This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
File:                     GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json)
Hash identifier:          rqQ/oyt6BA3o6qtkIYrnXKpIi23FMHLqId711lEWKbs=
Subject key identifier:   30:70:A1:EF:85:5D:B5:1F:A0:5C:86:6A:64:BB:CC:86:46:59:60:4B
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Certificate issuer:       /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial:       02F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
Manifest number:          02E1
Signing time:             Thu 04 Dec 2025 23:45:09 +0000
Manifest this update:     Thu 04 Dec 2025 23:45:08 +0000
Manifest next update:     Thu 11 Dec 2025 23:45:08 +0000
Files and hashes:         1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: 7rEwj+vkms/V8vLtPV9pUiRMgQ5AqUOMkTKSYyGtI1w=)
                          2: CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (hash: gpdjBjddXDySP7XwpO7PUD9YoIqfcH1r8H5PmyuUxoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
        Validity
            Not Before: Dec  4 23:45:08 2025 GMT
            Not After : Dec 11 23:45:08 2025 GMT
        Subject: CN=69321d04-61fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:e2:03:2a:61:80:27:39:33:5c:4a:df:93:
                    2b:57:d7:87:47:0d:f4:4c:66:e7:39:55:45:ec:6f:
                    56:6b:5a:63:81:78:0f:9c:d4:99:b5:8f:b5:73:5b:
                    5b:d4:9d:34:33:63:0a:41:08:f1:5d:2c:6f:88:ac:
                    b3:c1:94:20:0a:bd:07:bf:cf:27:f5:d6:24:07:31:
                    a7:ef:f2:62:9b:ea:b2:3c:f4:5a:a6:ad:47:04:3e:
                    5d:17:5e:02:b8:41:36:37:b0:d9:d3:6d:3d:f0:cc:
                    ec:bd:36:37:ff:92:eb:ed:e9:c6:f6:9e:3f:45:88:
                    91:d8:13:19:e7:b0:66:ee:53:83:29:9a:9a:b9:86:
                    c8:2d:02:e7:08:b6:62:e8:62:b6:be:ea:a2:52:7b:
                    77:ae:c7:63:63:37:d6:23:3a:c8:30:18:7f:60:5f:
                    20:99:ad:b1:3a:e7:16:9a:ac:b6:db:0b:7e:e9:f1:
                    77:f5:d2:3e:c4:62:c9:df:1b:d8:38:ba:c0:0f:1d:
                    6a:39:24:2f:5c:b3:87:c0:a0:d6:00:7c:02:a0:94:
                    dd:8f:86:94:7d:e0:b4:0c:04:82:8f:61:65:38:30:
                    84:73:e1:8b:f2:70:49:e0:03:e0:9c:72:ea:93:90:
                    20:6c:dc:ac:99:e4:75:0d:fb:fe:85:06:83:6a:a0:
                    a6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:70:A1:EF:85:5D:B5:1F:A0:5C:86:6A:64:BB:CC:86:46:59:60:4B
            X509v3 Authority Key Identifier:
                keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cd:5e:a5:8f:1e:01:5b:ea:de:36:00:22:1e:86:7a:01:4e:
         0f:3e:ac:5c:8a:6e:03:92:52:fd:43:54:99:22:c9:66:3f:7e:
         4c:aa:1d:47:c3:e1:4f:d2:33:c8:3d:e5:27:63:26:0e:ca:39:
         02:61:4d:18:19:92:67:0b:f2:8b:19:25:5e:fc:be:b3:00:82:
         3f:3f:02:dd:3c:42:75:1c:7c:8d:12:a8:b0:77:32:db:52:7e:
         39:5c:33:07:ed:b6:3a:6d:7c:a1:55:98:f2:07:78:8c:32:44:
         f8:95:27:89:56:bd:8d:36:12:8e:d7:36:e9:85:27:07:fa:6f:
         a9:4d:3d:97:c4:1a:67:01:ca:ce:04:da:88:bb:6c:66:8f:4c:
         1f:38:dd:39:0e:b6:d6:ff:83:57:ee:71:17:dd:c5:cf:8d:90:
         0d:7c:06:fe:7c:25:b8:8d:c3:c6:6f:d5:e9:72:9e:22:02:fc:
         37:e1:cf:9c:86:57:9b:38:e9:9a:2a:d5:11:29:25:ef:1c:fe:
         ba:02:0a:44:6e:a3:42:bd:6d:61:a5:4a:55:3f:5a:66:48:e0:
         f0:d5:75:04:2f:3a:97:7e:81:65:ff:cb:81:32:e1:29:88:ec:
         f3:94:6a:66:aa:dd:4d:2c:87:88:71:eb:dd:01:19:a7:6c:d1:
         f2:0a:0e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:25:22 2025 by rpki-client