This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
File:                     g1KnNOghRPMixQtyik92WjPXIlY.mft (raw, json)
Hash identifier:          vAlqlmy93CIOc1OF6GBfWgOkrw9odTu2vcCWGR4/Tnk=
Subject key identifier:   D0:06:25:DD:70:E4:39:43:B0:C6:F1:B7:6B:4B:9F:FE:6A:09:90:AC
Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Certificate issuer:       /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Certificate serial:       028B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
Manifest number:          0705
Signing time:             Thu 04 Dec 2025 22:32:10 +0000
Manifest this update:     Thu 04 Dec 2025 22:32:10 +0000
Manifest next update:     Thu 11 Dec 2025 22:32:10 +0000
Files and hashes:         1: g1KnNOghRPMixQtyik92WjPXIlY.crl (hash: JzqVYOnJ6OComBhQsqkY85JEQX4TcoYosy5a8kVYfuw=)
                          2: 21E1440A1E7711EFB69BE070C4F9AE02.roa (hash: g9az2eJZ2fUas4ad3d/QH9wXCAIefnJD9ePsqv2jusw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
                          rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917357E, serialNumber=8352A734E82144F322C50B728A4F765A33D72256
        Validity
            Not Before: Dec  4 22:32:10 2025 GMT
            Not After : Dec 11 22:32:10 2025 GMT
        Subject: CN=69320bea-7ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:69:53:33:3a:b5:33:74:8a:ae:a1:c3:0d:7b:
                    29:4e:9c:9a:ee:22:e1:a2:4a:f2:b4:49:5d:a8:74:
                    d7:d1:83:ce:1e:1f:cc:0d:9b:74:ba:2d:13:6b:0b:
                    a5:2d:b7:b7:7f:eb:02:68:4b:ae:56:b9:ad:a9:38:
                    64:a0:dc:28:67:50:a4:7f:e5:3f:1b:05:5e:52:59:
                    ea:9c:8a:17:7d:9b:cb:57:3e:fd:3e:33:a6:51:4a:
                    a3:4a:a6:77:b1:a2:8f:cd:d5:56:37:c4:2f:dc:1b:
                    90:7d:a8:1d:6c:04:b2:95:86:59:58:3d:a3:6a:37:
                    4a:20:3e:cb:f1:ec:39:6f:34:e7:ac:7b:32:60:a9:
                    9e:78:2c:39:a4:6f:0a:53:15:2c:8b:be:de:71:05:
                    5f:d8:24:9e:15:9e:3f:db:0a:d3:3e:fe:ab:3e:c1:
                    b9:76:ee:f3:43:89:b2:54:db:ad:7a:ed:3c:ba:8f:
                    58:db:5b:0f:f9:0f:ee:ba:31:c2:63:74:99:3a:3c:
                    32:81:e8:84:e5:1d:a9:49:1c:6e:40:92:62:28:1f:
                    8d:7f:f1:cc:41:20:0f:3a:da:26:fc:b8:93:cd:66:
                    9a:2d:06:79:2f:99:0a:aa:4b:8c:d8:f3:c7:86:08:
                    40:85:09:8e:c0:1a:37:bb:2b:b5:66:6c:41:54:4e:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:06:25:DD:70:E4:39:43:B0:C6:F1:B7:6B:4B:9F:FE:6A:09:90:AC
            X509v3 Authority Key Identifier:
                keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:e2:6a:fb:49:28:7d:ed:1f:5c:50:d9:af:d4:49:01:2e:ff:
         c4:cd:91:f6:9a:d3:2e:7a:b9:ea:5f:35:75:ee:39:d9:cd:de:
         22:16:e5:f5:34:f3:d3:c3:70:74:cd:ef:02:9f:16:da:7f:7e:
         61:70:0b:c2:36:4c:d3:cb:67:a1:c4:47:6e:07:5e:a7:37:4e:
         cd:89:4b:27:56:e0:0d:3a:f9:21:97:26:c6:00:01:93:16:6c:
         83:b3:aa:21:1d:32:b2:0a:40:c2:ee:f8:8c:4e:9e:25:22:34:
         aa:9b:31:b1:c4:70:a8:c0:d0:a7:7e:b9:53:dd:1a:37:ee:85:
         45:f0:5c:b4:da:46:c3:a4:51:cd:08:30:51:b8:21:65:80:11:
         ed:31:73:76:71:1f:b3:b2:8f:1b:65:db:38:f2:f1:88:ab:58:
         07:6f:8e:ad:2b:49:3c:4b:76:90:5c:0e:8c:47:08:76:cb:43:
         7a:dd:dc:94:77:60:7e:d9:4f:8b:f0:79:d8:17:da:41:fb:29:
         17:b7:49:58:c0:36:1c:3a:00:fa:56:1f:e4:d9:e5:89:c2:63:
         dd:58:0c:3d:4e:16:34:59:24:ea:e0:54:a9:f3:2d:02:16:1c:
         23:3e:38:05:83:93:f8:9d:78:51:45:98:3b:e0:d7:6d:95:66:
         70:e3:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:51 2025 by rpki-client