This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
File:                     GOzmKe7ztqJpbrqzSz-wLviouIc.mft (raw, json)
Hash identifier:          uLrxYme30zuOIO/q84sgFqi7cOoCbhDVVvSfI+kIv9I=
Subject key identifier:   57:09:39:CB:94:36:22:55:8F:AC:11:DC:9F:F0:D1:6F:9C:1D:3F:A5
Authority key identifier: 18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
Certificate issuer:       /CN=A91951AF/serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
Manifest number:          2A
Signing time:             Sun 07 Dec 2025 05:39:47 +0000
Manifest this update:     Sun 07 Dec 2025 05:39:46 +0000
Manifest next update:     Sun 14 Dec 2025 05:39:46 +0000
Files and hashes:         1: GOzmKe7ztqJpbrqzSz-wLviouIc.crl (hash: bFpxoiynr3W2olYlMhalMuK1j6+AzvuFFY0SNudrXZA=)
                          2: 0A2469F095E011F0B2B5CE77C4F9AE02.roa (hash: 2TUs1YZ2Eqxk5relT6yIF5miILYOJS8mbAVh6fsYe7A=)
                          3: 8201D598AD9B11F080BD6B82C4F9AE02.roa (hash: XnkbG03fdUQKsnLMxvWnS0QGXcRDDBgD4VhVjpHPreg=)
                          4: 0A86FD7C95E011F0B2B5CE77C4F9AE02.roa (hash: 9TR+7jMSEj42WP2HgrvlmxnuqGeYCxwav28DarkHDK0=)
                          5: 9F82952895C511F0B89BD26BC4F9AE02.roa (hash: +1Bt6gAyfoUFpig1US0y9IYf8gqxESp603kTB9cS2LI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
                          rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91951AF, serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
        Validity
            Not Before: Dec  7 05:39:46 2025 GMT
            Not After : Dec 14 05:39:46 2025 GMT
        Subject: CN=69351323-7bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d6:f4:11:92:d2:76:2c:67:4a:2f:71:ab:ec:
                    8c:22:a9:d8:1c:df:b9:a3:24:e7:48:98:12:79:d7:
                    22:a8:e1:4c:23:3c:9c:a9:11:7c:90:39:97:68:fc:
                    9d:66:ee:14:87:0d:a9:90:8e:2c:d0:b9:d2:ef:d6:
                    1e:ee:82:0a:61:36:d3:ba:e5:3b:3d:ed:08:5d:70:
                    a3:8f:36:56:1c:41:c6:df:61:15:37:11:71:6b:0d:
                    82:ee:0a:b1:08:68:b4:17:27:8c:e8:99:45:50:10:
                    82:0c:3f:bd:e8:92:b4:cd:56:f1:ad:7f:c5:ba:59:
                    5d:75:70:24:49:80:62:73:80:8d:e1:f6:53:af:92:
                    47:12:93:c2:6a:6e:3b:78:02:be:b4:2a:82:4a:b1:
                    8e:d1:9f:47:32:47:ed:da:59:aa:bc:63:c1:39:42:
                    8c:54:67:b9:05:9c:77:98:3b:9d:e9:99:65:4c:f3:
                    b7:64:fe:cf:1b:12:fc:ff:11:a8:86:66:d6:3c:62:
                    ea:02:ed:67:d5:e7:f6:22:3d:12:dd:0c:49:de:cf:
                    b2:ff:39:41:8a:69:a6:6c:d1:17:47:cd:7d:2f:94:
                    4f:c6:b5:9d:95:cd:fc:79:ec:7e:d0:5b:27:47:08:
                    89:df:b9:d8:07:64:30:9b:5b:3b:61:2a:53:00:9c:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:09:39:CB:94:36:22:55:8F:AC:11:DC:9F:F0:D1:6F:9C:1D:3F:A5
            X509v3 Authority Key Identifier:
                keyid:18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:37:ed:03:37:71:63:59:e2:2e:e8:9d:d0:29:25:0e:e4:7f:
         47:51:99:01:7c:d8:8f:c6:ec:55:f6:62:b5:97:3b:e4:cd:fa:
         6b:ba:26:00:1d:b1:96:4c:c8:cd:bb:d8:7f:5a:e8:72:03:b9:
         db:16:cb:1d:b2:27:a1:20:32:fb:1b:53:89:7a:03:7f:e6:7e:
         70:fd:31:9d:c5:f0:b7:1e:49:88:e0:ac:7e:13:05:eb:e6:d2:
         c5:b7:cf:e5:f9:26:d6:13:98:9b:11:5a:dc:a5:6d:d3:92:53:
         3d:23:1a:50:66:44:a0:ed:6e:28:8d:ca:2b:e2:2b:58:58:98:
         8e:e8:79:2c:10:37:ef:66:58:99:4d:0d:6f:f5:96:22:b1:08:
         a9:ae:dc:ef:a0:d9:7e:05:19:90:84:c3:99:2f:09:31:0d:22:
         85:6d:8a:24:6d:17:b3:8f:2e:97:65:2d:de:2e:65:5e:ff:ee:
         7c:84:08:9c:22:ee:66:b5:c6:cb:de:a1:c1:28:c3:9f:6a:8b:
         cc:2c:30:83:33:04:63:50:ec:2f:67:27:70:d2:e5:ac:b3:90:
         71:f7:e4:e9:e6:cc:c3:ea:0d:9f:b6:ac:22:29:d8:45:0a:a4:
         5e:1e:64:bf:22:91:99:07:a7:10:56:ab:a6:97:eb:fa:05:d4:
         ea:7e:51:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:11:01 2025 by rpki-client