This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
File:                     ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json)
Hash identifier:          KSmQTi5PnOaKlicsgvnDT0VUyzbkx2KQtudM37wpFrE=
Subject key identifier:   57:DA:F2:11:4C:2C:B7:A8:EF:00:0D:9A:55:E6:99:4B:CC:23:D1:4B
Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
Certificate issuer:       /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Certificate serial:       0897
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
Manifest number:          0856
Signing time:             Sat 06 Dec 2025 19:51:27 +0000
Manifest this update:     Sat 06 Dec 2025 19:51:26 +0000
Manifest next update:     Sat 13 Dec 2025 19:51:26 +0000
Files and hashes:         1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: UGtBvitof7Q2pGLAuEYIbkIJ99e1xoo2EJ68giA13FY=)
                          2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=)
                          3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=)
                          4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=)
                          5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=)
                          6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=)
                          7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=)
                          8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
                          rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2199 (0x897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
        Validity
            Not Before: Dec  6 19:51:26 2025 GMT
            Not After : Dec 13 19:51:26 2025 GMT
        Subject: CN=6934893e-596a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8e:80:3f:25:a9:a0:26:eb:7b:f1:7a:ab:6b:
                    ce:d3:de:23:8c:f6:5b:85:a2:5d:f7:35:26:18:2c:
                    72:db:af:74:10:e9:60:df:4d:8c:5f:85:31:59:5d:
                    e1:84:9a:11:8e:07:40:55:bb:a0:6e:f5:68:d2:d3:
                    f4:5e:b0:bc:65:76:c5:81:e1:34:b8:d1:1c:4e:53:
                    e6:6d:1f:3b:4d:79:13:47:e7:fb:54:d2:cc:f6:fa:
                    2d:de:7b:9e:f4:1f:00:3d:06:de:f7:01:39:49:7b:
                    aa:a1:97:76:32:6c:20:9d:02:96:fe:d7:0d:ac:dd:
                    26:22:f2:1f:d1:20:d2:ed:54:f1:f3:00:7d:cb:80:
                    82:d4:1e:9f:b6:80:53:27:38:d3:65:58:ad:5f:a6:
                    8b:c3:12:97:5d:ac:9f:f3:42:f9:5e:55:23:af:f4:
                    d0:32:42:20:6c:b3:17:99:1c:7b:64:c0:76:3c:7c:
                    94:63:96:e3:4e:33:32:a1:1b:87:40:93:c8:44:d2:
                    4a:54:3c:b1:17:b7:95:09:c6:10:42:8f:7d:53:9e:
                    d4:60:b5:0c:0f:65:70:0e:32:c1:6e:eb:0a:67:fd:
                    61:24:bf:fa:ea:4c:48:02:68:3b:1b:76:3c:82:bb:
                    64:92:d6:e5:66:93:96:6c:bb:fe:6f:ea:1a:99:90:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DA:F2:11:4C:2C:B7:A8:EF:00:0D:9A:55:E6:99:4B:CC:23:D1:4B
            X509v3 Authority Key Identifier:
                keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:bb:3b:08:f4:e9:90:73:c4:9c:ec:42:20:33:84:6b:74:
         7d:12:24:89:82:6d:a0:af:ef:73:3b:1d:c3:f8:8c:cb:5f:d2:
         12:f3:d2:98:35:64:7a:06:d6:09:34:fb:26:bd:ca:16:33:f5:
         38:36:41:db:5a:6c:1e:ec:2f:1f:ed:ac:c6:a9:ea:db:2c:a7:
         9a:f1:b5:65:04:c9:95:1e:ac:13:93:44:0b:61:b9:c3:6c:dc:
         82:f6:b4:b7:2f:72:f3:3a:48:ac:4e:91:d2:9a:5b:ac:c0:22:
         db:c8:ee:13:57:f3:9b:71:47:37:47:f7:60:3f:44:69:b0:00:
         23:d8:6e:9d:96:16:60:5b:31:51:c2:d2:2c:09:6f:75:cb:22:
         cd:a4:40:f0:d2:7b:e9:7f:b5:60:2a:9d:bf:28:20:e5:b9:0c:
         32:95:9d:9e:ad:80:c7:a8:50:e2:75:f4:0f:4e:b0:4e:d1:29:
         d0:bd:74:27:80:bf:1a:4e:af:ff:f4:e3:8b:69:b1:17:9a:91:
         94:51:16:c0:5a:b8:50:37:8d:90:ed:d2:6f:af:fc:39:0d:d2:
         37:bb:b5:8e:c5:c1:61:5e:a3:d0:3c:5f:8d:d0:3f:6f:a4:17:
         4e:6e:ae:1a:d1:fa:05:3e:0f:78:f4:72:b2:82:2f:87:48:00:
         0b:ab:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:29 2025 by rpki-client