This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File:                     gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier:          BP3Rcwa2YNYSFmXkmhYUHk0QhplnnOQpMDtwoox/u4E=
Subject key identifier:   A6:35:8D:FA:2D:22:1B:19:FF:31:98:34:1C:35:2C:7A:E2:81:53:EF
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer:       /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number:          D1
Signing time:             Sun 21 Dec 2025 04:52:51 +0000
Manifest this update:     Sun 21 Dec 2025 04:52:51 +0000
Manifest next update:     Sun 28 Dec 2025 04:52:51 +0000
Files and hashes:         1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: EwDW1tOxk4mCcyj8zsJGvInYtPnh4qcqs/H4D04Zers=)
                          2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: iLpw/uJbge7uZ/WmLMuhiuh6b3ClTayyECZNu36JGVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
                          rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
        Validity
            Not Before: Dec 21 04:52:51 2025 GMT
            Not After : Dec 28 04:52:51 2025 GMT
        Subject: CN=69477d23-65fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:b7:41:bf:2e:6f:14:1c:db:bd:60:b8:2a:
                    8b:fd:18:5f:83:22:b8:cd:dd:3e:80:99:b0:f5:e8:
                    39:42:b1:a4:28:f9:ba:b1:14:bd:bd:1f:3e:9d:a7:
                    9b:73:ba:1b:be:7c:ff:d5:91:39:94:5e:0a:fe:e1:
                    2a:03:a0:eb:cc:84:46:b4:d0:9f:dc:19:53:ad:93:
                    57:b4:1e:5d:24:72:23:01:7e:2d:26:14:b4:2f:22:
                    b3:97:f7:df:74:7e:a4:96:56:65:7d:aa:a4:2d:4a:
                    39:bd:49:df:52:6e:52:e4:ea:1d:b6:eb:ed:e9:98:
                    99:cd:03:29:3f:2a:f7:c9:17:bc:4c:d9:52:59:f5:
                    e5:fa:9f:38:fe:2b:55:ba:88:95:57:5d:61:64:ba:
                    9c:33:6e:c2:29:5d:9c:66:24:a5:c7:e3:a1:3b:78:
                    07:5b:c3:8a:57:91:14:dc:31:e9:c5:cd:0f:0f:2f:
                    7c:ed:2c:bd:a2:07:67:03:42:b1:6e:71:7c:1c:c9:
                    68:50:0f:a7:76:ab:39:38:e0:34:44:78:3a:09:72:
                    6f:20:91:f8:24:0f:58:00:aa:85:36:0e:19:a5:a2:
                    ee:2e:48:96:18:60:dd:4f:33:2f:97:fc:88:8c:2e:
                    ef:f4:ae:5e:fd:c6:5f:e2:6f:3e:55:8c:af:3c:99:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:35:8D:FA:2D:22:1B:19:FF:31:98:34:1C:35:2C:7A:E2:81:53:EF
            X509v3 Authority Key Identifier:
                keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7d:e4:ab:5b:62:c2:1e:bf:a8:b9:d3:07:ba:a1:d3:3a:c1:
         3c:83:2c:0a:fe:63:f3:fe:87:98:3b:15:b2:d3:63:82:2b:39:
         fb:3c:51:69:ad:9f:07:d7:29:50:49:fc:a6:cf:a6:60:fd:a0:
         ab:ed:45:b1:70:23:06:c2:0c:bd:81:2b:da:40:4e:3e:f2:64:
         03:20:6a:d6:c6:f1:ad:48:75:d6:84:a3:3a:81:7b:c2:dd:65:
         0f:c6:a3:45:0b:e5:99:88:e5:30:16:bc:e0:8f:20:68:ab:aa:
         ea:fa:80:56:67:c7:ac:e4:df:13:1d:af:35:0e:b2:b0:1b:95:
         61:70:04:9b:10:7a:c8:c3:84:14:99:f1:a1:c9:6c:d5:1b:c5:
         83:7a:fa:15:3a:57:df:9a:fc:ce:fc:c7:3a:63:0c:61:5c:f2:
         89:61:6c:60:89:9e:6d:02:1d:3e:cc:a6:e1:65:6f:f2:e9:93:
         12:b1:b6:94:12:f9:cf:99:88:5d:b1:60:30:cb:00:47:e5:57:
         1a:a5:83:1a:55:ba:9d:4e:96:10:d9:49:75:51:d6:5a:2a:8d:
         81:39:5c:be:10:07:04:94:c5:1a:f0:77:37:85:bb:70:29:ec:
         70:4a:be:f2:90:95:0d:b5:2c:90:a1:eb:6f:6c:ad:6e:05:4c:
         14:c9:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:30:25 2025 by rpki-client