This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
File:                     GySJViTA9S0agjsvKdrcCOKmJmE.mft (raw, json)
Hash identifier:          gwStpRIZQF6r0Digt5oClBWxYtYZjQXt+O6UntyVY+w=
Subject key identifier:   35:A1:0B:8F:42:0C:06:68:55:5A:0B:9F:37:D8:30:AB:04:CF:1E:A8
Authority key identifier: 1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61
Certificate issuer:       /CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
Certificate serial:       01A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
Manifest number:          01A6
Signing time:             Sun 07 Dec 2025 01:43:00 +0000
Manifest this update:     Sun 07 Dec 2025 01:42:59 +0000
Manifest next update:     Sun 14 Dec 2025 01:42:59 +0000
Files and hashes:         1: GySJViTA9S0agjsvKdrcCOKmJmE.crl (hash: bWLxygHULcPXKQy3ori+0L1/IUxKdFSFF3Pdrfu1pqc=)
                          2: 557745EE4E1B11EEBA53316CC4F9AE02.roa (hash: 0J3C/5LKRpZtNoFr4bVuUTTLQ/TaBpaNWA8a6SWNpPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl
                          rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136385, serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
        Validity
            Not Before: Dec  7 01:42:59 2025 GMT
            Not After : Dec 14 01:42:59 2025 GMT
        Subject: CN=6934dba3-eee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:97:37:42:2e:0d:bb:b0:2d:81:35:1a:21:
                    af:62:82:6a:ed:5b:31:9d:2d:2e:07:e3:c0:06:43:
                    60:a8:d8:6f:17:bd:07:92:28:de:d0:84:54:25:f2:
                    af:7e:08:11:89:d3:4e:44:17:2c:4e:9f:d6:62:84:
                    2a:1c:fe:4c:b7:49:5d:f0:92:4d:44:6e:fe:5f:b3:
                    21:a1:9b:d0:ae:46:c5:0c:0e:01:5c:2a:ba:cf:59:
                    e5:ee:1c:0c:70:1c:ec:ff:33:b6:9d:3d:d6:a0:c7:
                    fb:4c:35:61:8a:9a:cb:4b:05:17:89:d7:50:8f:54:
                    b9:38:b1:b3:b2:c4:06:4f:7b:ec:44:3e:6b:95:9e:
                    44:68:bf:68:7e:3d:54:5c:b0:25:a0:c9:ea:9c:4d:
                    46:d8:46:a9:da:e9:b5:84:ae:ce:ee:f8:b3:c9:f3:
                    da:5e:d9:80:a7:d2:0a:99:e3:49:39:b2:99:9a:bc:
                    f1:5e:20:60:38:2a:40:66:79:6d:05:90:d5:da:1a:
                    9a:3e:d9:21:ce:22:05:23:d8:d5:01:41:46:b6:fa:
                    2f:43:71:79:0c:b6:11:6b:87:45:66:db:de:82:a1:
                    68:9d:49:00:e1:9e:0c:1a:44:d6:54:e2:63:bf:e5:
                    d0:91:41:10:1c:36:49:10:ba:2f:8f:ef:65:72:69:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A1:0B:8F:42:0C:06:68:55:5A:0B:9F:37:D8:30:AB:04:CF:1E:A8
            X509v3 Authority Key Identifier:
                keyid:1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:14:21:f4:36:58:cb:75:0f:12:4c:3c:cf:ae:5d:c4:eb:f1:
         f5:7a:07:e0:62:b5:5a:b1:3a:64:5d:63:2c:72:73:3f:9d:71:
         b0:e9:1d:25:15:8f:8b:88:55:fd:5a:2b:95:b2:de:b9:64:0b:
         27:6a:f5:a7:ce:ad:9c:6f:84:a4:d2:7e:bc:e8:cb:f0:5f:e8:
         70:2a:59:73:a0:98:03:9c:b8:fb:93:d5:03:75:f5:76:9b:8c:
         5a:8b:49:3b:26:ad:eb:f0:22:32:72:9a:20:d3:4d:44:93:2c:
         d1:cb:f7:09:c0:c7:45:c3:8a:34:ff:0b:59:d3:6a:b6:c4:f8:
         94:77:72:15:b6:3b:67:19:c8:b2:54:3e:71:76:cf:cf:61:2b:
         15:2a:63:1e:ac:7a:42:ce:b0:29:3a:41:8a:9d:ed:d9:fb:97:
         ea:0b:5d:a0:ae:8b:c6:47:d8:43:64:34:2b:f1:7e:0d:4b:b4:
         a6:3f:ff:1d:00:ea:59:bd:5a:d8:0c:99:b1:1e:8a:93:66:a9:
         46:34:28:91:b0:38:b6:e6:7a:bc:e6:ae:71:b9:c7:0f:d9:2f:
         bf:1f:db:9d:2a:21:0d:34:6f:c2:58:91:89:ae:81:b2:18:b7:
         6d:1f:c4:ed:9f:3e:93:8f:57:96:c8:05:5e:10:c2:26:02:3e:
         eb:b0:14:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:42:57 2025 by rpki-client