This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
File:                     Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json)
Hash identifier:          l4SLZpBsM3HQOTqyTk/u+QQ+HtBncrrMovyW6Sy6OkU=
Subject key identifier:   04:2B:02:67:0B:AF:5C:7D:BB:97:3C:3B:DA:7F:43:42:14:2D:BF:E8
Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
Certificate issuer:       /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
Manifest number:          AC
Signing time:             Fri 05 Dec 2025 04:12:47 +0000
Manifest this update:     Fri 05 Dec 2025 04:12:47 +0000
Manifest next update:     Fri 12 Dec 2025 04:12:47 +0000
Files and hashes:         1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: FAvkLvQLlS/Hq4pvWavdriwfEcVLupIP6AIBTO02Zi4=)
                          2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: ItkaXldx6gtahTIjrAXDCkQay4mCRAu8VzlcwRatTFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
                          rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
        Validity
            Not Before: Dec  5 04:12:47 2025 GMT
            Not After : Dec 12 04:12:47 2025 GMT
        Subject: CN=69325bbf-fc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:d4:be:94:86:36:29:1e:46:8d:ce:aa:4f:
                    e6:00:35:f1:6d:ff:b9:29:81:e6:00:71:07:06:99:
                    ee:d7:05:5f:fa:9a:d9:eb:4b:c6:7d:63:62:f5:40:
                    3d:13:2e:64:2b:bf:b5:6e:8d:19:f1:d7:0f:a0:d9:
                    d5:9e:88:c1:d1:84:98:93:5e:05:52:8e:11:f2:d3:
                    3f:16:cd:85:78:8e:8a:96:dc:6a:71:a0:49:34:3f:
                    93:30:8b:87:b3:96:6d:51:9e:ba:6f:08:07:d3:85:
                    1f:45:4f:77:dd:8d:ad:b6:03:8d:38:85:7b:78:d8:
                    bd:48:54:b0:f9:99:60:31:51:80:da:5b:d2:1f:80:
                    bd:f3:aa:50:e8:8d:4e:b8:39:8a:f1:d7:d1:4a:7e:
                    4b:6f:df:59:e0:08:99:de:0b:30:6a:ee:1e:d4:51:
                    ac:f4:0e:a2:fd:4b:b4:4e:e4:da:21:4c:9b:04:2d:
                    59:44:e5:08:fe:55:03:fd:9c:86:33:b6:5c:e9:93:
                    80:be:da:41:4f:fc:2e:b7:0e:57:e2:20:b6:4b:e4:
                    55:b4:93:85:a7:38:b2:fe:8a:36:0e:02:27:03:44:
                    e9:c6:28:3a:f7:53:3e:ef:22:3e:a7:0c:59:b8:09:
                    9d:b2:eb:a3:8b:9a:58:46:55:6a:1c:de:39:f1:07:
                    77:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2B:02:67:0B:AF:5C:7D:BB:97:3C:3B:DA:7F:43:42:14:2D:BF:E8
            X509v3 Authority Key Identifier:
                keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:13:41:2a:ad:71:b2:40:72:43:d3:97:eb:0e:67:2d:74:f2:
         67:e1:94:e7:82:96:3d:32:0b:8a:2d:46:16:c7:6d:01:d8:38:
         a6:f8:f3:e1:8f:ab:2c:b9:a6:fc:0d:ba:54:a8:f0:0a:0f:0d:
         c6:c2:a2:a3:f0:9e:b2:35:76:8e:bb:c0:b7:70:f4:c9:5a:9f:
         c5:3a:5b:db:3c:89:ea:22:36:d8:e2:74:b5:e8:05:61:ea:f7:
         eb:d3:8c:3c:dd:0d:55:4d:74:47:ad:58:f1:1f:52:b5:b1:11:
         b4:6d:79:80:2e:14:d2:75:e7:a9:f9:9b:e9:2b:20:e9:22:1c:
         ff:a2:e4:aa:63:3f:6b:26:09:d8:fe:8d:b2:f7:1f:03:fa:ff:
         bc:f2:95:bc:19:80:9a:3b:df:9b:16:2e:c2:67:d3:c2:c9:c8:
         60:91:7f:0d:6c:a6:1a:9f:5f:d7:e3:ee:ab:3b:87:9c:ab:2b:
         20:82:92:e7:e4:3e:7e:3e:a4:e2:a4:72:6e:99:a5:15:e8:b0:
         6b:ff:1c:6c:eb:0d:77:51:17:47:1c:50:99:75:b7:96:d8:89:
         31:47:ca:66:c0:a4:e7:bd:7d:0c:48:0b:4f:ec:4e:2f:05:ae:
         28:4b:d3:54:b0:2b:ec:91:70:c1:97:ab:85:ce:0f:1a:1f:a1:
         9d:71:b2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:24:29 2025 by rpki-client