This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
File:                     gSJD5rXQ3hGucMcns50fIeOurAM.mft (raw, json)
Hash identifier:          nHkEY5uPCCkmLZymiqJPALOEeQhnC52tGU9FwkptGeU=
Subject key identifier:   C3:B6:40:BE:6B:BA:AF:97:7F:24:F4:4E:47:B2:C0:F5:72:F7:E2:2B
Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
Certificate issuer:       /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
Manifest number:          010A
Signing time:             Sun 21 Dec 2025 04:12:12 +0000
Manifest this update:     Sun 21 Dec 2025 04:12:12 +0000
Manifest next update:     Sun 28 Dec 2025 04:12:12 +0000
Files and hashes:         1: gSJD5rXQ3hGucMcns50fIeOurAM.crl (hash: XkvWAHElJPD4Lj+W6uS6bbdvtGJb8iu/H9Ig9Hlmm48=)
                          2: B02CCB344E0C11EF9175067FC4F9AE02.roa (hash: B07v/r28GGPExOvdtIgZQOaQqr8pYN3jGjnhD5+9r68=)
                          3: 546C4C7C4E1911EFA1FB9E57C4F9AE02.roa (hash: IGD/nUTNGHPyuAjXeELESWHybLe2c2lWOrT+ME6IDwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
                          rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
        Validity
            Not Before: Dec 21 04:12:12 2025 GMT
            Not After : Dec 28 04:12:12 2025 GMT
        Subject: CN=6947739c-ea2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:e7:c2:f2:c9:7b:58:76:e9:3a:69:b9:99:
                    cb:d4:59:34:f8:81:b6:70:0f:37:0b:fa:3b:c0:f6:
                    56:37:72:56:31:22:01:c5:de:42:b4:bd:19:bc:33:
                    0f:51:bb:98:ef:8c:28:70:85:33:7e:3c:4f:50:09:
                    fd:10:cd:4c:3c:6b:21:8c:80:9d:71:f1:9d:ce:9c:
                    e5:07:a9:a0:04:40:72:e3:1f:33:4e:96:10:ce:35:
                    f8:e8:b5:38:39:72:6c:56:fe:ac:02:b0:ca:af:c1:
                    3c:62:91:42:01:ca:32:b7:44:52:a9:72:e5:20:0c:
                    64:b2:33:ac:3a:86:be:0a:6e:97:46:f9:21:01:6d:
                    fd:6d:39:f9:d2:44:84:48:aa:ee:d5:d1:8b:a9:7b:
                    5c:ef:b0:ee:c4:3a:4d:ec:56:ea:de:97:de:c5:53:
                    6d:30:28:3e:b2:3f:42:f2:cf:a6:2c:ce:98:8f:d9:
                    80:a4:31:60:3a:ee:86:cf:e4:d7:bf:05:0c:1b:21:
                    35:dc:26:99:82:ca:ba:05:e5:65:34:59:45:b7:af:
                    f3:3e:e2:4d:7f:38:ad:b1:ce:5c:d7:03:46:c3:53:
                    42:90:ce:79:58:91:99:98:05:92:2c:2c:9c:aa:ad:
                    fc:fa:52:dd:27:44:d5:63:87:8b:1f:f9:fd:83:98:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B6:40:BE:6B:BA:AF:97:7F:24:F4:4E:47:B2:C0:F5:72:F7:E2:2B
            X509v3 Authority Key Identifier:
                keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:36:7f:44:9a:c9:5e:e0:c0:67:8b:7d:f1:75:79:68:59:73:
         1e:06:ad:b3:16:7a:fc:bb:9a:dc:79:1f:31:72:78:7e:47:a6:
         ea:ae:b7:71:9b:78:a6:57:df:0e:f5:c0:9f:64:a0:84:c7:0c:
         9a:b6:93:a9:a6:24:a2:3f:b0:6a:9b:50:a2:92:0b:02:1d:6b:
         ad:58:79:62:28:17:10:a2:e7:4c:01:57:0e:93:af:1f:8e:4d:
         b2:02:b4:3b:5d:35:10:b1:69:79:a6:cf:d9:d1:47:de:70:8d:
         c2:74:52:38:64:a9:6a:23:e2:04:a2:8b:c9:b5:50:02:37:5d:
         63:1b:52:40:cd:c5:3d:cc:37:20:23:25:d6:1f:ab:82:ab:0e:
         64:0b:90:d0:de:76:3f:fe:e1:75:f3:9e:60:47:7c:09:bc:1b:
         8b:7c:01:0c:04:34:be:d8:7c:45:24:cf:4f:90:93:c2:e7:ab:
         fc:86:56:b0:20:51:d8:62:5a:5f:da:9e:96:c9:27:dd:2e:ec:
         a5:5f:dc:ed:88:fc:da:49:2a:82:d4:f0:81:80:43:a7:a1:09:
         93:2c:95:48:df:fe:82:28:1a:ca:3a:a7:56:1f:f3:b0:f2:52:
         d0:a6:cb:f0:19:93:1e:10:e3:68:be:f8:e3:ce:47:6b:d7:33:
         c0:27:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:18:20 2025 by rpki-client