This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File:                     gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier:          bsps+Mu2VsXXp7bCq3QnEjvAm5PfwFbZ+73TkOqH0aQ=
Subject key identifier:   72:9F:CF:83:F4:90:F0:26:56:B2:E4:1B:FC:8F:09:08:9B:A8:22:9B
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer:       /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number:          C9
Signing time:             Fri 05 Dec 2025 03:50:34 +0000
Manifest this update:     Fri 05 Dec 2025 03:50:33 +0000
Manifest next update:     Fri 12 Dec 2025 03:50:33 +0000
Files and hashes:         1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: 5ex2jrCvWuEx5R36SksQ1SlAtW+xKRqqp8nvYrVvtOY=)
                          2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: iLpw/uJbge7uZ/WmLMuhiuh6b3ClTayyECZNu36JGVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
                          rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
        Validity
            Not Before: Dec  5 03:50:33 2025 GMT
            Not After : Dec 12 03:50:33 2025 GMT
        Subject: CN=6932568a-1185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:d2:0a:3f:82:1e:4b:8e:c9:6b:fe:b1:4e:
                    24:59:26:90:30:04:1b:03:4c:8f:ec:28:0a:e9:fd:
                    7a:8b:59:7c:27:f5:32:92:26:37:bb:11:34:0f:57:
                    b8:f8:f3:b0:b6:15:3c:af:b8:e3:02:02:a4:32:60:
                    50:c5:06:d3:9b:02:44:b3:0a:e4:a6:5a:44:c8:f4:
                    ec:98:5c:5e:ea:71:0d:b7:19:f1:69:cf:64:a5:90:
                    f8:41:5a:51:31:6d:79:92:a9:01:57:ba:19:05:21:
                    a6:6e:01:2d:52:7e:c2:8b:dc:14:fc:d1:0a:c0:cc:
                    5e:cc:57:16:f6:29:c7:42:5a:65:1a:6e:28:e9:0d:
                    0e:33:a1:5f:9c:00:7e:2c:d2:eb:4c:b0:a9:17:94:
                    02:81:30:89:1f:bd:be:74:8c:ba:44:d0:52:9b:b1:
                    7f:42:66:33:5a:d5:6e:2e:d4:de:61:d9:0b:89:68:
                    39:27:89:40:7a:4c:34:57:45:4d:61:b0:b4:66:5a:
                    56:2a:03:05:fb:ba:05:2b:8a:18:d4:ad:cf:52:bd:
                    04:83:df:00:41:5e:33:e8:cf:c6:3c:46:ed:7a:6c:
                    c4:f8:af:0d:60:86:cf:dd:71:73:be:41:c9:a0:96:
                    56:70:d9:dc:57:ed:e3:d8:03:ad:94:bd:e3:ab:98:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9F:CF:83:F4:90:F0:26:56:B2:E4:1B:FC:8F:09:08:9B:A8:22:9B
            X509v3 Authority Key Identifier:
                keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8e:5e:09:49:82:7b:5e:8d:91:50:a0:06:5f:bf:fc:8c:fe:
         e3:fe:ce:87:63:93:0c:ea:30:23:55:94:dd:44:ea:dc:64:b9:
         f2:2a:73:a2:00:02:c8:4a:e9:16:2a:c5:a0:07:09:bf:72:32:
         dc:26:c8:e2:54:c5:51:fb:35:2c:26:05:b3:9e:d3:3c:2e:3e:
         de:db:e3:4d:a8:af:68:e3:6f:19:a1:09:b2:37:46:ff:bc:41:
         d8:8c:ca:1e:19:be:6e:72:b3:c7:35:37:8e:4b:ac:a3:5f:f3:
         31:ae:96:10:a5:36:34:75:51:bf:b9:98:94:e5:be:62:73:82:
         82:a7:dd:85:30:aa:38:54:0a:1d:68:32:26:c8:a1:e8:6e:d2:
         8a:e0:81:3a:39:1f:8a:e3:d1:78:2e:a3:2f:46:58:ae:74:3e:
         ab:ad:9a:6d:b8:65:48:99:c1:e7:e5:c9:7e:40:64:6c:a5:0d:
         f7:74:c5:9f:da:9d:31:61:a2:3b:86:25:7c:e6:0d:70:1a:13:
         84:56:35:78:6d:79:ce:3a:4a:03:eb:01:87:ff:fd:81:4a:ba:
         0a:d9:1b:df:db:6b:f8:95:c7:cf:f7:8a:45:93:f1:9f:56:c1:
         89:d7:33:ad:c3:e7:24:50:83:b3:76:58:78:b2:8f:0c:42:5a:
         7a:fb:04:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:28:16 2025 by rpki-client