This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
File:                     GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json)
Hash identifier:          jN5ImXH7xmZzmQ5uXyDSdFXtJPOwYWg8m9Do3VZwoHU=
Subject key identifier:   7C:94:1D:2B:37:06:4B:C5:9D:34:8F:2A:76:75:04:76:71:22:2E:97
Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE
Certificate issuer:       /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
Certificate serial:       34DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
Manifest number:          55E9
Signing time:             Thu 04 Dec 2025 14:46:56 +0000
Manifest this update:     Thu 04 Dec 2025 14:46:55 +0000
Manifest next update:     Thu 11 Dec 2025 14:46:55 +0000
Files and hashes:         1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: VpqWgKgjko7usykT5/H0IRAq9nbPAwz8Xh5htD4Lnn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl
                          rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 14:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13534 (0x34de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199885, serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
        Validity
            Not Before: Dec  4 14:46:55 2025 GMT
            Not After : Dec 11 14:46:55 2025 GMT
        Subject: CN=69319edf-a150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:cf:77:5c:39:d5:80:56:62:36:2d:f9:de:
                    27:a7:07:4b:8f:a7:e5:fb:d2:a7:6f:81:1d:3b:38:
                    fd:71:16:bc:87:7e:a3:4b:55:5c:cb:e5:76:05:8d:
                    3d:0b:71:43:25:b7:d8:c1:09:68:f4:df:d4:3d:67:
                    0e:fc:08:9d:00:ca:b6:90:fa:09:7b:83:9b:ec:71:
                    8b:28:d8:cf:a2:5e:9b:f5:ef:0b:d5:ef:db:f8:d7:
                    c2:58:a8:f9:35:33:c4:65:cc:a2:17:54:f8:eb:30:
                    74:fd:78:e2:85:da:b0:d4:74:22:af:f8:62:ad:4d:
                    d3:f1:3f:fd:3a:99:3a:b2:68:5f:09:40:d9:63:ca:
                    34:8d:74:5b:f6:3b:0b:c3:7e:0d:3a:e1:9b:e4:31:
                    f6:42:62:4c:2b:47:09:3e:b4:14:96:c5:a7:52:9f:
                    7c:45:fa:34:a5:28:c3:cb:d1:ed:d9:8b:44:60:96:
                    05:2b:60:85:45:06:43:ea:27:3e:78:b9:65:aa:5c:
                    3a:a3:38:fb:01:37:0a:7b:f7:36:7d:2b:f4:37:38:
                    0a:97:0a:6d:d9:d7:e7:8b:fe:a9:5b:f9:b0:94:5c:
                    6e:52:ec:24:8f:41:3d:91:67:d8:89:11:0f:59:2e:
                    75:48:24:81:fd:b9:e2:16:fc:23:9c:37:60:d3:65:
                    e4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:94:1D:2B:37:06:4B:C5:9D:34:8F:2A:76:75:04:76:71:22:2E:97
            X509v3 Authority Key Identifier:
                keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:8c:80:5a:e6:f4:bb:c3:96:d6:bf:9e:c1:ca:79:51:d7:bd:
         f6:9d:be:31:e9:42:af:6e:d3:fd:24:f4:af:da:28:cb:71:38:
         7e:33:14:1a:d3:d4:94:37:4f:82:c8:a0:91:b8:a1:85:9f:dc:
         34:16:59:1c:58:ac:a0:71:ed:e3:7c:ff:70:b1:e6:c7:5d:2f:
         fb:58:0d:e9:37:f5:5a:80:be:3e:1d:8f:46:c6:9e:b0:e1:26:
         e9:23:f2:41:85:f1:20:a3:e4:62:06:f1:1c:c9:b4:5f:1d:19:
         e5:a4:18:83:37:70:a2:6f:0a:95:7a:48:3f:20:1d:d3:c7:e8:
         ad:76:ea:b0:84:f4:ab:d2:af:7d:ed:ef:53:f5:1d:cf:a7:41:
         49:b6:fd:82:13:13:84:d5:43:b9:f4:18:9c:5b:4c:c0:1d:96:
         6c:8a:04:36:9b:6a:79:a5:76:9d:77:77:00:c5:62:7e:61:cd:
         a8:5b:74:a7:6a:9f:c3:79:a0:ee:97:cd:8d:c0:72:2f:65:7b:
         1e:5a:20:94:0a:70:18:9b:a6:4b:cf:06:7c:d4:31:4a:e4:55:
         ba:bd:ae:44:20:75:51:b2:8c:60:91:70:51:f2:1f:e0:2d:08:
         20:00:06:94:7d:c0:26:8c:9c:ea:72:88:45:0f:de:8e:d7:ef:
         92:01:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:28 2025 by rpki-client