This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
File:                     g9YM-N6oAia4ByS83mcD0Q1lf_4.mft (raw, json)
Hash identifier:          lvMWs4h6xdg2Li419Qvjos9/jVKf6SaNyW0EOA9WnSs=
Subject key identifier:   44:0C:D3:C0:1C:F8:BF:E7:86:0D:1E:5F:2E:C1:E2:A7:FA:02:11:72
Authority key identifier: 83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE
Certificate issuer:       /CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
Manifest number:          07B7
Signing time:             Thu 04 Dec 2025 21:49:25 +0000
Manifest this update:     Thu 04 Dec 2025 21:49:25 +0000
Manifest next update:     Thu 11 Dec 2025 21:49:25 +0000
Files and hashes:         1: g9YM-N6oAia4ByS83mcD0Q1lf_4.crl (hash: LRQAmtLtMv3vyxrwUm8+kTaR65gEPqkftH6z0Pjj39Y=)
                          2: FC1D8B7A9C7C11ED96690F39C4F9AE02.roa (hash: GaFDcUcEWV5tnryiYR88U/olXhGbw6GEBeuHpqFSkow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl
                          rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F7A1, serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
        Validity
            Not Before: Dec  4 21:49:25 2025 GMT
            Not After : Dec 11 21:49:25 2025 GMT
        Subject: CN=693201e5-6938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:5d:f6:ee:43:d9:2c:de:4f:1d:70:ca:04:
                    e1:b5:80:04:eb:4a:b4:3b:73:b5:48:13:45:61:1b:
                    01:df:e4:0a:8f:42:03:54:24:b3:b4:07:a0:00:f8:
                    b0:4e:c8:5c:e5:04:29:ef:48:cb:6b:d4:38:1b:c9:
                    e7:c4:e6:a0:93:0e:4f:37:51:0a:b5:f1:e2:1b:b7:
                    eb:18:57:07:3b:b5:8c:90:96:2d:bc:8c:e9:35:9a:
                    63:28:3a:a7:2f:e0:ea:67:18:33:f6:c7:6e:dd:30:
                    dc:d6:95:d0:22:ff:dc:84:be:e5:8b:45:37:1f:41:
                    ec:7a:d7:c2:a6:88:21:90:3b:9a:24:0e:a7:05:7f:
                    65:3e:91:91:1c:74:09:ae:94:f6:d8:46:2c:ab:ed:
                    5c:3f:86:86:5f:3a:1f:92:50:14:0b:02:21:d2:58:
                    dd:2f:85:fc:40:37:f0:46:87:13:75:d2:d3:4c:f3:
                    74:4c:76:9c:c6:d5:4f:80:91:c7:e7:e3:f0:9a:59:
                    5b:b5:ff:be:d8:ba:39:0b:1c:ec:dd:50:80:ab:a7:
                    0e:4d:51:98:1a:dc:a6:b1:3c:df:a6:f7:93:b5:c2:
                    32:b6:99:5b:3a:74:4a:98:53:50:97:ad:da:12:4a:
                    f2:90:59:e1:85:22:db:ad:1c:37:28:fb:7f:89:cb:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0C:D3:C0:1C:F8:BF:E7:86:0D:1E:5F:2E:C1:E2:A7:FA:02:11:72
            X509v3 Authority Key Identifier:
                keyid:83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f0:95:2b:08:b2:97:19:9e:27:70:59:be:39:8c:43:9d:2b:
         11:ba:77:c9:b5:98:27:03:2f:f0:24:e1:69:11:d2:53:5c:e3:
         5f:86:85:05:0e:88:53:75:65:bd:9b:4e:6b:61:8c:a5:cc:01:
         95:e8:5d:0e:d0:1b:0f:c8:51:e7:7c:f7:a9:57:ee:88:b5:ec:
         51:41:6e:ac:3a:d7:91:f1:81:17:c0:6e:56:2d:62:7f:53:88:
         52:8b:a2:51:5e:ae:c4:92:e1:40:88:7b:2e:1a:c6:f3:5b:8d:
         6c:f9:2d:de:ef:b1:f3:9e:8e:8b:80:22:d3:ea:9d:08:6d:cb:
         e7:de:12:81:a4:f9:01:eb:07:cb:6a:41:22:0d:c2:81:57:77:
         a1:4f:cf:d7:ce:3c:7c:3c:a4:c1:6b:ce:28:00:26:b4:23:86:
         4a:2d:36:2c:a7:32:37:cc:41:0e:3b:7f:da:16:43:03:40:d7:
         84:c6:ca:bf:ea:3b:db:41:f6:de:6f:02:87:4d:dc:c8:a0:3c:
         aa:b5:34:7c:fe:da:f2:71:94:1d:13:ab:71:fe:02:74:e2:21:
         ec:5d:3e:9a:73:34:1e:2e:22:09:09:47:15:39:e3:b7:d3:77:
         dd:ed:8b:6d:f5:5b:d7:6c:6f:be:c2:8a:9a:98:57:b2:fd:d2:
         24:2f:39:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:26 2025 by rpki-client