This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
File:                     gSxjWrgxJmFeyTROfsbpAu2safU.mft (raw, json)
Hash identifier:          VKTYfLhDuylrUpUBUpyM6qDjXpgJUixOxBh+Y364dUE=
Subject key identifier:   14:5D:71:BA:D6:29:DA:20:FB:1C:6E:FC:B2:0E:66:32:CC:4C:63:F8
Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5
Certificate issuer:       /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5
Certificate serial:       06F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
Manifest number:          06EA
Signing time:             Sat 06 Dec 2025 20:56:33 +0000
Manifest this update:     Sat 06 Dec 2025 20:56:32 +0000
Manifest next update:     Sat 13 Dec 2025 20:56:32 +0000
Files and hashes:         1: gSxjWrgxJmFeyTROfsbpAu2safU.crl (hash: LlbIBC/eqU9j4TVF2tqMHGdsAhTnN1L1hNBNmgY0NsY=)
                          2: 52EF768073C511EB98AF9867C4F9AE02.roa (hash: 4w/uXYfZSRmzJc52RjrImrLh+EqtuXeWbymI1Ev9aJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl
                          rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778 (0x6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5
        Validity
            Not Before: Dec  6 20:56:32 2025 GMT
            Not After : Dec 13 20:56:32 2025 GMT
        Subject: CN=69349880-7b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:3a:ac:fd:c7:90:2c:cb:ca:fd:67:b2:63:
                    64:71:f0:53:6b:fb:a0:95:1a:35:f5:96:fc:64:af:
                    cb:6b:16:27:1c:18:29:3f:07:ea:b0:9d:79:f2:aa:
                    7c:44:39:bb:6b:71:d2:8d:62:e5:51:a7:58:d9:45:
                    68:df:af:97:a7:db:7c:8a:78:93:2f:bc:c5:86:6a:
                    f8:c8:63:1c:a0:82:06:f3:01:e8:89:e8:2c:5d:f5:
                    95:da:fe:2b:39:8d:8d:ac:37:f9:aa:54:cf:7e:e1:
                    43:64:6b:62:90:fa:1a:94:38:42:9d:62:24:5f:e9:
                    a9:4c:47:5c:41:44:05:ec:18:d0:61:6d:56:1e:95:
                    9e:cb:15:4c:70:44:30:c6:14:36:1c:02:01:7d:9e:
                    78:7d:41:80:73:8d:dd:bb:eb:57:de:34:3c:e6:85:
                    99:0d:10:52:f0:c6:17:88:54:6a:96:00:bd:68:e9:
                    99:3c:05:0b:14:90:d7:86:a6:72:29:0e:ad:18:0d:
                    5d:89:bd:7b:5d:07:dc:cd:8d:c2:3e:fb:9e:ec:cd:
                    86:e4:7c:58:8b:7b:eb:4e:69:d9:d7:99:f8:1b:f7:
                    ed:ac:14:22:55:16:a0:9a:e7:2a:e0:b6:6d:8f:b2:
                    c2:22:4d:9e:c2:76:13:8a:f1:ac:20:61:9e:6d:92:
                    4a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5D:71:BA:D6:29:DA:20:FB:1C:6E:FC:B2:0E:66:32:CC:4C:63:F8
            X509v3 Authority Key Identifier:
                keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:71:c5:0d:e7:47:f6:65:52:d8:7d:69:40:08:81:3c:38:80:
         2c:d1:f2:2e:ee:47:f6:69:3f:89:43:01:c4:cd:26:b1:0f:ab:
         43:2e:f0:2a:eb:b5:0c:b0:5b:e5:ea:17:c9:97:b3:2c:2a:f2:
         e4:2d:a9:5d:d4:bd:91:45:66:26:0e:b8:9c:17:41:a7:c9:2e:
         dc:f6:ac:0d:8f:70:62:03:7c:c1:3a:dc:dd:81:1b:96:ad:bf:
         2f:14:ed:39:88:9b:64:e5:5d:1e:84:60:6f:05:ca:71:5c:e0:
         1e:d0:66:d7:bc:42:07:19:a2:fa:a6:9c:80:af:19:ba:b2:dd:
         cf:53:48:4d:02:e3:ba:bb:7c:cc:99:8e:43:69:f5:09:1f:f0:
         92:f4:9a:14:05:06:8d:9c:ea:5f:06:a5:f8:6f:f6:45:29:5b:
         87:65:77:40:db:db:a7:d9:09:21:16:73:a3:10:39:c1:58:2f:
         c4:16:09:42:17:af:91:dc:9d:23:30:fc:73:7e:b1:e1:c0:08:
         18:e8:27:0a:05:c5:b6:bc:d2:7b:8b:96:07:1a:3b:0a:ea:ea:
         bb:8d:9f:7e:75:d2:c5:65:23:16:74:df:2b:69:ea:b4:80:36:
         70:07:55:03:8b:56:b4:2a:72:79:96:d0:94:46:25:37:99:bd:
         0b:90:83:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:00:48 2025 by rpki-client