This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
File:                     G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json)
Hash identifier:          znOGNexLb39rn5WMCtgRS3Au6Sro3OZORqnmtvYWLrM=
Subject key identifier:   AB:DD:1A:1B:9C:A3:A0:CF:DE:75:2A:4E:07:07:C6:14:17:AB:CF:E6
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       22D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
Manifest number:          22C9
Signing time:             Thu 04 Dec 2025 15:38:48 +0000
Manifest this update:     Thu 04 Dec 2025 15:38:47 +0000
Manifest next update:     Thu 11 Dec 2025 15:38:47 +0000
Files and hashes:         1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: hum04Oy2a80unKOnpwi33VTw0ROl/tT/ONj6z/gEpes=)
                          2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=)
                          3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: yMBDorU4Lt5NEIhIOX3t46/cZp8SC2Q4+GgHPUR0It0=)
                          4: 27BCA4ECCCAD11F0B8832177C4F9AE02.roa (hash: /b/HE29VkzRu6puxi118aV61lD4MgPZJsNuOhpfIX8Y=)
                          5: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: uQM6SKGof/O1Wbld70qp2buHFHsOt09Sypi0b/EZeEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 15:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8917 (0x22d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Dec  4 15:38:47 2025 GMT
            Not After : Dec 11 15:38:47 2025 GMT
        Subject: CN=6931ab07-a1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:a1:59:c2:6b:fc:a9:8f:91:8e:92:be:f8:
                    9d:a7:93:94:2a:87:33:ae:83:47:41:54:26:7d:6f:
                    d6:77:d2:b7:d9:d4:b5:5d:cf:2e:11:5e:9f:4e:c7:
                    14:12:e5:74:d9:a0:f8:38:05:54:de:8c:6d:a3:68:
                    27:ad:53:4b:de:6c:16:22:0f:37:d5:2f:9b:2a:9c:
                    73:0d:b4:10:df:04:ab:ef:cd:89:3a:00:32:9d:2e:
                    6c:87:eb:0b:59:76:2d:6b:a7:f2:ac:b8:a9:a4:17:
                    da:58:a6:aa:48:06:cf:e6:bb:c5:63:9d:92:0a:05:
                    c5:28:ff:2c:c3:12:86:9f:40:c6:19:2d:14:89:f6:
                    2b:55:f7:58:6b:00:04:34:eb:93:b6:f7:fc:64:32:
                    b9:eb:fc:b5:f6:fa:97:c5:40:99:81:6d:1c:32:7b:
                    1b:6b:87:5c:d1:67:bd:59:25:7b:5d:8c:e7:e2:bc:
                    8c:ee:4c:3c:28:86:d3:4c:a0:53:15:af:09:b6:f6:
                    8e:4b:51:59:b4:9e:fd:94:f9:dd:39:3a:18:e0:b7:
                    b9:59:5e:cc:2e:51:0a:2a:23:98:8a:ba:54:45:33:
                    e0:9e:6d:0d:38:13:35:33:92:b7:36:cb:e3:42:a1:
                    56:2b:5b:76:14:e7:99:81:27:0e:d1:3d:8d:13:ba:
                    62:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DD:1A:1B:9C:A3:A0:CF:DE:75:2A:4E:07:07:C6:14:17:AB:CF:E6
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:29:b6:f1:5d:14:76:1e:5e:8b:1e:54:41:9c:ef:6a:ee:ce:
         06:af:e5:99:8b:aa:19:83:2f:6b:27:ee:99:cd:ff:2a:d2:8e:
         64:7d:41:2c:7e:48:51:01:6a:d5:a3:f2:7a:77:1d:9d:d9:64:
         b6:6f:46:8a:ab:f3:fe:db:c7:b2:0b:a0:38:ed:98:2e:b5:50:
         24:1f:c9:f7:fa:f7:4c:05:d2:3a:dd:86:87:2b:d3:84:18:44:
         34:84:75:52:9f:0a:28:dd:3e:fa:9d:d9:8c:6d:f1:cf:bb:8f:
         27:5c:22:0e:9d:79:38:a1:bb:5a:a9:c7:73:fe:bc:b6:42:15:
         ce:72:ea:b7:fa:ea:ef:54:da:e3:16:2b:a7:a1:33:44:cb:47:
         b2:c7:5d:33:4d:7d:97:39:bd:e0:0d:98:aa:38:72:7f:a3:0c:
         17:6a:b9:6d:5d:f9:0b:e3:37:cc:06:b8:4c:74:fe:88:5e:46:
         3d:02:23:21:41:32:fe:e8:11:63:93:b3:af:f8:61:a5:97:55:
         85:5b:3f:d6:da:60:f1:0c:24:b4:f2:0b:c4:c7:21:ed:6a:ee:
         cd:da:48:3e:4b:03:e2:f0:a7:39:bd:e9:8e:58:f1:5f:90:e7:
         dc:fb:11:8d:70:22:de:8e:35:da:ff:b3:71:73:b7:0e:b1:43:
         5b:1e:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:19:07 2025 by rpki-client