This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
File:                     gyiT0KdSAaIToGRFUyA9Aac8-v8.mft (raw, json)
Hash identifier:          aMG8u5E06tLV3RRsMmJdiMIpf+cK4lIZtiVfJUihEkM=
Subject key identifier:   06:C5:AD:13:E4:77:9C:B8:73:2D:78:68:0B:49:8C:19:59:B9:73:50
Authority key identifier: 83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
Certificate issuer:       /CN=A9176632/serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
Manifest number:          4C
Signing time:             Fri 05 Dec 2025 05:09:50 +0000
Manifest this update:     Fri 05 Dec 2025 05:09:50 +0000
Manifest next update:     Fri 12 Dec 2025 05:09:50 +0000
Files and hashes:         1: gyiT0KdSAaIToGRFUyA9Aac8-v8.crl (hash: GFdVBJJet1oRApJ6vp0wReJGP3/wxuB7oPhChwXoHJ0=)
                          2: 9DB90EE05E0F11F09722E15EC4F9AE02.roa (hash: YgUFuSigzbesjAaXAB7QXjCPj2vjaQ0V6QVQsQKeXvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
                          rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176632, serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
        Validity
            Not Before: Dec  5 05:09:50 2025 GMT
            Not After : Dec 12 05:09:50 2025 GMT
        Subject: CN=6932691e-109a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:19:ee:ec:26:8b:eb:33:b6:a1:ca:ce:69:
                    8f:fe:b4:9d:3d:c4:00:12:a4:93:9a:05:6e:07:88:
                    15:5a:9e:ec:2e:f9:c9:9b:64:1e:e5:16:e5:18:0a:
                    1a:1d:bf:62:fe:2e:b0:26:42:46:3b:25:60:5d:63:
                    88:eb:f1:c9:a1:5c:ed:13:2a:ef:61:86:da:a6:48:
                    2c:68:c4:ac:7e:ad:4f:3d:d0:15:b6:e1:b7:fa:c4:
                    84:c9:0d:6f:9e:49:49:92:11:b8:1d:1e:5d:01:d9:
                    45:bb:4e:d7:0f:42:8a:9c:5e:29:27:0d:e0:6e:46:
                    0b:4d:f6:30:5a:7c:d0:13:b2:27:80:7e:b2:82:13:
                    2e:3f:46:e9:6a:53:61:f4:ed:a4:45:7c:ed:ff:f4:
                    73:54:1e:e8:e9:e7:44:10:ca:6a:04:d9:03:40:ff:
                    7c:d1:27:10:23:c2:dd:d9:29:c4:22:e6:07:51:36:
                    eb:9b:ea:e2:14:05:43:03:48:a8:ee:4d:c3:89:eb:
                    85:76:10:67:84:6d:74:ac:53:9f:a1:5a:d1:cf:34:
                    ca:1d:71:ae:8c:6f:82:19:55:75:c7:82:17:77:a6:
                    b4:eb:44:f1:c4:1e:9d:c8:2a:60:2f:8f:18:22:67:
                    e4:dd:07:db:e7:08:55:28:d9:69:54:19:5e:13:69:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C5:AD:13:E4:77:9C:B8:73:2D:78:68:0B:49:8C:19:59:B9:73:50
            X509v3 Authority Key Identifier:
                keyid:83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:52:59:56:74:f9:92:ed:e8:b6:63:58:92:40:d5:b7:21:
         92:db:68:c2:cc:e9:6a:7b:22:be:00:75:7c:ab:18:90:8d:0d:
         78:f4:af:51:de:bc:45:a4:23:86:07:eb:4b:4c:e9:f3:9b:e6:
         b1:1d:d8:5f:11:87:33:0e:2f:eb:13:76:6e:7f:a3:16:f6:aa:
         14:0d:80:c8:1d:ab:b9:64:34:69:48:6d:8e:08:b6:2b:37:41:
         08:35:06:7f:9e:87:12:fc:29:f8:9a:ac:b3:df:36:7e:3a:35:
         54:92:4a:20:3c:10:91:12:de:08:40:67:68:b9:61:74:d6:27:
         b6:47:ee:c0:01:d3:c9:b3:33:24:25:7a:07:6b:46:20:b0:b5:
         c2:62:79:f9:b2:1f:24:db:2e:50:e8:c5:8f:d3:46:b6:52:98:
         b2:83:13:7c:d2:15:a3:5f:82:16:17:ad:4c:a5:c0:5c:bf:99:
         2a:b0:e6:dc:d2:8d:f3:5a:bf:cf:29:19:ee:6e:29:ab:4a:07:
         68:f0:ef:46:4b:06:4a:da:e7:f6:52:ee:40:ea:02:1e:cb:67:
         3c:05:e0:28:f1:45:77:56:71:c9:ed:6e:74:df:c8:a8:73:5f:
         5a:09:6d:bf:12:c6:55:ee:14:24:d9:f3:ed:9d:b0:a7:cb:cc:
         c3:88:18:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:39:40 2025 by rpki-client