This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft
File:                     GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft (raw, json)
Hash identifier:          iP04CmfkxLJtRtNuLUxi2b++QcV80xBLZyNG8zoWFVk=
Subject key identifier:   37:F6:13:C8:B0:6A:D5:A0:E5:3D:33:D4:3F:E6:5B:F8:B9:75:77:25
Authority key identifier: 19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06
Certificate issuer:       /CN=A9160827/serialNumber=1933F62B910631D0494CACC47CB167C581045006
Certificate serial:       1EFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft
Manifest number:          1EFA
Signing time:             Sat 06 Dec 2025 15:44:11 +0000
Manifest this update:     Sat 06 Dec 2025 15:44:11 +0000
Manifest next update:     Sat 13 Dec 2025 15:44:11 +0000
Files and hashes:         1: GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl (hash: vP8emJ6eF44IlTjtKuwY9OAB10Lt4vrarv54KWnWPqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl
                          rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7935 (0x1eff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160827, serialNumber=1933F62B910631D0494CACC47CB167C581045006
        Validity
            Not Before: Dec  6 15:44:11 2025 GMT
            Not After : Dec 13 15:44:11 2025 GMT
        Subject: CN=69344f4b-c2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1f:83:8b:71:1d:ce:4c:fb:8f:53:f2:28:79:
                    ea:43:87:73:d3:b7:68:9e:ec:bb:6f:27:16:6f:33:
                    1d:aa:99:02:ff:e9:50:fd:0d:a0:a1:2d:17:b8:9d:
                    d9:92:b3:9e:06:ec:ca:80:99:d9:d0:3c:e8:33:99:
                    39:42:dd:eb:9e:84:12:7a:43:92:b5:15:bb:7b:2b:
                    56:04:ee:e3:2c:f0:8e:2a:0d:ac:d5:ba:4b:a1:04:
                    a7:74:c9:a6:1a:21:2f:ad:cd:0e:7e:a2:25:cb:78:
                    0a:b8:d6:b4:af:d0:dd:a7:6c:1d:ed:4c:48:dc:e5:
                    2e:3c:f3:83:76:1b:ed:5f:7c:2f:15:cc:33:bd:da:
                    49:47:7f:98:7c:e6:33:92:12:3f:61:11:b9:e0:b6:
                    c1:59:5d:f2:f3:c4:86:af:ce:dd:8e:ad:fe:5e:46:
                    dc:c4:29:49:86:bd:c0:0a:3a:51:30:99:fc:67:01:
                    6f:98:e7:96:6c:8d:b8:28:37:95:12:27:fc:45:3f:
                    d4:e2:79:fa:67:c1:b2:94:95:20:ad:35:15:25:f5:
                    7f:29:76:51:a6:08:13:d6:89:ef:6f:b8:22:b8:de:
                    0b:0e:13:f7:57:be:65:69:7f:64:cd:bd:f6:4b:e9:
                    2a:ef:07:dc:56:e1:a7:ab:41:86:f3:39:9c:d0:40:
                    cd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F6:13:C8:B0:6A:D5:A0:E5:3D:33:D4:3F:E6:5B:F8:B9:75:77:25
            X509v3 Authority Key Identifier:
                keyid:19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d7:02:08:ec:77:c4:84:58:b6:42:70:08:26:07:d9:a0:8c:
         0c:4e:7c:8f:2f:6d:bc:6c:69:e8:ed:34:11:97:be:c5:ea:79:
         61:bf:c7:8b:84:6f:f9:64:43:24:0b:00:d1:6f:6c:62:55:c5:
         06:be:e4:6b:81:c8:b5:16:11:98:96:04:e5:9e:4a:ba:3f:7c:
         8c:9e:46:3b:66:96:06:f7:e1:07:fc:9e:18:57:0f:df:f9:a9:
         cd:8c:04:b5:3a:f9:16:7b:d5:1a:dd:28:91:fd:c2:7b:9f:e0:
         42:01:3d:a8:10:36:4e:cc:5a:53:92:85:1c:82:78:0c:e0:27:
         7d:86:6a:0a:28:b2:a8:7f:8c:83:30:28:c2:ae:50:22:2b:80:
         c7:56:3f:dd:76:6f:b0:cd:51:2c:5d:40:a9:b0:24:de:fd:74:
         14:d8:18:5a:1e:f0:29:49:90:64:8e:0b:d6:70:78:89:12:5c:
         33:9d:e8:18:28:d5:24:69:7b:73:96:6f:30:4e:95:53:77:9c:
         c5:2d:45:cd:d9:48:8a:2e:21:ba:ca:a0:74:05:7d:a2:d2:22:
         91:40:99:47:04:e6:f3:9a:66:90:b1:3b:7a:cb:5d:dd:2f:2a:
         73:2a:1c:7b:29:d3:87:9c:de:02:45:f0:58:69:5b:0d:dd:94:
         ab:14:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:27 2025 by rpki-client