This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
File:                     GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json)
Hash identifier:          9MP+EnR3bO6dAI94UXP2CleAWuIAonRuVYI8+Ub0L9c=
Subject key identifier:   DB:24:64:89:9F:FC:97:26:88:80:CD:13:73:01:76:0B:57:57:CA:52
Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06
Certificate issuer:       /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
Manifest number:          0117
Signing time:             Sun 21 Dec 2025 03:58:20 +0000
Manifest this update:     Sun 21 Dec 2025 03:58:20 +0000
Manifest next update:     Sun 28 Dec 2025 03:58:20 +0000
Files and hashes:         1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: Ur4TncsgN7PaGEwVEc9lw7Dpig2Ub7eVKEuK8+0HFt8=)
                          2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: 6k5p/IoEaHlPBZxEG5I/1TmRBsboDJLoq3IRABT/4wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl
                          rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 03:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D472, serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
        Validity
            Not Before: Dec 21 03:58:20 2025 GMT
            Not After : Dec 28 03:58:20 2025 GMT
        Subject: CN=6947705c-4594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:19:d8:9d:64:d2:31:cd:8e:ba:f9:45:24:7a:
                    dd:27:82:1b:93:78:2c:1b:20:5b:f6:c8:92:29:b5:
                    2f:17:01:52:00:e9:58:ca:d8:a4:89:18:69:3f:09:
                    2a:52:63:1d:9c:25:0a:ee:11:bc:b3:6c:4c:18:02:
                    46:b8:cd:f7:25:23:23:e7:71:49:70:c8:85:3a:72:
                    0e:79:6b:00:1d:87:20:1f:db:7d:ac:98:82:7f:ee:
                    0b:c1:7a:3d:73:84:29:80:0e:a2:e3:9b:ed:52:33:
                    bc:87:88:4a:c6:2f:6c:b4:72:39:8e:38:62:44:c8:
                    4b:7d:4d:0a:90:0f:91:ec:65:e5:eb:b9:b8:65:f8:
                    24:19:35:25:b9:b6:3e:03:32:eb:37:12:75:cd:f1:
                    0e:da:e8:9b:58:e9:5e:56:17:7b:70:bf:e0:06:f6:
                    38:53:9a:0d:72:bf:b1:bf:8f:18:1d:e1:9b:b0:b3:
                    cd:eb:ef:dc:03:d5:69:26:7f:ea:54:d6:ef:7a:69:
                    fe:ac:2c:18:8a:9b:59:9a:3f:03:fe:07:94:5a:96:
                    3e:05:05:b8:84:94:cc:78:f3:2e:81:66:94:04:af:
                    c6:01:49:9d:43:31:f2:2b:45:89:3e:12:dc:14:a8:
                    62:4e:f8:d6:1d:96:01:16:f4:e5:48:ce:5a:0a:74:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:24:64:89:9F:FC:97:26:88:80:CD:13:73:01:76:0B:57:57:CA:52
            X509v3 Authority Key Identifier:
                keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:27:8a:20:7e:ee:8c:29:76:8d:1b:1d:34:32:bb:3b:b8:76:
         c4:6e:a8:13:d4:fa:02:02:86:4e:f2:c7:d3:40:9d:08:5f:5f:
         06:6a:e3:7e:e9:69:ed:57:c4:26:e3:ce:79:8d:b6:db:34:01:
         f7:f1:ec:47:74:cf:79:48:51:5f:e2:a1:21:7b:6b:94:d3:ac:
         83:68:40:c7:d8:fb:4f:ab:c1:27:0c:cd:7a:a7:56:84:a2:3f:
         58:96:0d:ed:de:42:15:52:e5:ac:15:c7:f2:31:ae:8a:f6:7a:
         89:d2:ef:0a:f6:41:93:a4:11:ac:9c:9c:68:f2:10:fd:49:b8:
         af:9f:3a:98:7a:89:a0:42:46:cc:eb:c7:6c:ba:44:e3:1d:9d:
         16:a5:f7:b1:eb:b3:5b:7e:b3:b8:bd:2d:e5:28:02:28:57:b5:
         d2:77:17:c6:3b:8c:0f:69:84:33:67:83:3c:32:3c:45:9a:30:
         1f:6d:86:2d:31:17:02:b1:6a:c2:84:ae:78:5c:75:43:d1:53:
         6d:50:8d:95:36:0b:bb:a0:f3:b4:be:7b:59:b3:77:3b:5f:d9:
         f3:0f:d6:0d:a0:3d:7b:a2:7b:26:1a:47:2c:ee:22:cb:9b:53:
         cb:9d:2b:65:9e:11:ca:44:b1:33:65:19:9e:b4:72:c9:63:fc:
         1b:5c:1c:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q0NzIxMTAvBgNVBAUTKDE4OUYyREVDNUE3MDNGN0Q2Q0ZENUY5NkFBQjVBMkU4
QThERDk0MDYwHhcNMjUxMjIxMDM1ODIwWhcNMjUxMjI4MDM1ODIwWjAYMRYwFAYD
VQQDDA02OTQ3NzA1Yy00NTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5xnYnWTSMc2OuvlFJHrdJ4Ibk3gsGyBb9siSKbUvFwFSAOlYytikiRhpPwkq
UmMdnCUK7hG8s2xMGAJGuM33JSMj53FJcMiFOnIOeWsAHYcgH9t9rJiCf+4LwXo9
c4QpgA6i45vtUjO8h4hKxi9stHI5jjhiRMhLfU0KkA+R7GXl67m4ZfgkGTUlubY+
AzLrNxJ1zfEO2uibWOleVhd7cL/gBvY4U5oNcr+xv48YHeGbsLPN6+/cA9VpJn/q
VNbvemn+rCwYiptZmj8D/geUWpY+BQW4hJTMePMugWaUBK/GAUmdQzHyK0WJPhLc
FKhiTvjWHZYBFvTlSM5aCnTLrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNskZImf
/JcmiIDNE3MBdgtXV8pSMB8GA1UdIwQYMBaAFBifLexacD99bP1flqq1ouio3ZQG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDQ3Mi8xM0E4RkI0NDMx
RTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1AzMXNfVi1XcXJXaTZLamRs
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxBWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDQ3Mi8xM0E4RkI0NDMxRTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1Az
MXNfVi1XcXJXaTZLamRsQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaJ4ogfu6MKXaNGx00Mrs7uHbEbqgT1PoCAoZO8sfTQJ0IX18GauN+
6WntV8Qm4855jbbbNAH38exHdM95SFFf4qEhe2uU06yDaEDH2PtPq8EnDM16p1aE
oj9Ylg3t3kIVUuWsFcfyMa6K9nqJ0u8K9kGTpBGsnJxo8hD9SbivnzqYeomgQkbM
68dsukTjHZ0Wpfex67NbfrO4vS3lKAIoV7XSdxfGO4wPaYQzZ4M8MjxFmjAfbYYt
MRcCsWrChK54XHVD0VNtUI2VNgu7oPO0vntZs3c7X9nzD9YNoD17onsmGkcs7iLL
m1PLnStlnhHKRLEzZRmetHLJY/wbXBxj
-----END CERTIFICATE-----
Generated at Mon Dec 22 06:11:11 2025 by rpki-client