This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
File:                     G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json)
Hash identifier:          V+WFJCEcs7hLnFcvQ3KamddlNS4rnyy4uhfwbkrrTOg=
Subject key identifier:   8D:66:19:C3:1E:0E:AC:3D:A1:D9:5B:05:BA:37:2A:12:1E:63:3A:24
Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30
Certificate issuer:       /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
Certificate serial:       0C97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
Manifest number:          1504
Signing time:             Sat 06 Dec 2025 17:50:07 +0000
Manifest this update:     Sat 06 Dec 2025 17:50:07 +0000
Manifest next update:     Sat 13 Dec 2025 17:50:07 +0000
Files and hashes:         1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: BUg6zlsC73xjutZMVodFs0/f9Gk4NYLvLyH3SHgI15Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl
                          rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3223 (0xc97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B0EA, serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
        Validity
            Not Before: Dec  6 17:50:07 2025 GMT
            Not After : Dec 13 17:50:07 2025 GMT
        Subject: CN=69346ccf-8345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:bd:35:85:3e:ca:9d:67:d7:c3:a7:94:3e:
                    f9:75:09:80:7f:bf:fb:91:27:fd:44:5f:dc:f5:67:
                    87:97:1f:ae:cb:f9:d3:ba:1e:b2:95:4e:96:5d:c4:
                    0a:3d:05:cd:57:99:98:24:d2:7b:05:f8:a5:9c:37:
                    0f:ab:ce:91:c2:d4:64:81:d7:f8:47:05:84:72:6b:
                    82:f5:36:c3:cb:ba:16:cb:93:bf:97:c9:49:70:85:
                    f5:d6:47:55:9d:18:3f:73:0b:c7:17:6f:02:b0:b5:
                    b4:73:70:9b:a2:70:44:43:a4:ab:05:16:1a:c9:a4:
                    cb:a3:0c:88:d6:55:f4:c9:12:89:b3:fe:f8:7c:48:
                    5c:c3:b8:80:bf:c0:12:98:98:54:df:54:c7:2f:c2:
                    35:f1:c1:44:3f:38:d5:e4:ec:b6:d0:55:53:ad:c2:
                    49:3c:58:9b:0c:d5:ee:e8:67:26:b3:6c:3e:ed:8c:
                    80:8c:89:5b:ec:b2:99:b7:10:95:b2:e7:49:24:3b:
                    81:76:9d:24:11:2a:1e:3c:ca:e9:1d:2a:c2:a4:19:
                    22:fc:82:6c:e2:a6:da:d1:aa:ad:62:57:5c:30:d8:
                    54:4b:68:88:52:d9:32:6b:87:26:7c:9a:3f:24:86:
                    02:47:60:32:5f:30:39:1f:1f:81:b0:c4:d2:a8:84:
                    72:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:66:19:C3:1E:0E:AC:3D:A1:D9:5B:05:BA:37:2A:12:1E:63:3A:24
            X509v3 Authority Key Identifier:
                keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d9:4c:3d:9e:96:fd:a1:22:0d:5b:a9:91:c0:a0:89:80:a7:
         0c:3c:34:79:ce:ad:78:08:33:ee:0b:cb:2b:4d:32:12:8c:5c:
         db:bd:b9:0d:eb:4d:2d:78:17:78:2f:88:6b:d7:9c:08:1a:1a:
         21:f0:1c:64:2c:3b:75:15:e0:08:a1:f8:66:0b:a0:fa:06:d9:
         61:c2:09:9c:1f:df:c1:b7:33:18:e2:67:24:44:ed:cd:cb:95:
         8c:72:48:40:25:7e:9c:71:cb:5f:0c:a5:bb:58:dd:a2:c5:83:
         50:37:0b:8d:6e:ff:7f:52:07:a5:30:cd:fb:99:07:70:ec:62:
         cf:4c:bf:7a:6c:0f:5b:36:90:fa:fd:0d:e0:69:9c:6e:95:05:
         1c:63:c0:c2:27:1b:be:d5:f7:fb:b7:68:3f:a9:87:3e:61:00:
         94:89:0a:a3:1a:ad:a1:07:8d:14:69:d8:01:e9:9c:63:cb:fc:
         28:d8:18:fe:5f:a5:6b:68:06:8d:01:a9:d3:7d:0f:59:d6:03:
         6d:e9:c1:18:a0:cc:4d:d0:47:54:cb:15:1e:4d:06:df:47:e9:
         9d:f7:35:ef:29:dd:b3:72:49:9f:7b:3a:d9:8e:fe:d8:6d:d5:
         76:81:61:42:0d:db:fa:a0:1a:a5:32:5c:9f:63:89:c6:3e:73:
         f6:31:96:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIwRUExMTAvBgNVBAUTKDFCNDNGMzU1NjU2RDEwOEUzMEQxODQzNERFQjU3OTND
RjZBMDFBMzAwHhcNMjUxMjA2MTc1MDA3WhcNMjUxMjEzMTc1MDA3WjAYMRYwFAYD
VQQDEw02OTM0NmNjZi04MzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsp29NYU+yp1n18OnlD75dQmAf7/7kSf9RF/c9WeHlx+uy/nTuh6ylU6WXcQK
PQXNV5mYJNJ7BfilnDcPq86RwtRkgdf4RwWEcmuC9TbDy7oWy5O/l8lJcIX11kdV
nRg/cwvHF28CsLW0c3CbonBEQ6SrBRYayaTLowyI1lX0yRKJs/74fEhcw7iAv8AS
mJhU31THL8I18cFEPzjV5Oy20FVTrcJJPFibDNXu6Gcms2w+7YyAjIlb7LKZtxCV
sudJJDuBdp0kESoePMrpHSrCpBki/IJs4qba0aqtYldcMNhUS2iIUtkya4cmfJo/
JIYCR2AyXzA5Hx+BsMTSqIRysQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1mGcMe
Dqw9odlbBbo3KhIeYzokMB8GA1UdIwQYMBaAFBtD81VlbRCOMNGENN61eTz2oBow
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC
NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJNHcwWVEwM3JWNVBQYWdH
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cwUHpWV1Z0RUk0dzBZUTAzclY1UFBhZ0dqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJ
NHcwWVEwM3JWNVBQYWdHakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBc2Uw9npb9oSINW6mRwKCJgKcMPDR5zq14CDPuC8srTTISjFzbvbkN
600teBd4L4hr15wIGhoh8BxkLDt1FeAIofhmC6D6BtlhwgmcH9/BtzMY4mckRO3N
y5WMckhAJX6ccctfDKW7WN2ixYNQNwuNbv9/UgelMM37mQdw7GLPTL96bA9bNpD6
/Q3gaZxulQUcY8DCJxu+1ff7t2g/qYc+YQCUiQqjGq2hB40UadgB6Zxjy/wo2Bj+
X6VraAaNAanTfQ9Z1gNt6cEYoMxN0EdUyxUeTQbfR+md9zXvKd2zckmfezrZjv7Y
bdV2gWFCDdv6oBqlMlyfY4nGPnP2MZbS
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:09:33 2025 by rpki-client