This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
File:                     GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json)
Hash identifier:          LKTPWEiu2MOWrfTlPdiSDLtZLnXg9jCOYJuyKGE5RYo=
Subject key identifier:   51:A4:59:B6:E7:0D:0F:38:C5:7D:0E:AE:02:82:DF:BB:3B:81:0A:38
Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40
Certificate issuer:       /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
Manifest number:          99
Signing time:             Fri 05 Dec 2025 04:21:35 +0000
Manifest this update:     Fri 05 Dec 2025 04:21:35 +0000
Manifest next update:     Fri 12 Dec 2025 04:21:35 +0000
Files and hashes:         1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: KY9jWQqROhzRtzo/9YjhlD/plDMIox/JqQCco6hCmT0=)
                          2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl
                          rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240
        Validity
            Not Before: Dec  5 04:21:35 2025 GMT
            Not After : Dec 12 04:21:35 2025 GMT
        Subject: CN=69325dcf-6caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:94:ba:21:c1:a8:6d:60:d8:14:56:70:aa:0d:
                    ea:a5:d8:9a:e1:77:51:de:48:ec:18:61:ec:d4:76:
                    11:e0:7f:d4:4d:36:61:02:99:26:a9:13:f8:40:5a:
                    9b:26:3b:92:18:4a:09:57:27:41:1f:de:a9:09:63:
                    79:f5:11:af:b2:a5:a1:7c:dc:e7:5e:2f:d2:58:0c:
                    c5:19:d8:02:9c:5a:d5:a8:60:b4:45:5b:b0:0f:fe:
                    cb:ab:61:75:0e:15:e6:4a:90:db:9f:63:d6:70:33:
                    6a:f6:9f:23:e8:0d:96:60:f4:50:d4:9b:0d:8c:8a:
                    d4:94:2b:ec:57:8f:2e:17:f5:53:24:a9:08:7d:33:
                    86:d4:b7:c6:c6:e3:5a:3c:41:17:f9:96:b6:da:09:
                    ed:56:a9:f3:b4:08:61:1c:bd:05:11:df:1a:fe:57:
                    03:f6:ea:c0:94:30:2b:3a:2a:ed:65:4c:ed:5a:9d:
                    7e:60:b7:3c:1f:8c:27:2b:07:3b:7a:4d:8b:e5:41:
                    6d:38:3e:cc:c0:6d:05:c3:4d:7f:be:de:83:b9:8f:
                    a0:e1:71:73:ca:30:e2:82:b3:ff:58:b1:e8:00:cf:
                    a1:5c:43:ac:7d:02:a4:c5:9d:df:e9:49:f8:e8:ae:
                    f2:42:d6:01:ef:8e:2e:fc:a3:3e:0d:8d:29:14:f5:
                    dc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A4:59:B6:E7:0D:0F:38:C5:7D:0E:AE:02:82:DF:BB:3B:81:0A:38
            X509v3 Authority Key Identifier:
                keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4b:9b:08:9f:43:16:1f:49:be:7b:17:21:d6:3c:2e:1d:bc:
         3d:02:87:3e:25:07:02:09:a3:94:50:c1:10:10:84:7d:a1:23:
         b4:40:5d:c4:f5:fd:f4:01:6a:a5:ed:2c:c0:e4:8b:c5:e4:6f:
         48:f6:18:23:04:b9:a5:5b:70:6f:e5:8d:08:16:ba:2e:d7:ac:
         bb:74:02:17:5f:0e:7f:36:e7:8c:f0:62:a9:b5:05:ae:2d:41:
         81:ad:b5:25:09:51:54:e8:5d:37:68:bc:0f:af:a6:6d:06:cb:
         84:70:31:48:00:19:4c:45:55:f8:b0:75:03:10:35:5c:e1:0a:
         38:39:bb:7e:2e:91:1c:1b:2a:09:ff:16:29:d9:c2:60:3e:84:
         b2:af:86:44:99:38:72:f8:e1:cf:ee:26:cd:8a:05:ef:c0:90:
         51:6c:61:c3:26:36:a7:4a:14:dd:a4:93:48:9e:19:97:2b:bf:
         35:2f:a8:49:41:02:b2:24:35:0e:82:ec:55:b9:f5:ea:87:c2:
         dc:01:1e:27:3e:53:fa:1f:80:8d:71:fc:34:27:d2:c5:90:bb:
         99:33:69:2e:0f:f3:7d:25:d3:db:ce:c9:72:d5:64:11:62:66:
         f2:14:85:e9:c9:50:9a:72:32:76:46:a0:87:a1:66:6c:85:c9:
         9d:f7:a1:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRENTgxMTAvBgNVBAUTKDE4MTAxQ0I4NDU4NzAxMjM1QzNGMTMzMzlBRTVBOURC
M0M3NUIyNDAwHhcNMjUxMjA1MDQyMTM1WhcNMjUxMjEyMDQyMTM1WjAYMRYwFAYD
VQQDEw02OTMyNWRjZi02Y2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4JS6IcGobWDYFFZwqg3qpdia4XdR3kjsGGHs1HYR4H/UTTZhApkmqRP4QFqb
JjuSGEoJVydBH96pCWN59RGvsqWhfNznXi/SWAzFGdgCnFrVqGC0RVuwD/7Lq2F1
DhXmSpDbn2PWcDNq9p8j6A2WYPRQ1JsNjIrUlCvsV48uF/VTJKkIfTOG1LfGxuNa
PEEX+Za22gntVqnztAhhHL0FEd8a/lcD9urAlDArOirtZUztWp1+YLc8H4wnKwc7
ek2L5UFtOD7MwG0Fw01/vt6DuY+g4XFzyjDigrP/WLHoAM+hXEOsfQKkxZ3f6Un4
6K7yQtYB744u/KM+DY0pFPXc1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGkWbbn
DQ84xX0OrgKC37s7gQo4MB8GA1UdIwQYMBaAFBgQHLhFhwEjXD8TM5rlqds8dbJA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEQ1OC80NEM3M0ZENkU4
MjIxMUVGQTg5NzNGODRDNEY5QUUwMi9HQkFjdUVXSEFTTmNQeE16bXVXcDJ6eDFz
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEQ1OC80NEM3M0ZENkU4MjIxMUVGQTg5NzNGODRDNEY5QUUwMi9HQkFjdUVXSEFT
TmNQeE16bXVXcDJ6eDFza0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBS5sIn0MWH0m+exch1jwuHbw9Aoc+JQcCCaOUUMEQEIR9oSO0QF3E
9f30AWql7SzA5IvF5G9I9hgjBLmlW3Bv5Y0IFrou16y7dAIXXw5/NueM8GKptQWu
LUGBrbUlCVFU6F03aLwPr6ZtBsuEcDFIABlMRVX4sHUDEDVc4Qo4Obt+LpEcGyoJ
/xYp2cJgPoSyr4ZEmThy+OHP7ibNigXvwJBRbGHDJjanShTdpJNInhmXK781L6hJ
QQKyJDUOguxVufXqh8LcAR4nPlP6H4CNcfw0J9LFkLuZM2kuD/N9JdPbzsly1WQR
YmbyFIXpyVCacjJ2RqCHoWZshcmd96H7
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:43 2025 by rpki-client