f4:1e:bb:0a:0f:24:c8:5a:87:f5:1d:37:49:
         09:fc:54:48:11:36:e4:2a:6a:23:56:d5:08:6f:71:47:52:c7:
         4e:bb:9e:c3:00:a9:87:60:23:f3:33:8b:9f:b4:29:7c:4d:a0:
         36:43:2f:ad:e9:be:b5:56:41:22:6b:9a:67:ff:8e:3a:83:e6:
         10:0f:64:a2:5a:f3:c7:9c:2f:30:2b:63:69:b9:34:45:17:82:
         21:e3:b1:94:ed:9e:ef:93:57:26:6e:41:90:aa:09:84:c5:12:
         c1:2c:8a:39:cb:7c:3c:31:19:10:fd:35:39:43:a1:19:96:09:
         0e:b7:3c:4f:b8:73:e5:7d:71:90:9f:b3:a2:e0:ae:72:6b:c8:
         e1:44:9e:96:08:03:de:f5:0c:f5:10:15:d0:75:34:e8:df:a5:
         ef:05:00:d3:6b:ee:21:73:b5:7d:2a:77:3c:17:03:fc:7d:41:
         af:62:43:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:48 2025 by rpki-client