This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File:                     gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier:          h2Ngx0pFlw21kFNc7CwrfxqgF2Zyf8LQAwsB6MYQK2c=
Subject key identifier:   C8:96:F0:E5:61:50:7F:49:5E:1E:CE:F3:FC:FC:B4:11:C1:A6:F7:FC
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       0690
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number:          0666
Signing time:             Thu 04 Dec 2025 21:24:52 +0000
Manifest this update:     Thu 04 Dec 2025 21:24:52 +0000
Manifest next update:     Thu 11 Dec 2025 21:24:52 +0000
Files and hashes:         1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: 1RlJhWcE/c6T5DfbvGieoIVN+D6mEKrgluFOKew7iBQ=)
                          2: A6C94076624711EC9B815772C4F9AE02.roa (hash: XosrUy+Xd/y9+zlNKWBW88xmxi0w+unp/BWLX4a8k/0=)
                          3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: jcE65YGPbY23C0JRfHdMvEfT+xppldiedci4zrgXKQc=)
                          4: 899A5138691611EFBED13942C4F9AE02.roa (hash: VYrhe6Mi0RTaO+P8HqkxU1Qva61wirf2XWWIcdNAN4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680 (0x690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: Dec  4 21:24:52 2025 GMT
            Not After : Dec 11 21:24:52 2025 GMT
        Subject: CN=6931fc24-6711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:32:f1:b8:a8:59:00:1a:c4:ee:bd:ca:de:
                    00:1d:20:a2:e5:0c:05:23:5a:e6:05:9d:96:9f:c1:
                    b9:4a:58:da:f5:0a:f2:61:f3:5b:d2:c7:5c:5f:6c:
                    ca:df:31:10:99:f4:57:6b:32:f7:12:9b:91:32:4c:
                    fb:0d:bd:19:5d:1c:47:63:b3:45:6f:a6:67:ef:19:
                    d9:b8:0e:d3:e0:d1:cc:da:f0:60:83:9a:dd:b5:d6:
                    29:6b:61:14:5a:bb:7c:18:4b:31:16:fb:ab:3c:d3:
                    b6:ce:68:ab:5a:a3:e7:2b:24:b6:63:be:ce:e9:b6:
                    db:f2:24:a1:3d:c0:6e:36:6c:96:73:2d:f2:ab:b1:
                    b4:27:a1:2e:73:bd:a0:7f:fb:47:d1:dc:21:92:5d:
                    ec:ac:15:34:1b:0b:e9:6d:7f:11:24:54:3d:b4:fc:
                    a6:e0:9f:0a:bd:a6:78:cb:f1:e9:fc:2b:31:80:cd:
                    2e:2d:1a:cb:08:21:3f:17:5d:b5:e7:bc:66:86:62:
                    e3:25:3e:a7:e5:ed:60:00:02:c7:4c:62:93:16:5d:
                    cb:c7:0b:db:ea:6a:7a:dd:c0:32:30:42:78:d4:a8:
                    ea:a6:f3:3d:a2:02:41:e6:06:0a:01:20:c0:a5:57:
                    93:5f:88:be:1e:8f:73:ed:ce:e2:b8:4e:60:c8:62:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:96:F0:E5:61:50:7F:49:5E:1E:CE:F3:FC:FC:B4:11:C1:A6:F7:FC
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:58:6f:57:cf:77:92:2e:53:97:b0:2a:2f:92:fc:2c:61:54:
         ad:ab:45:95:ec:02:9e:57:e6:76:4c:47:3c:d8:70:80:94:6b:
         55:42:b7:60:41:80:89:cb:42:b8:56:6e:7b:28:2f:ea:b5:ab:
         f6:d8:0a:36:36:57:55:6a:7b:84:51:df:99:10:c3:d8:3b:d1:
         af:9e:fc:26:72:2f:91:7b:f5:6e:c7:52:f3:93:fc:45:3d:7b:
         16:41:fe:15:aa:54:86:96:05:1e:53:8a:af:ca:df:b5:9c:7b:
         4a:63:23:5a:64:e5:65:80:cd:e8:a9:5e:7e:9b:03:bd:b6:38:
         8f:f6:96:99:fc:a0:46:a6:13:3e:ab:51:ae:6a:6f:bf:8b:ae:
         22:97:12:5c:53:ee:40:8c:4e:3b:6f:d4:fd:be:2b:5a:ee:3e:
         c9:39:40:76:62:1e:e0:b6:f6:c7:d7:5d:3e:0a:17:f6:08:28:
         2b:97:27:ac:4f:59:4d:95:85:29:4b:c6:42:fb:55:e9:f8:f0:
         80:0b:32:40:b4:5a:8e:2a:f7:5f:1b:19:5f:50:46:25:27:0a:
         f4:05:2f:c2:2d:27:e8:78:7c:47:7f:6c:8f:7d:f2:58:40:de:
         60:b3:2d:3b:df:1b:af:fd:36:53:e2:68:ec:81:4e:0f:d1:8b:
         6a:01:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:48 2025 by rpki-client