This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
File:                     gprYV1claHsfCkxV-UIq8zsA_LE.mft (raw, json)
Hash identifier:          U0v/vPGHc3TSXVPYFUvMgjSx89BBxf7ocy3gW3qg0iY=
Subject key identifier:   17:29:5B:FF:66:ED:A2:28:43:8F:6B:4F:DD:4B:07:CE:B6:25:BE:B9
Authority key identifier: 82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1
Certificate issuer:       /CN=A916A511/serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
Manifest number:          F7
Signing time:             Fri 05 Dec 2025 03:16:47 +0000
Manifest this update:     Fri 05 Dec 2025 03:16:46 +0000
Manifest next update:     Fri 12 Dec 2025 03:16:46 +0000
Files and hashes:         1: gprYV1claHsfCkxV-UIq8zsA_LE.crl (hash: D1nhcIMY1YrK3UBK11GcEALmzcajZuAfoaeK5gmLVYY=)
                          2: C95F7472ABD411F08661983DC4F9AE02.roa (hash: k2YDwc03t3OBZ/zjfO15D6Psianh7LMJ/JmqviJo7uA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl
                          rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A511, serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
        Validity
            Not Before: Dec  5 03:16:46 2025 GMT
            Not After : Dec 12 03:16:46 2025 GMT
        Subject: CN=69324e9e-4a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0e:36:1a:2c:d3:56:be:96:95:6f:b7:eb:c9:
                    be:ff:6d:75:b2:59:65:fd:d3:31:cb:6e:68:48:f2:
                    a7:61:65:45:27:8b:c6:6a:1a:cf:2a:01:c4:a1:ef:
                    f4:0d:73:3b:0c:06:24:f6:9f:a7:63:64:a1:bf:7f:
                    3a:f5:13:1e:93:50:2f:df:58:cc:1b:55:4c:42:8a:
                    6a:2f:cd:a7:d4:ad:67:96:ad:5f:26:d8:f6:62:cf:
                    04:b1:2c:55:3a:df:12:cb:58:1c:34:9a:7d:2a:90:
                    62:10:62:d4:a0:86:8b:2c:e4:3a:db:68:3d:2a:a2:
                    18:1d:51:0b:17:91:cd:ea:9c:7d:39:09:a8:7e:83:
                    be:9c:e0:cd:45:0d:a2:4f:22:52:ff:0f:df:69:d5:
                    5c:74:96:3c:7a:7f:06:b1:2d:e7:7e:40:b8:74:eb:
                    7d:a5:2a:a4:e5:90:0c:73:5f:d5:90:b4:98:19:c2:
                    f1:4b:43:f9:7a:ee:93:a5:85:8b:b2:05:4a:da:b7:
                    af:f7:a7:df:3a:46:bc:cf:b4:ba:50:1b:b4:98:d3:
                    a2:55:f3:15:38:7c:e6:d7:ef:e5:5f:5b:54:e9:87:
                    5f:72:fb:0f:12:ff:d8:41:38:d5:20:37:98:70:ea:
                    2a:52:3b:18:35:e3:55:f4:22:c8:f5:77:a4:f9:53:
                    75:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:29:5B:FF:66:ED:A2:28:43:8F:6B:4F:DD:4B:07:CE:B6:25:BE:B9
            X509v3 Authority Key Identifier:
                keyid:82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:78:7c:be:3e:c5:d8:0e:97:bd:6f:3e:1e:41:a1:61:0a:4b:
         31:8d:8f:2e:09:98:2d:f6:dc:eb:05:51:67:2d:f0:31:c1:64:
         7f:62:05:cc:5a:ec:3f:de:ec:57:71:eb:93:9d:1c:7e:86:e7:
         4d:8d:2d:7b:a8:35:8c:b8:e1:d3:11:7a:9c:8c:cc:6e:5d:77:
         ea:f6:6e:fc:24:54:c4:7e:49:36:7f:75:1c:3a:4d:fd:d6:7d:
         95:c3:72:da:dd:de:a3:53:9c:e6:5f:57:a4:4f:68:b7:34:c8:
         03:42:ee:4b:1e:11:f5:64:df:3b:35:fc:58:01:97:a1:c2:eb:
         cc:22:94:fc:00:b9:36:8d:ac:03:b8:00:e6:b3:2b:68:50:2a:
         88:25:73:e6:6d:ac:52:04:95:06:7f:1c:81:78:9d:84:89:c4:
         e2:1e:8c:3b:f0:05:01:0b:01:88:c4:fc:00:b5:da:28:3f:a7:
         38:af:93:78:fa:6a:d1:e1:54:db:77:c7:fd:0b:ad:6b:04:21:
         23:76:bc:77:71:cd:6e:51:18:03:65:6c:d7:d8:db:52:cf:3e:
         d8:3c:26:29:50:5f:5c:a3:7e:e1:6c:7a:fc:4b:f2:c4:b9:d4:
         1a:a0:11:a2:fd:70:1a:e9:d5:ec:50:29:bd:e3:9a:9f:f6:fe:
         90:bc:7d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:43:27 2025 by rpki-client