This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
File:                     GQQ80InJeU-nj0WlTqtfK26Rju4.mft (raw, json)
Hash identifier:          tnio96eAe886V3ctCIzokWAu1EktM6Rz9IrgWX8X4a0=
Subject key identifier:   C8:7B:6C:83:91:51:52:77:08:22:F3:7B:8C:E5:C3:CF:D8:D0:82:D1
Authority key identifier: 19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE
Certificate issuer:       /CN=A91A57AA/serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
Certificate serial:       01EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
Manifest number:          01E8
Signing time:             Tue 23 Dec 2025 01:38:33 +0000
Manifest this update:     Tue 23 Dec 2025 01:38:33 +0000
Manifest next update:     Tue 30 Dec 2025 01:38:33 +0000
Files and hashes:         1: GQQ80InJeU-nj0WlTqtfK26Rju4.crl (hash: pYubNhtDbHfQHJJlCJV307Bn9Tjv8xI1PY95uRTxz7I=)
                          2: DFC9BF30F14E11ED992E1316C4F9AE02.roa (hash: PzV7dQ/Ntjwe4VwuBgo5nWo9sWxiEDa03H8RbyLVUfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl
                          rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A57AA, serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
        Validity
            Not Before: Dec 23 01:38:33 2025 GMT
            Not After : Dec 30 01:38:33 2025 GMT
        Subject: CN=6949f299-23c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:f5:9e:06:34:59:1c:be:bb:d0:e7:2e:e7:
                    9d:7a:a9:1a:d6:51:5d:ab:51:c7:f0:99:37:b5:c9:
                    8d:a0:aa:82:17:a9:61:1d:1f:97:1f:59:a6:2a:b2:
                    29:58:b6:c5:05:11:be:89:61:e3:ff:16:25:ab:00:
                    83:44:26:73:69:5e:66:a9:47:52:ab:53:a2:c8:5e:
                    be:87:27:da:46:0c:85:bb:7f:5e:a7:f9:e0:00:6a:
                    94:fb:c7:b4:9d:69:07:1f:65:6b:94:ec:95:34:1a:
                    4b:53:03:2a:99:a5:cc:dd:fe:e2:65:33:32:2f:82:
                    22:3b:d5:3e:a6:10:61:a0:9c:62:73:8f:1d:9a:9a:
                    81:e9:d3:fb:49:3d:3e:d3:e5:3a:af:c1:23:04:1d:
                    e0:bb:0a:7e:9b:0f:4a:d0:00:cf:8d:d7:37:dc:bf:
                    bc:c0:2f:18:be:c7:80:2e:2e:3b:15:30:6e:1b:28:
                    bc:f1:87:f1:68:42:cb:90:a9:73:96:4e:64:59:fc:
                    23:06:38:c7:02:32:7d:f8:ea:a8:26:3c:06:44:4c:
                    63:62:f4:16:48:5b:5b:b7:78:56:4a:99:f2:a4:2d:
                    11:a4:37:01:9d:66:47:37:22:52:04:45:06:63:50:
                    6c:37:37:e2:2c:fe:4e:bc:2f:9c:d1:94:b3:21:c9:
                    44:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7B:6C:83:91:51:52:77:08:22:F3:7B:8C:E5:C3:CF:D8:D0:82:D1
            X509v3 Authority Key Identifier:
                keyid:19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8c:5b:e1:33:13:8f:3e:d9:ea:8a:06:22:a5:ee:57:2e:f7:
         44:1d:2a:e4:9b:02:cd:a7:e8:2c:cd:2d:8c:62:f5:04:18:12:
         cd:84:7b:64:3e:b4:d0:4a:f1:12:bc:b6:92:43:fd:f8:97:c5:
         da:dc:86:96:ba:cb:6d:ff:46:fa:c7:2b:8f:b2:2e:73:0c:09:
         0a:4b:83:0d:ba:13:7b:3d:8e:09:82:48:8f:3b:7b:ac:84:e9:
         1b:09:15:22:68:f8:2e:5f:08:ac:22:4d:24:7b:84:b3:f1:cb:
         78:a6:3d:2b:ad:f3:8a:4e:f9:8b:2c:fe:05:05:f4:eb:1e:85:
         8b:db:4b:50:b7:43:25:a8:00:df:a6:73:7f:03:c8:27:35:f3:
         16:e0:25:2f:38:4c:5a:07:62:6f:97:7b:b2:7c:69:d5:3a:48:
         f2:ec:bb:6a:3d:1f:66:a1:59:e3:a2:71:e5:b6:68:a4:c7:26:
         8c:49:6e:8c:64:dd:5e:6d:cd:1d:80:a3:3d:4f:d0:e5:5c:c7:
         e1:47:33:97:4f:91:9c:e3:ff:78:d5:f8:8c:13:bc:35:7a:96:
         6e:79:95:03:97:5b:b6:d9:ef:7f:29:63:e2:84:3b:65:35:ee:
         c5:98:db:23:da:dc:f4:8c:d6:67:22:7e:8e:4f:f2:4c:77:cf:
         83:cf:72:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:16 2025 by rpki-client