This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
File:                     gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json)
Hash identifier:          WsQxMTNWD9RW8kz5ar4lz/mBE9CZDja/9IOWzVbXPAo=
Subject key identifier:   56:3F:1A:31:E2:77:65:11:9F:3D:DA:34:85:04:FB:4A:80:50:76:97
Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A
Certificate issuer:       /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
Manifest number:          F8
Signing time:             Fri 05 Dec 2025 03:15:35 +0000
Manifest this update:     Fri 05 Dec 2025 03:15:34 +0000
Manifest next update:     Fri 12 Dec 2025 03:15:34 +0000
Files and hashes:         1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: vp3TLJYAdoa6IJfyhskvun+xJVLsSlffinsoda2HyM8=)
                          2: ECF347EC790211F0AEB6EC56C4F9AE02.roa (hash: LgOIgdmSarx/xdDFooMMCDoHTaRTWDIl0zWZh3dLWpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
        Validity
            Not Before: Dec  5 03:15:34 2025 GMT
            Not After : Dec 12 03:15:34 2025 GMT
        Subject: CN=69324e57-906a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:74:fd:5c:72:6d:7c:29:0b:21:ca:93:16:
                    52:cd:26:0d:6d:d6:ff:23:69:eb:ca:a5:fc:47:23:
                    1a:d2:d8:6b:b8:76:28:36:bc:eb:9b:d5:1b:7d:90:
                    ae:e9:5f:9d:62:e6:4a:7b:f2:bd:39:b9:bc:1d:69:
                    8c:a9:cd:99:37:14:f2:92:5a:68:2f:be:54:c7:fe:
                    8c:f3:e4:bb:0f:8d:8f:ef:c9:79:a3:dc:4a:71:20:
                    56:50:62:57:8a:99:cc:70:5c:5d:1a:ef:22:bd:bb:
                    88:bd:17:e5:c7:4d:d5:a9:15:ad:4a:b2:c1:b0:87:
                    34:bc:62:0d:7e:73:92:2e:7b:5f:63:0b:45:be:e5:
                    af:0e:2d:bb:a8:e0:cd:f0:0d:f5:90:56:00:c2:55:
                    46:5a:21:81:e8:08:5d:fc:b1:16:0e:77:d6:82:2e:
                    3d:bf:19:b2:3a:2a:13:5c:5c:fe:e8:24:75:50:94:
                    81:a8:ee:1d:ea:60:19:89:ce:b7:35:1c:a9:ce:5b:
                    14:c6:7f:51:bc:7d:95:37:6c:50:8f:8a:08:d2:b8:
                    aa:3e:8f:24:63:bf:a4:90:af:f6:de:46:75:97:37:
                    af:17:8e:2f:ba:f2:8a:e9:7f:1a:d2:af:d4:a2:70:
                    0c:e5:9e:ae:40:2c:54:45:6d:6a:ef:57:ed:7a:50:
                    5a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3F:1A:31:E2:77:65:11:9F:3D:DA:34:85:04:FB:4A:80:50:76:97
            X509v3 Authority Key Identifier:
                keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:35:8b:4c:2f:3a:34:2a:c5:7d:62:d0:1a:f9:85:98:13:3f:
         da:5e:ce:4b:71:47:eb:6a:71:51:b9:67:9b:2f:3f:e6:03:9c:
         ec:03:52:d5:94:28:7f:d0:8f:c9:8e:94:d2:86:c7:9d:b4:c3:
         1a:d0:37:1a:e5:ba:28:39:ce:29:b0:b6:5a:52:93:5b:51:11:
         7e:32:e3:d8:42:1b:5d:d7:6f:55:d2:9f:79:24:1a:04:c1:55:
         2e:d4:f3:9a:de:96:b1:c7:43:0d:34:c8:a7:80:e8:d0:b5:43:
         a0:63:9c:1d:5c:e6:6e:ff:6f:d8:c8:77:c1:84:b6:ae:5d:d5:
         28:d1:7a:8b:c2:e1:c8:f8:43:26:6c:17:37:48:b4:b8:49:ab:
         e1:42:c4:3f:40:77:e0:fb:c0:01:00:a2:d3:ca:b8:92:15:6a:
         97:70:95:49:85:a8:59:ca:af:88:58:eb:1f:d8:b3:7f:79:84:
         7c:a1:13:f9:c0:83:d0:84:fc:24:cc:e2:eb:a2:b8:49:1f:ec:
         88:af:8c:eb:8d:b1:4b:a6:49:b7:e4:a9:66:b0:16:60:9b:e3:
         e0:e3:1e:c1:16:72:47:94:ee:05:9a:42:1a:95:40:f1:84:2b:
         49:9a:84:73:b2:ac:4a:50:2c:19:96:10:ed:b8:58:48:71:95:
         32:2d:a4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:18 2025 by rpki-client