This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft
File:                     g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json)
Hash identifier:          SiUzkkPdTO/yxypUJLjHUKV7tsV5el6YNFnQUpCsUR4=
Subject key identifier:   93:E6:1A:CA:2F:CE:82:17:96:F8:E9:C8:DC:0F:61:1F:DC:01:6F:48
Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E
Certificate issuer:       /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E
Certificate serial:       0B29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft
Manifest number:          0D04
Signing time:             Sat 06 Dec 2025 18:33:57 +0000
Manifest this update:     Sat 06 Dec 2025 18:33:57 +0000
Manifest next update:     Sat 13 Dec 2025 18:33:57 +0000
Files and hashes:         1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: 3Yjb15Oy4eFjNhu+i8CT7Au2FbNJ0e2sOe/9ITlFLxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl
                          rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2857 (0xb29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E
        Validity
            Not Before: Dec  6 18:33:57 2025 GMT
            Not After : Dec 13 18:33:57 2025 GMT
        Subject: CN=69347715-ec92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:55:06:e1:6f:49:72:42:17:34:cf:51:ad:
                    f2:d2:08:2f:08:e0:d8:12:d6:50:40:84:a8:2b:71:
                    5e:7b:d0:3a:14:96:f3:7f:48:96:b0:45:33:1e:1f:
                    19:3e:d3:2b:2b:e3:79:6e:9a:66:89:8d:bc:df:80:
                    cc:ec:78:da:e1:58:85:2a:f8:b9:d3:63:3d:db:c4:
                    ac:d5:f3:ff:2d:5c:15:e5:66:d9:54:5d:33:17:76:
                    8e:78:13:bf:e3:05:a2:c7:99:0c:da:60:35:f8:fd:
                    38:06:1c:77:22:90:eb:d4:af:0a:2b:17:14:d3:59:
                    91:5f:0f:98:6f:1e:8c:75:fb:eb:62:92:fb:cb:af:
                    3f:ef:ba:e2:5e:07:b2:1b:de:33:c8:fb:09:23:65:
                    84:e9:71:fa:81:d2:19:39:88:77:05:d6:59:8a:9d:
                    73:50:f4:bd:13:ca:83:9c:f3:01:68:22:cd:8c:d8:
                    02:03:00:15:5b:6f:e6:c9:c7:bc:e3:f6:7a:57:d2:
                    50:86:c1:74:e0:fa:84:a8:f4:93:9b:e4:f7:76:af:
                    6f:4e:87:96:da:09:fb:63:4c:ad:3b:3b:4d:2a:22:
                    31:b6:e7:68:fd:25:85:c4:ac:ab:29:17:3e:51:5c:
                    f9:88:82:e0:36:72:4e:30:3c:43:02:04:52:27:65:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E6:1A:CA:2F:CE:82:17:96:F8:E9:C8:DC:0F:61:1F:DC:01:6F:48
            X509v3 Authority Key Identifier:
                keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:49:73:80:4a:29:82:eb:14:f7:5e:92:9d:ff:bb:5f:9e:71:
         1e:ac:7c:17:ee:0e:5d:11:3b:52:a9:3a:67:f9:0b:ea:c0:0c:
         60:f6:9a:0b:48:92:e0:a8:98:02:9d:eb:18:2a:3d:17:4b:87:
         8e:ef:2c:81:5d:b3:c7:a7:95:fb:24:13:c2:9e:f5:c4:7b:2b:
         d0:a4:3d:7b:c5:5e:ce:81:78:15:fa:73:c6:51:06:bf:ce:38:
         5a:d6:92:8d:e4:c6:9a:02:fc:5a:0e:f2:1c:34:00:80:db:7c:
         aa:53:26:03:8d:70:72:c8:9c:03:08:b5:15:61:31:72:a1:64:
         c2:2f:35:54:77:8b:64:5d:47:df:52:54:56:35:c2:b4:87:c6:
         41:86:99:6a:39:3a:7b:ad:14:4e:5f:5b:7b:b6:4e:b6:eb:7a:
         67:2c:a3:46:37:ec:df:0a:13:8c:e5:91:8a:e1:57:5a:dd:c9:
         33:8f:8d:f9:a2:ae:43:98:05:81:d0:7d:cb:2a:10:f0:2a:c7:
         db:b7:5b:4f:fd:a8:b1:c2:4b:b6:e6:77:cd:98:be:3a:dd:b0:
         27:76:c4:82:53:6c:94:b7:b3:9e:53:92:95:a8:8d:a3:62:0b:
         ed:3e:e4:f7:eb:05:7f:8a:42:12:a1:66:9f:5b:81:af:b9:fb:
         e1:b4:f5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:46:17 2025 by rpki-client