This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
File:                     gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft (raw, json)
Hash identifier:          Q+eZuoX/WNY9h4XGNJ5Z3rqQNCFCZQxo8TsL1AtSz8Y=
Subject key identifier:   8C:B4:3C:29:17:CD:28:12:B9:E5:2B:22:B9:FC:FD:B5:1C:5D:13:37
Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
Certificate issuer:       /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
Manifest number:          63
Signing time:             Tue 23 Dec 2025 06:14:40 +0000
Manifest this update:     Tue 23 Dec 2025 06:14:39 +0000
Manifest next update:     Tue 30 Dec 2025 06:14:39 +0000
Files and hashes:         1: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl (hash: ZNlwImnpwpTfJs/ZDVgt9/RY96owKGKKIxJVdVNQaJg=)
                          2: 8A9CF2DEB4D311F0A84CEE1EC4F9AE02.roa (hash: S8iQ1WKz3ZWJ+bpf44oizB2yWlxKeDlDls7es6li9nw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
        Validity
            Not Before: Dec 23 06:14:39 2025 GMT
            Not After : Dec 30 06:14:39 2025 GMT
        Subject: CN=694a3350-5830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fa:7a:01:84:31:d3:bd:c4:24:26:eb:24:86:
                    13:9a:f0:83:de:15:d7:ff:4c:45:83:af:cb:92:89:
                    27:ef:74:c8:76:af:8a:60:b5:5c:d0:55:f9:e5:e5:
                    3e:f9:ac:e0:f4:5d:f4:5d:b5:dc:e0:a3:5e:69:f5:
                    bf:8e:82:7d:55:a3:d3:53:09:52:e6:e6:89:40:4b:
                    52:6b:ce:d4:10:26:d6:9f:4c:50:ab:d6:72:90:1d:
                    77:0d:77:77:be:be:04:be:4d:60:d2:71:c8:7c:e9:
                    e7:71:5e:a3:78:c8:92:e4:87:22:1e:83:9a:b5:1f:
                    c8:fb:d4:1b:18:71:d8:19:73:f5:d0:95:a2:b3:d1:
                    8d:97:68:39:91:0a:93:a0:23:20:6f:ec:3a:e7:14:
                    7a:c1:ed:e8:05:d8:04:28:2b:7f:bb:1a:e9:8c:96:
                    f8:26:71:d2:71:0c:00:1b:34:bc:14:84:ec:62:12:
                    78:08:a7:d3:b8:b6:7e:eb:f8:52:27:26:3d:5e:c0:
                    2c:6d:27:47:07:fc:8b:21:34:ba:68:f3:00:ec:b6:
                    7f:34:a3:8b:18:42:a6:9f:32:b3:74:22:31:45:93:
                    c2:3d:2a:ea:86:c5:f9:93:99:e3:e3:61:d8:a8:c1:
                    f8:cb:72:f0:ea:5a:c5:c8:9b:87:f2:d7:96:17:52:
                    ef:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B4:3C:29:17:CD:28:12:B9:E5:2B:22:B9:FC:FD:B5:1C:5D:13:37
            X509v3 Authority Key Identifier:
                keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:76:29:b4:ad:31:82:06:d6:ba:c3:18:33:2e:d5:09:13:78:
         6d:47:22:cd:c3:dc:8d:9a:e9:9d:2e:f7:70:4e:31:5a:45:7b:
         18:28:85:08:f1:04:d5:1d:b1:9e:eb:6e:75:ec:5b:7e:c5:a9:
         95:3e:69:df:a4:ec:43:b5:90:e7:12:00:b4:fc:8f:c4:88:02:
         db:43:17:28:70:71:56:37:a7:ed:cf:55:61:d1:19:65:89:c7:
         39:6a:ed:cf:86:0c:77:c6:48:48:41:e8:59:2c:08:0e:40:ee:
         1a:00:02:0e:f9:4e:73:db:b4:36:9a:dc:e7:82:c9:ed:58:9b:
         88:82:d4:85:e2:5f:97:05:07:a2:8c:f1:cf:8d:df:08:3d:00:
         a7:c6:8d:ec:7f:25:25:ab:01:9e:6d:5a:c7:5b:94:f5:84:d8:
         7c:e1:13:2c:b8:52:49:29:87:ae:bb:f3:a7:82:a0:e2:e8:24:
         2b:f3:e2:af:2a:73:26:c1:c1:ce:5c:f2:0a:c8:70:1b:ba:55:
         43:ef:bb:57:92:30:e0:10:c9:8c:5a:76:e6:e7:ed:52:0d:1a:
         6f:be:69:49:f5:f9:6b:8c:98:e1:35:c7:a4:49:b5:f0:cf:53:
         ed:ff:8a:0b:03:bb:ea:0c:4c:26:02:1d:ce:51:32:46:09:ec:
         1a:ac:4c:3d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QTBGNzExMC8GA1UEBRMoODJDQTEwNERDNUYyQUZGNTMzRkJGNjhDRjI5OEY0MEZC
RDQ4MUYwNDAeFw0yNTEyMjMwNjE0MzlaFw0yNTEyMzAwNjE0MzlaMBgxFjAUBgNV
BAMMDTY5NGEzMzUwLTU4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDq+noBhDHTvcQkJuskhhOa8IPeFdf/TEWDr8uSiSfvdMh2r4pgtVzQVfnl5T75
rOD0XfRdtdzgo15p9b+Ogn1Vo9NTCVLm5olAS1JrztQQJtafTFCr1nKQHXcNd3e+
vgS+TWDScch86edxXqN4yJLkhyIeg5q1H8j71BsYcdgZc/XQlaKz0Y2XaDmRCpOg
IyBv7DrnFHrB7egF2AQoK3+7GumMlvgmcdJxDAAbNLwUhOxiEngIp9O4tn7r+FIn
Jj1ewCxtJ0cH/IshNLpo8wDstn80o4sYQqafMrN0IjFFk8I9KuqGxfmTmePjYdio
wfjLcvDqWsXIm4fy15YXUu/lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjLQ8KRfN
KBK55Ssiufz9tRxdEzcwHwYDVR0jBBgwFoAUgsoQTcXyr/Uz+/aM8pj0D71IHwQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMEY3LzBEOENDOUQ2NzY2
QzExRjA5RkNBMTkyREM0RjlBRTAyL2dzb1FUY1h5cl9Vei1fYU04cGowRDcxSUh3
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ3NvUVRjWHlyX1V6LV9hTThwajBENzFJSHdRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB
MEY3LzBEOENDOUQ2NzY2QzExRjA5RkNBMTkyREM0RjlBRTAyL2dzb1FUY1h5cl9V
ei1fYU04cGowRDcxSUh3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAOV2KbStMYIG1rrDGDMu1QkTeG1HIs3D3I2a6Z0u93BOMVpFexgohQjx
BNUdsZ7rbnXsW37FqZU+ad+k7EO1kOcSALT8j8SIAttDFyhwcVY3p+3PVWHRGWWJ
xzlq7c+GDHfGSEhB6FksCA5A7hoAAg75TnPbtDaa3OeCye1Ym4iC1IXiX5cFB6KM
8c+N3wg9AKfGjex/JSWrAZ5tWsdblPWE2HzhEyy4Ukkph66786eCoOLoJCvz4q8q
cybBwc5c8grIcBu6VUPvu1eSMOAQyYxadubn7VINGm++aUn1+WuMmOE1x6RJtfDP
U+3/igsDu+oMTCYCHc5RMkYJ7BqsTD0=
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:52 2025 by rpki-client