This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
File:                     GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json)
Hash identifier:          RRC2yyD4BzR0DwBb/7fJH1M2euFF+hXrO8tjpjuQkFQ=
Subject key identifier:   80:AF:A8:41:46:8A:1C:7B:25:A6:29:7F:7E:77:6C:01:AD:C6:AF:94
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       038F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
Manifest number:          0364
Signing time:             Thu 04 Dec 2025 23:27:40 +0000
Manifest this update:     Thu 04 Dec 2025 23:27:39 +0000
Manifest next update:     Thu 11 Dec 2025 23:27:39 +0000
Files and hashes:         1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: 0Nwowg98oOcbgKeg7MJiCQm8NM4gJmTUzet7gA/7F8w=)
                          2: EC6F91D234E111F0AC656B38C4F9AE02.roa (hash: E1WKt1YaZn8IuZR2WkpfcwtdDLc+dHKZAfiwmmiESyg=)
                          3: AEF7F896B23511EF99CCD73DC4F9AE02.roa (hash: zyZNP96AkvyazKN+7Z9uXIl84GYsJy6FhTmGH2JNTf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Dec  4 23:27:39 2025 GMT
            Not After : Dec 11 23:27:39 2025 GMT
        Subject: CN=693218eb-edbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:ba:82:12:86:c5:c2:c3:fd:2e:6a:dd:f3:
                    95:3d:dd:c7:f2:75:c9:1e:d3:85:26:94:77:1e:24:
                    cb:2e:45:c6:53:be:b8:b5:7b:91:f9:2c:a7:d2:ca:
                    4f:99:b3:fb:f6:38:c7:78:70:93:b5:77:01:b8:c5:
                    c5:81:3a:02:0f:b4:56:b2:94:aa:4e:a6:cb:f8:0e:
                    f7:09:08:b6:73:7a:7f:04:0f:c4:27:a3:33:d8:d9:
                    7c:88:a0:51:80:12:07:c3:c5:2b:21:f2:12:cf:96:
                    42:5b:76:6b:33:43:ba:a1:b4:32:cc:41:74:16:b5:
                    44:79:80:56:43:85:b2:ce:f6:e5:6d:2f:c9:ce:29:
                    3e:1c:90:05:eb:c4:57:55:a7:a4:4b:fe:b2:57:f2:
                    d1:1d:02:65:8a:a9:84:02:67:93:66:5f:fa:d7:12:
                    99:51:2a:85:c7:42:84:fa:a3:1a:d6:a8:b6:65:24:
                    05:ff:38:43:fb:ea:60:1c:bc:36:e5:87:4c:09:58:
                    e6:cb:fd:5a:59:03:91:51:99:d8:99:81:d8:d0:ea:
                    3f:d2:6d:a6:73:52:1b:3b:47:b5:05:c6:fd:a9:8d:
                    19:b1:03:79:16:de:23:d3:24:07:73:d7:1a:b2:e5:
                    66:2b:5c:c8:b0:1c:cb:b7:23:58:e7:10:62:3f:40:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AF:A8:41:46:8A:1C:7B:25:A6:29:7F:7E:77:6C:01:AD:C6:AF:94
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1e:45:99:7c:47:46:71:6c:fc:5a:52:ef:b7:0d:e5:4d:71:
         b9:e1:23:38:a3:0a:56:54:9b:9e:b2:f5:e7:a9:0f:86:71:14:
         a0:6d:e4:ae:1e:6f:69:1a:16:6e:3b:b1:c9:53:36:e9:78:01:
         da:f4:79:1e:ba:1e:6a:dd:9c:b1:1c:d5:d6:79:e8:8a:7c:a9:
         06:43:3d:31:85:26:55:35:0b:c8:bb:4b:2b:90:25:20:cd:5a:
         f5:1c:3e:82:a7:66:d1:60:61:ee:87:a5:d1:16:04:1c:01:4d:
         ad:57:8e:91:f1:c3:a3:d4:47:25:40:4a:9f:ab:f4:a8:ae:9f:
         a6:56:0b:20:fd:a3:9f:b5:85:d3:53:73:08:d1:61:f4:fa:ea:
         12:c4:46:09:bd:12:f4:24:80:fb:3e:6c:c5:77:4c:63:fd:48:
         76:da:a0:9e:8b:be:cd:c7:d2:0d:15:3d:5a:19:d2:04:27:c0:
         cd:44:dc:e9:c4:56:c0:8d:82:e6:5b:de:34:18:62:85:0a:e2:
         1e:6d:60:fb:5a:2a:6d:77:b9:6e:88:d6:f1:92:ee:b7:26:1e:
         9f:65:c2:56:53:92:d2:36:fa:71:23:6c:39:29:b6:76:7d:0c:
         d3:f5:71:db:5b:0b:af:17:47:fc:00:75:59:70:2f:78:f1:37:
         c0:94:32:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxNUIxMTAvBgNVBAUTKDE5NkY5Mjc3MzI5M0U0OTU0QjREOTdBNUQzN0FDODIw
QTc0NUMyRTAwHhcNMjUxMjA0MjMyNzM5WhcNMjUxMjExMjMyNzM5WjAYMRYwFAYD
VQQDEw02OTMyMThlYi1lZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAniW6ghKGxcLD/S5q3fOVPd3H8nXJHtOFJpR3HiTLLkXGU764tXuR+Syn0spP
mbP79jjHeHCTtXcBuMXFgToCD7RWspSqTqbL+A73CQi2c3p/BA/EJ6Mz2Nl8iKBR
gBIHw8UrIfISz5ZCW3ZrM0O6obQyzEF0FrVEeYBWQ4WyzvblbS/Jzik+HJAF68RX
VaekS/6yV/LRHQJliqmEAmeTZl/61xKZUSqFx0KE+qMa1qi2ZSQF/zhD++pgHLw2
5YdMCVjmy/1aWQORUZnYmYHY0Oo/0m2mc1IbO0e1Bcb9qY0ZsQN5Ft4j0yQHc9ca
suVmK1zIsBzLtyNY5xBiP0AkOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICvqEFG
ihx7JaYpf353bAGtxq+UMB8GA1UdIwQYMBaAFBlvkncyk+SVS02XpdN6yCCnRcLg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE1Qi9ENzM1QTNCNEVE
NEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVKVkxUWmVsMDNySUlLZEZ3
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dXLVNkektUNUpWTFRaZWwwM3JJSUtkRnd1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzE1Qi9ENzM1QTNCNEVENEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVK
VkxUWmVsMDNySUlLZEZ3dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUHkWZfEdGcWz8WlLvtw3lTXG54SM4owpWVJuesvXnqQ+GcRSgbeSu
Hm9pGhZuO7HJUzbpeAHa9Hkeuh5q3ZyxHNXWeeiKfKkGQz0xhSZVNQvIu0srkCUg
zVr1HD6Cp2bRYGHuh6XRFgQcAU2tV46R8cOj1EclQEqfq/Sorp+mVgsg/aOftYXT
U3MI0WH0+uoSxEYJvRL0JID7PmzFd0xj/Uh22qCei77Nx9INFT1aGdIEJ8DNRNzp
xFbAjYLmW940GGKFCuIebWD7Wiptd7luiNbxku63Jh6fZcJWU5LSNvpxI2w5KbZ2
fQzT9XHbWwuvF0f8AHVZcC948TfAlDKL
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:38 2025 by rpki-client