This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
File:                     ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft (raw, json)
Hash identifier:          CL7sOB2qCOHYVFsDSkhEgqaTwQbiKiu0AQQw72gb/xI=
Subject key identifier:   C1:F2:AC:E6:23:3E:DD:E3:80:E5:6B:22:75:51:F3:4A:6C:1E:AE:96
Authority key identifier: 82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
Certificate issuer:       /CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Certificate serial:       0677
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
Manifest number:          0672
Signing time:             Thu 18 Dec 2025 21:56:06 +0000
Manifest this update:     Thu 18 Dec 2025 21:56:06 +0000
Manifest next update:     Thu 25 Dec 2025 21:56:06 +0000
Files and hashes:         1: ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl (hash: NbOus/9qh4JQoGbipdbnRdcn2/As6Q0OSxr2JsCK0d0=)
                          2: 92967BBA78F811ECAF1C286CC4F9AE02.roa (hash: ljHjZ6k7MiI2pN3VX1Cgx4pPDWP1h2Cokp04xup/nNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl
                          rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1655 (0x677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC777, serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
        Validity
            Not Before: Dec 18 21:56:06 2025 GMT
            Not After : Dec 25 21:56:06 2025 GMT
        Subject: CN=69447876-eb0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:ae:c1:a6:00:b1:66:b4:a4:90:91:07:dc:
                    f5:1f:fb:84:e8:b7:bb:de:f5:8b:df:46:f1:cb:dd:
                    0b:05:e3:2f:09:60:f9:24:d9:33:36:f3:f3:41:ed:
                    e3:fc:22:f7:58:47:ef:2a:57:9a:e4:1a:de:0a:41:
                    3c:61:15:98:75:5e:c1:1b:88:76:3b:36:1a:da:37:
                    2f:ac:f2:a7:a4:8b:f5:79:a9:44:6d:19:1c:a0:ba:
                    6c:e0:9b:4e:7b:29:0c:c5:36:13:d5:49:78:7a:e3:
                    21:6a:b4:9f:a3:68:49:05:36:53:ca:a0:8f:23:63:
                    ee:2a:e0:b4:10:58:26:36:1d:50:11:0b:a3:31:47:
                    6b:26:6e:d7:02:fa:86:cd:99:22:c0:92:a9:88:62:
                    e1:7e:9b:0b:72:f6:4b:c8:33:4b:ce:21:7c:24:d6:
                    4c:57:d4:88:11:c8:16:12:e7:73:a6:ba:f6:82:9a:
                    31:77:81:c2:69:bc:4f:1c:1f:c4:bb:b2:c3:7e:da:
                    14:e2:b2:40:b3:5a:fd:57:4e:5d:76:e9:7a:bd:e5:
                    b4:60:37:a4:d6:d7:84:8b:9f:f8:da:e5:4e:2c:48:
                    9e:97:d4:a9:7e:0b:b2:22:87:7f:f6:c7:cc:bd:db:
                    36:3a:91:2c:ef:65:74:d3:d6:b8:c9:39:e1:e7:17:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F2:AC:E6:23:3E:DD:E3:80:E5:6B:22:75:51:F3:4A:6C:1E:AE:96
            X509v3 Authority Key Identifier:
                keyid:82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:75:ed:59:2d:d8:63:64:68:5f:88:ad:1e:e9:ff:72:16:dc:
         f9:36:ac:ea:34:c9:ca:c1:fc:a7:c3:93:4e:59:30:97:1e:b4:
         a4:81:f3:7a:02:ff:d8:c4:3f:76:4a:10:38:69:d7:12:bf:b9:
         a8:e0:44:e1:01:5f:e1:35:c4:be:2d:9e:8d:24:f9:72:87:ad:
         f9:a8:a7:d3:1a:65:86:44:ab:df:d6:74:d3:98:2e:58:6f:eb:
         e8:31:c4:3a:eb:78:6c:cf:f1:ff:c2:7e:26:54:c8:16:b8:78:
         2c:00:92:5a:f7:ea:87:96:3d:55:63:e1:00:8c:45:20:67:80:
         4c:0c:0d:ce:fd:31:5e:c1:d9:88:90:0b:27:6b:c4:a4:95:33:
         12:eb:42:49:b0:40:30:8c:62:85:e1:0c:86:e3:e6:f4:36:7b:
         cb:fc:4b:01:cd:9b:f1:6e:24:e0:98:8d:00:94:76:96:3f:a2:
         fe:fb:7d:4f:fe:50:64:57:61:a3:ba:ac:b8:55:db:2e:fc:09:
         00:3e:ff:80:58:cf:90:45:65:48:26:a4:84:06:14:c1:a5:19:
         a0:35:a8:d9:80:ec:c9:55:3a:25:8d:67:f2:bc:6e:08:d5:aa:
         a9:e0:cf:9d:bb:a1:d5:7a:97:2a:01:cf:a9:82:54:20:fe:a1:
         b6:ac:73:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:16:19 2025 by rpki-client