This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
File:                     GTTTDoaMK2LqebeYJrIco-4_N0M.mft (raw, json)
Hash identifier:          zy5kQPYl/Lmv7Gug2YhwOzJQKUmBrVU/6phFsE0nFVw=
Subject key identifier:   8A:00:7C:60:A0:C2:EA:AF:67:43:4C:82:99:66:B4:66:F5:BA:40:5C
Authority key identifier: 19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43
Certificate issuer:       /CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
Certificate serial:       062C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
Manifest number:          0620
Signing time:             Thu 04 Dec 2025 21:33:04 +0000
Manifest this update:     Thu 04 Dec 2025 21:33:03 +0000
Manifest next update:     Thu 11 Dec 2025 21:33:03 +0000
Files and hashes:         1: GTTTDoaMK2LqebeYJrIco-4_N0M.crl (hash: ENR9qEt2+FHlXLAGi4mGBdIMsl1yEedK/L58yaZUMAw=)
                          2: B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa (hash: IBgskij9rFQ7x1Rb/8SiRAxqBvh1QD2stZ/UGYe/6XQ=)
                          3: B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa (hash: H2ihWAWB6DY9VC7vzXmEqGi0VAINu6hF7FGjfy4AExc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl
                          rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180FA7, serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
        Validity
            Not Before: Dec  4 21:33:03 2025 GMT
            Not After : Dec 11 21:33:03 2025 GMT
        Subject: CN=6931fe10-2bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:ad:a7:9c:fc:93:5c:6a:02:64:85:a2:4a:
                    11:52:55:f0:5c:86:d4:b1:3a:35:b5:75:d2:01:a1:
                    d4:6b:fd:9c:6e:58:8d:d9:63:b9:19:8a:39:cb:f4:
                    78:61:9c:16:26:6b:3c:03:7e:d7:0e:54:4d:2e:70:
                    6e:13:ce:51:d9:66:fe:29:47:95:5b:1c:fb:f0:cd:
                    ae:54:7d:9b:2d:68:22:3b:ef:aa:95:e5:e3:bc:c0:
                    66:fa:69:7f:d1:18:81:1e:7b:f9:89:c3:20:c5:35:
                    10:1f:ff:6b:8a:4a:d3:ad:40:1b:1c:14:59:35:5e:
                    8b:b1:02:a3:37:85:c3:63:db:8a:e4:8e:4e:f9:0c:
                    85:d0:78:83:dd:b0:92:3c:84:64:e2:1c:b6:92:fb:
                    01:b1:9d:63:56:98:ab:84:ed:68:8a:59:d4:54:78:
                    94:c9:b6:8c:c6:f4:64:73:a4:e7:8e:9c:6f:c0:c4:
                    52:8c:aa:62:90:20:63:93:3a:63:61:4a:18:32:ea:
                    ba:78:80:97:a9:c4:93:77:b5:e8:a0:82:97:4a:c6:
                    60:9d:93:09:8e:15:b0:ec:7d:15:5c:bb:e8:40:89:
                    f3:e1:f8:c4:32:99:49:43:01:7a:eb:6b:a9:1f:03:
                    32:63:b6:0a:a6:e4:c4:2c:83:3f:1d:2b:59:dc:a0:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:00:7C:60:A0:C2:EA:AF:67:43:4C:82:99:66:B4:66:F5:BA:40:5C
            X509v3 Authority Key Identifier:
                keyid:19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:aa:b8:15:da:a5:d0:36:fd:13:08:9c:a5:cb:1e:87:6b:12:
         5c:4d:4d:ad:6c:a8:5e:86:74:ed:e2:a4:08:1c:3f:72:d2:91:
         0e:14:8a:b6:07:8f:80:fc:cd:cd:4e:e6:45:b5:63:79:19:6c:
         42:65:13:bf:3a:2a:f1:6f:e8:65:7b:fe:0b:15:03:ce:2f:0d:
         65:f4:71:5c:f4:6c:cd:c8:96:33:5e:a4:76:3e:51:bd:66:38:
         2f:9a:3a:d0:73:33:bd:44:34:a3:46:ce:2e:44:70:85:e0:d2:
         4f:8f:1d:af:d0:86:9d:1d:a7:6a:13:4f:d0:78:30:3a:9b:13:
         20:69:ee:dc:7a:6e:94:ad:9c:1a:26:49:b9:99:65:00:ef:28:
         38:5d:bb:fb:11:e0:a0:78:71:10:a2:2a:7d:fb:d8:9a:1e:92:
         7c:17:38:ee:3d:df:9c:1f:02:e2:78:fc:1e:05:fa:ae:b0:39:
         1d:1e:43:f6:31:8c:f6:c0:27:83:cb:7d:ba:5a:0b:06:c7:b4:
         0c:97:a8:46:14:3a:d4:11:70:37:26:34:de:6a:1b:ba:ce:f6:
         37:f1:67:5a:3d:eb:75:93:72:f0:e1:aa:9b:f5:0c:94:8e:24:
         df:4d:c7:e6:ee:dc:31:69:fa:b9:d2:37:03:bf:7c:c9:e8:5e:
         bd:64:dc:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBGQTcxMTAvBgNVBAUTKDE5MzREMzBFODY4QzJCNjJFQTc5Qjc5ODI2QjIxQ0Ez
RUUzRjM3NDMwHhcNMjUxMjA0MjEzMzAzWhcNMjUxMjExMjEzMzAzWjAYMRYwFAYD
VQQDEw02OTMxZmUxMC0yYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA26itp5z8k1xqAmSFokoRUlXwXIbUsTo1tXXSAaHUa/2cbliN2WO5GYo5y/R4
YZwWJms8A37XDlRNLnBuE85R2Wb+KUeVWxz78M2uVH2bLWgiO++qleXjvMBm+ml/
0RiBHnv5icMgxTUQH/9rikrTrUAbHBRZNV6LsQKjN4XDY9uK5I5O+QyF0HiD3bCS
PIRk4hy2kvsBsZ1jVpirhO1oilnUVHiUybaMxvRkc6TnjpxvwMRSjKpikCBjkzpj
YUoYMuq6eICXqcSTd7XooIKXSsZgnZMJjhWw7H0VXLvoQInz4fjEMplJQwF662up
HwMyY7YKpuTELIM/HStZ3KC+4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoAfGCg
wuqvZ0NMgplmtGb1ukBcMB8GA1UdIwQYMBaAFBk00w6GjCti6nm3mCayHKPuPzdD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEZBNy9BN0ZBRDRGNkMy
QjkxMUVCQjVDODY4NzFDNEY5QUUwMi9HVFRURG9hTUsyTHFlYmVZSnJJY28tNF9O
ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dUVFREb2FNSzJMcWViZVlKckljby00X04wTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MEZBNy9BN0ZBRDRGNkMyQjkxMUVCQjVDODY4NzFDNEY5QUUwMi9HVFRURG9hTUsy
THFlYmVZSnJJY28tNF9OME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4qrgV2qXQNv0TCJylyx6HaxJcTU2tbKhehnTt4qQIHD9y0pEOFIq2
B4+A/M3NTuZFtWN5GWxCZRO/Oirxb+hle/4LFQPOLw1l9HFc9GzNyJYzXqR2PlG9
ZjgvmjrQczO9RDSjRs4uRHCF4NJPjx2v0IadHadqE0/QeDA6mxMgae7cem6UrZwa
Jkm5mWUA7yg4Xbv7EeCgeHEQoip9+9iaHpJ8FzjuPd+cHwLiePweBfqusDkdHkP2
MYz2wCeDy326WgsGx7QMl6hGFDrUEXA3JjTeahu6zvY38WdaPet1k3Lw4aqb9QyU
jiTfTcfm7twxafq50jcDv3zJ6F69ZNz0
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:16:53 2025 by rpki-client