This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
File:                     GxesPclsojRSUCPv02J-ks2IR0g.mft (raw, json)
Hash identifier:          T+pxKQpH4NnNN2HzBCFeTccHDs3z0LYoLbfTdF8Tv5k=
Subject key identifier:   33:3C:C7:27:BE:F0:A3:B1:2B:F3:F5:3D:12:55:71:E6:16:13:49:D3
Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
Certificate issuer:       /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Certificate serial:       1D97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
Manifest number:          1D58
Signing time:             Thu 04 Dec 2025 15:53:55 +0000
Manifest this update:     Thu 04 Dec 2025 15:53:54 +0000
Manifest next update:     Thu 11 Dec 2025 15:53:54 +0000
Files and hashes:         1: GxesPclsojRSUCPv02J-ks2IR0g.crl (hash: T7Y3Qo1q20zBtRiUDRHm5EI4PFqOU7pTMRUVtgTm9z0=)
                          2: 8A1AF86E94BC11EC9E49DB41C4F9AE02.roa (hash: n6ab3BTwAcpH4LegBC83qaXuTY61rSuzXQeixKGRCQ8=)
                          3: C154DA14E85C11EBA2171A25C4F9AE02.roa (hash: ZoYRtsKN6J+JTMHnmtPtNWovLxxrXzjOLNI6FTTDrJk=)
                          4: 907B9B20E8AD11EBAA895D0AC4F9AE02.roa (hash: Yy12wxP/cM0LLNtHiB2aLkhSaVEMx94WCa7jMCYf9WM=)
                          5: 89654CDAB83B11EFAA80DD09C4F9AE02.roa (hash: wZqrfI6axJ6OhiwV+iuxvLbJgC05OEzm0nCXJ1L7s34=)
                          6: 4D609E86FF3B11EB910E8847C4F9AE02.roa (hash: IlNlaUUrIO5psWG9zVe/2cJLa9A72orRKr8ki0wRJ+c=)
                          7: C2EECBA0E85C11EBA2171A25C4F9AE02.roa (hash: i8SkLvPy/XtXc4ZuxfbQ0jMccOT4jPJgyB/aqJ2e6A0=)
                          8: 4E2669F4FF3B11EB910E8847C4F9AE02.roa (hash: RxEjxFNvI0DOGeP3888S1tn030BuNHUdNfLt3di15l4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl
                          rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 15:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7575 (0x1d97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
        Validity
            Not Before: Dec  4 15:53:54 2025 GMT
            Not After : Dec 11 15:53:54 2025 GMT
        Subject: CN=6931ae92-adca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:4e:93:7d:a4:17:e9:43:22:58:33:74:c6:
                    f3:96:00:3c:dd:b0:e0:0c:46:8c:f5:c9:74:b9:75:
                    32:d0:b6:55:f1:3d:f1:4f:34:db:d3:46:06:65:d2:
                    02:09:8d:fc:3c:4c:62:65:e4:bc:93:72:0f:1e:88:
                    b0:7d:67:55:68:2a:88:f0:60:34:32:fc:e3:27:18:
                    13:6a:7c:a2:62:1f:16:7d:39:74:f8:6c:ad:5e:91:
                    6e:c2:c4:22:f5:ed:a8:7b:1f:63:2c:e1:48:f3:8b:
                    a6:0e:0e:f8:bb:ff:58:15:48:a5:f2:99:b5:e6:27:
                    ea:4b:8b:0e:d0:f5:e0:a2:3e:69:4a:53:f3:4e:dd:
                    6a:89:97:b5:4f:a6:38:ca:29:c7:94:ca:58:75:b9:
                    85:c9:dc:be:eb:e1:77:b6:04:35:0c:b2:0c:13:35:
                    35:66:2b:7e:ef:8c:49:60:29:92:22:38:dc:3d:15:
                    9e:62:a5:b0:3e:92:65:06:ba:b6:ba:ce:ef:12:5f:
                    ac:e8:d2:0d:05:1c:42:54:9f:ec:25:1c:6b:3d:60:
                    b4:31:5f:8e:d2:8a:72:26:52:bd:0f:de:3f:e9:ce:
                    89:c8:24:4f:66:a2:fc:e7:d8:db:c8:70:f7:fd:19:
                    88:49:26:81:b7:5b:1b:55:55:90:1b:e4:44:d8:29:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3C:C7:27:BE:F0:A3:B1:2B:F3:F5:3D:12:55:71:E6:16:13:49:D3
            X509v3 Authority Key Identifier:
                keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a2:56:66:90:bc:da:a2:03:f5:a5:97:47:84:a8:05:62:29:
         0e:a9:26:dc:24:af:0c:8f:ed:82:1f:f5:c7:97:ef:c9:d7:b0:
         2d:b0:aa:52:29:09:a3:62:d7:57:f7:11:b5:88:0d:c2:1b:38:
         8d:d2:55:80:4b:8b:3f:ae:e4:28:02:f4:67:42:c9:ed:b6:83:
         7f:c2:3e:16:5f:43:63:e8:5b:fc:a0:b1:f5:4e:fc:a8:6d:1c:
         b1:0d:44:e5:4c:04:b4:7f:10:a8:e6:61:9e:31:88:dc:23:52:
         44:8b:ca:fd:c1:ea:87:9e:3f:d5:c8:67:eb:b9:17:13:e5:db:
         80:be:12:e3:7c:93:a3:28:4f:b7:88:5d:f3:42:23:ce:23:44:
         29:ff:60:f9:43:f2:27:47:50:4f:f5:c0:f5:6c:01:ec:d0:93:
         7d:42:65:84:15:9b:76:fd:00:70:77:19:af:74:41:40:91:8f:
         2f:d7:58:41:e1:3c:00:3a:5d:21:07:4c:da:16:dc:40:99:a7:
         40:86:b8:03:8e:48:d7:69:97:9e:82:5b:fc:41:44:e8:70:04:
         65:68:df:80:fc:37:c3:1f:83:e7:f7:89:8e:3c:33:0f:54:0a:
         9d:64:1b:f8:52:1a:ed:bf:22:47:26:65:fc:8c:bc:55:a9:98:
         04:e0:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:25:16 2025 by rpki-client