This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File:                     GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier:          gMwPvz19+naOJrQHjVU47oyyXB8jw3xrDO7dGNBO7us=
Subject key identifier:   D0:1C:E1:F9:27:7A:1D:6A:B1:00:57:DB:FE:5D:03:DD:68:E7:34:22
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer:       /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial:       10DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number:          10C3
Signing time:             Mon 22 Dec 2025 17:01:39 +0000
Manifest this update:     Mon 22 Dec 2025 17:01:38 +0000
Manifest next update:     Mon 29 Dec 2025 17:01:38 +0000
Files and hashes:         1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: VGKCG70i45eD5db/HwDBAgbzNIjZqA+IqQvhFOhvpLc=)
                          2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: EHJm/HiHyHS2wDLaVYk3k6uReoau+etZZWwlwm0AUaM=)
                          3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: vyuDgVud8VeU+L1s3GBCpzmY/+n8YurORFgDE2x/P9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
                          rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4317 (0x10dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: Dec 22 17:01:38 2025 GMT
            Not After : Dec 29 17:01:38 2025 GMT
        Subject: CN=69497973-3eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:74:71:1e:b7:5c:40:8b:f5:27:35:bd:5a:41:
                    e7:50:5c:41:07:a7:c0:8c:c1:9d:7f:1e:f8:17:aa:
                    ed:1a:7f:fb:42:ec:fe:bd:2d:cf:b2:a7:90:e7:82:
                    e0:59:60:d1:a4:1f:1e:92:f3:84:85:1e:bd:b6:97:
                    cd:07:a1:6d:08:e2:46:d7:ea:a2:66:41:97:d7:1f:
                    8f:b7:b2:be:54:e7:a5:e6:26:df:09:54:f1:a5:b5:
                    e8:7a:84:9d:e0:ff:d8:f6:de:91:54:57:3b:9b:dd:
                    37:ca:2d:d8:0c:f5:c7:67:4b:30:c8:87:6d:8c:55:
                    07:e8:83:d0:ca:c9:3b:e6:f5:35:32:33:50:d3:b5:
                    02:b8:b5:49:8d:0a:5e:a0:db:52:ff:7e:c2:3c:e2:
                    b8:ea:a2:d3:2f:b3:53:77:8a:16:8b:81:3c:b3:5f:
                    65:8a:6c:31:45:1c:ae:1f:0c:19:eb:18:26:21:e6:
                    19:ae:45:39:b3:c9:5e:2c:96:a8:95:f3:7e:7b:66:
                    9b:36:44:5e:72:9b:45:62:38:f3:f9:70:2d:f0:e4:
                    83:4d:fb:b0:c4:54:de:b1:d5:51:f9:be:2b:b3:d2:
                    49:27:fc:17:82:e0:cb:93:64:bb:a2:7b:ba:d0:90:
                    16:ca:ba:41:4f:c9:ff:e1:7a:2d:96:e6:04:5f:37:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1C:E1:F9:27:7A:1D:6A:B1:00:57:DB:FE:5D:03:DD:68:E7:34:22
            X509v3 Authority Key Identifier:
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:08:63:03:70:94:0d:57:35:1b:a4:57:ab:6b:0b:e6:78:94:
         45:ed:c6:9e:dd:81:a9:f0:2e:06:26:d8:ae:61:6e:73:7b:ee:
         6e:9d:85:3f:e9:d3:06:7d:d2:9a:3d:3c:8a:93:1f:3d:82:5d:
         ce:6e:b8:de:3e:a6:20:c7:9d:b8:59:d1:fa:4e:af:08:bc:e3:
         73:74:21:0a:3f:0c:3f:55:52:06:16:7d:f3:49:72:59:6c:b7:
         97:77:30:f7:70:c5:4b:69:52:fc:5a:6b:1b:d3:49:d0:58:e9:
         64:95:bd:eb:38:b2:83:ff:40:aa:b5:6a:83:0f:02:2c:ac:1e:
         fe:a3:d4:66:2b:fc:0a:e7:23:01:e3:53:2a:ab:8f:e4:e1:c9:
         6f:84:fd:bb:ce:b8:3a:e8:12:93:ae:7a:1e:b0:6e:5f:1d:f4:
         f0:e7:f4:26:31:27:15:a4:94:5a:22:e0:b0:48:82:fd:28:8d:
         fe:49:c2:cd:eb:33:3b:20:41:a8:48:24:e7:1d:c2:7f:46:76:
         89:25:68:50:c0:72:0e:46:31:a7:74:fe:e0:57:ca:07:91:ec:
         2d:16:91:fb:d0:e8:95:86:19:24:25:9b:2c:c1:d9:cc:f7:60:
         46:d3:94:d8:c3:68:e2:f2:87:83:8b:ca:f4:4a:5a:12:ca:9d:
         ce:5a:20:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy
OThDNUU2ODYwHhcNMjUxMjIyMTcwMTM4WhcNMjUxMjI5MTcwMTM4WjAYMRYwFAYD
VQQDDA02OTQ5Nzk3My0zZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2HRxHrdcQIv1JzW9WkHnUFxBB6fAjMGdfx74F6rtGn/7Quz+vS3PsqeQ54Lg
WWDRpB8ekvOEhR69tpfNB6FtCOJG1+qiZkGX1x+Pt7K+VOel5ibfCVTxpbXoeoSd
4P/Y9t6RVFc7m903yi3YDPXHZ0swyIdtjFUH6IPQysk75vU1MjNQ07UCuLVJjQpe
oNtS/37CPOK46qLTL7NTd4oWi4E8s19limwxRRyuHwwZ6xgmIeYZrkU5s8leLJao
lfN+e2abNkRecptFYjjz+XAt8OSDTfuwxFTesdVR+b4rs9JJJ/wXguDLk2S7onu6
0JAWyrpBT8n/4XotluYEXzcZOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAc4fkn
eh1qsQBX2/5dA91o5zQiMB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB
OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDNBOS9CQjdGRkI4RTNBOTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NW
aUFwV3B0c0N2R2NwakY1b1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCCGMDcJQNVzUbpFerawvmeJRF7cae3YGp8C4GJtiuYW5ze+5unYU/
6dMGfdKaPTyKkx89gl3ObrjePqYgx524WdH6Tq8IvONzdCEKPww/VVIGFn3zSXJZ
bLeXdzD3cMVLaVL8Wmsb00nQWOlklb3rOLKD/0CqtWqDDwIsrB7+o9RmK/wK5yMB
41Mqq4/k4clvhP27zrg66BKTrnoesG5fHfTw5/QmMScVpJRaIuCwSIL9KI3+ScLN
6zM7IEGoSCTnHcJ/RnaJJWhQwHIORjGndP7gV8oHkewtFpH70OiVhhkkJZsswdnM
92BG05TYw2ji8oeDi8r0SloSyp3OWiB+
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:45 2025 by rpki-client