This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
File:                     GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft (raw, json)
Hash identifier:          uEV2wccNyjPdF9ZLyd+hB2kePJEzt/aglZ4ZXnQURNc=
Subject key identifier:   85:D6:D5:C3:C9:10:6B:66:35:87:A8:F3:C4:7B:D1:00:38:30:4F:14
Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39
Certificate issuer:       /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
Certificate serial:       0EB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
Manifest number:          0E9F
Signing time:             Sat 20 Dec 2025 17:24:18 +0000
Manifest this update:     Sat 20 Dec 2025 17:24:18 +0000
Manifest next update:     Sat 27 Dec 2025 17:24:18 +0000
Files and hashes:         1: GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl (hash: vJOe+icNmx+Xh/Fo2BTHPTV9d6MlDjwuDubqtwkAraw=)
                          2: 192968FAA43411E9BF46490BC4F9AE02.roa (hash: m1DwXGY9qRUMrm5nwSa7A62fQnkXzMeC3XhEB70M3Ec=)
                          3: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (hash: 8+IpnBwQHZFdU/qAAvoleEEL7Zd7U6oO3b3IOyhASzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl
                          rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3766 (0xeb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F4B0, serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
        Validity
            Not Before: Dec 20 17:24:18 2025 GMT
            Not After : Dec 27 17:24:18 2025 GMT
        Subject: CN=6946dbc2-071f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3d:4a:3c:8e:61:d4:e5:63:50:b9:de:6a:f0:
                    f2:9b:21:57:0c:3d:3e:d8:f9:bc:96:4f:df:cb:a7:
                    66:6a:76:f6:45:e3:88:02:6e:d5:0f:91:5b:a4:02:
                    2d:7f:20:ea:19:d9:01:09:37:a5:d4:2f:56:b8:5d:
                    b3:2d:59:ed:f5:9a:28:b9:ea:c1:19:24:a0:24:36:
                    03:d8:1a:f8:71:60:07:77:25:3a:6c:a3:db:68:18:
                    1a:fb:03:c0:b6:b9:13:e9:3b:5c:f0:59:e3:99:c4:
                    5a:9c:cd:e1:b2:91:44:17:bd:8e:4a:23:ae:ba:6a:
                    8e:3d:70:2d:c1:c3:e3:41:6b:45:94:5c:94:5c:33:
                    dc:c2:0b:a8:8a:e2:61:d7:a1:55:ca:06:ac:8d:db:
                    09:9e:75:4f:0d:b4:92:45:15:a3:2e:5c:3f:28:0e:
                    90:de:9c:85:1b:6c:c3:89:94:6a:e8:83:bf:16:73:
                    20:dd:66:1a:29:c8:85:26:23:51:31:6a:74:f0:5e:
                    95:b3:4c:d4:f6:d4:32:7c:ed:26:e2:a1:a7:7d:56:
                    6f:d7:ae:95:46:03:45:69:53:38:c4:9c:55:bd:8f:
                    0a:33:5e:99:cf:b1:09:8f:89:6e:a3:fa:e7:0f:c3:
                    91:52:72:28:55:8e:3a:69:92:9e:d9:c1:de:8d:ee:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D6:D5:C3:C9:10:6B:66:35:87:A8:F3:C4:7B:D1:00:38:30:4F:14
            X509v3 Authority Key Identifier:
                keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:6c:ad:a3:3e:3b:3e:79:19:40:01:ea:0b:fd:b7:fa:43:
         74:10:5b:d3:be:c9:be:52:f9:bf:6e:fd:00:8f:5a:73:f1:01:
         3f:ee:35:7f:b0:5e:6c:8e:d2:3b:7a:45:53:cc:4c:83:16:79:
         72:8a:a7:61:0b:30:59:cf:e5:45:5e:a2:8a:c9:80:e1:18:97:
         64:88:fb:65:4b:5b:97:96:24:8c:b5:e3:73:46:ae:e6:2a:7d:
         bd:36:85:bc:f4:91:da:eb:09:1c:83:f6:f4:b7:bb:bc:0c:c3:
         e0:e2:e0:da:97:28:c4:51:5d:71:4c:7a:e9:2f:d0:dc:f6:6d:
         a3:91:53:28:47:c6:4a:07:09:7e:ad:d8:10:43:f4:b9:1f:5f:
         85:1c:12:ec:08:02:13:6a:d3:ed:73:c0:03:40:f4:61:e0:9e:
         53:8c:c7:a3:8a:c2:f0:48:4e:09:7f:75:69:1e:d1:01:e7:b3:
         fa:dc:0b:69:94:05:cc:df:eb:2e:fa:dc:ed:00:2c:c9:fc:ec:
         9a:73:b2:7f:d3:7c:c5:4f:a9:a3:6d:a8:dd:ef:ec:63:f8:d6:
         42:d9:35:cf:05:5d:10:3d:1a:5c:87:58:b4:4e:c0:97:94:c1:
         5e:f7:e0:e7:22:38:fc:82:70:7d:6c:6d:6d:c0:14:3d:99:58:
         4f:cd:80:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz
MEVBMkQwMzkwHhcNMjUxMjIwMTcyNDE4WhcNMjUxMjI3MTcyNDE4WjAYMRYwFAYD
VQQDDA02OTQ2ZGJjMi0wNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9D1KPI5h1OVjULneavDymyFXDD0+2Pm8lk/fy6dmanb2ReOIAm7VD5FbpAIt
fyDqGdkBCTel1C9WuF2zLVnt9ZoouerBGSSgJDYD2Br4cWAHdyU6bKPbaBga+wPA
trkT6Ttc8FnjmcRanM3hspFEF72OSiOuumqOPXAtwcPjQWtFlFyUXDPcwguoiuJh
16FVygasjdsJnnVPDbSSRRWjLlw/KA6Q3pyFG2zDiZRq6IO/FnMg3WYaKciFJiNR
MWp08F6Vs0zU9tQyfO0m4qGnfVZv166VRgNFaVM4xJxVvY8KM16Zz7EJj4luo/rn
D8ORUnIoVY46aZKe2cHeje6UfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXW1cPJ
EGtmNYeo88R70QA4ME8UMB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0
MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjRCMC8yRDI3MDY5MkE0MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0Vm
LUR4Q0hOcUhsLTB3NmkwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsM2ytoz47PnkZQAHqC/23+kN0EFvTvsm+Uvm/bv0Aj1pz8QE/7jV/
sF5sjtI7ekVTzEyDFnlyiqdhCzBZz+VFXqKKyYDhGJdkiPtlS1uXliSMteNzRq7m
Kn29NoW89JHa6wkcg/b0t7u8DMPg4uDalyjEUV1xTHrpL9Dc9m2jkVMoR8ZKBwl+
rdgQQ/S5H1+FHBLsCAITatPtc8ADQPRh4J5TjMejisLwSE4Jf3VpHtEB57P63Atp
lAXM3+su+tztACzJ/Oyac7J/03zFT6mjbajd7+xj+NZC2TXPBV0QPRpch1i0TsCX
lMFe9+DnIjj8gnB9bG1twBQ9mVhPzYDg
-----END CERTIFICATE-----
Generated at Mon Dec 22 01:04:51 2025 by rpki-client