This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
File:                     gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft (raw, json)
Hash identifier:          DQ4N5aa3+wTvMT3nn9raRUjczw1E8TmVY5gmjncM/rg=
Subject key identifier:   67:3B:48:FD:CE:F0:4F:55:E5:F1:B3:95:23:FA:21:DC:D3:3C:79:F2
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Certificate issuer:       /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial:       3609
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
Manifest number:          3560
Signing time:             Tue 30 Dec 2025 14:42:27 +0000
Manifest this update:     Tue 30 Dec 2025 14:42:27 +0000
Manifest next update:     Tue 06 Jan 2026 14:42:27 +0000
Files and hashes:         1: gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl (hash: IwvUVLEFftbcBGKnmnD0tVCtUlYwB/FipYCzwtNalRI=)
                          2: 7D883CF033F911E98674843BC4F9AE02.roa (hash: kvRz79x323/sz1CS5sLMmHqk7HExlk2aKA5DVgo+je4=)
                          3: 7E04A27C33F911E98674843BC4F9AE02.roa (hash: MUiCEFkOTO4FtkjvpufTX4GTFRhCPjdetQYvgSwrwG0=)
                          4: 24108E38125C11EFA53AA21EC4F9AE02.roa (hash: VqM+TAIOBknioMAJ/ATM6gx0sTDGMk2zuwyk43OpKzI=)
                          5: AA2A006C340411E9A22CD05CC4F9AE02.roa (hash: cjk5XxryDCD9iYNOdFDhTcqSurq/6QehBRcXynDGfWE=)
                          6: A98C92A0340411E9A22CD05CC4F9AE02.roa (hash: 2jXUTHIbe/4zB55x5aVqbJ++TpfrSTqoaosirfZlKp4=)
                          7: A8ED77E2340411E9A22CD05CC4F9AE02.roa (hash: tmtO11OOtDriXyiX8yIjjm/tLba1skzLPKICGtpamPs=)
                          8: 8C7BC30E5B7E11F0AA42172EC4F9AE02.roa (hash: T4ooPvrdLBAfiayLnI4MRWTb1Jb1klBjv7+Ml585mqQ=)
                          9: A8689054340411E9A22CD05CC4F9AE02.roa (hash: 9Abm2hwP5n1eigQRbM/2Ald4kJwUC5p7xAvKRar2kxA=)
                          10: 26CCB614E0D011E9B0E8C36FC4F9AE02.roa (hash: kC85zV9vfowONrQ/4lH4osyAc/gnJivigTW1tOC5o5I=)
                          11: AACC7DA6340411E9A22CD05CC4F9AE02.roa (hash: 7vOKeyVZ+3C3IU2Q2LWPiPgpmUgrqFfYYBhoSV6xIdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 14:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13833 (0x3609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
        Validity
            Not Before: Dec 30 14:42:27 2025 GMT
            Not After : Jan  6 14:42:27 2026 GMT
        Subject: CN=6953e4d3-d47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:91:05:a5:c4:6c:4b:57:5f:32:1c:ac:6a:
                    32:e6:08:d9:5e:4c:72:e7:ab:a5:46:31:16:ac:1d:
                    fc:73:e4:98:0c:c2:cc:39:f9:f2:f5:43:73:82:a7:
                    2e:3f:ca:6a:42:e1:c1:bb:18:13:87:b9:29:e4:35:
                    0d:1d:dd:5c:1a:ad:a9:76:df:e1:7d:13:f5:6c:85:
                    79:ff:cd:e2:e1:fe:4b:14:3a:79:01:06:6f:0b:6c:
                    f4:f4:1e:00:13:ef:94:7c:a5:32:6d:84:eb:d3:eb:
                    25:ed:5b:4f:0a:a6:1d:58:e7:b2:f4:ae:69:91:99:
                    2a:29:f4:87:ea:57:21:4a:40:a8:9e:cf:f4:ce:0b:
                    79:75:df:0b:59:aa:15:8d:b4:36:0d:08:99:96:c6:
                    8a:e6:0d:db:a4:de:95:dd:1e:b3:19:64:4f:ef:43:
                    85:33:26:4a:90:13:e7:5b:b8:7d:9a:85:f6:0d:c4:
                    54:ca:2a:47:99:fa:0b:c7:07:66:d4:af:c4:48:4f:
                    4a:46:e6:28:9f:12:d9:c4:61:e4:05:cd:66:a9:4c:
                    45:42:38:fd:81:f6:c1:f3:02:4f:44:c3:8a:eb:d3:
                    91:61:51:5c:6c:ad:7e:86:74:a9:17:57:f0:f1:97:
                    86:c0:b3:1a:10:1f:53:07:10:b1:a3:6a:b6:30:1c:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3B:48:FD:CE:F0:4F:55:E5:F1:B3:95:23:FA:21:DC:D3:3C:79:F2
            X509v3 Authority Key Identifier:
                keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e9:4e:0f:e0:8a:b8:62:92:a7:74:79:14:66:ed:25:22:e2:
         99:b8:2e:82:d0:63:82:a2:3e:d8:5b:6f:a2:dc:8d:bd:93:24:
         fa:19:0b:94:8b:50:73:00:0b:d2:1b:be:a4:0a:12:de:a5:9b:
         2b:cd:c5:6d:48:cf:2e:95:f0:20:bd:66:b7:c6:81:49:05:52:
         1e:13:57:6d:63:c4:d7:7c:06:55:26:cf:51:8f:99:19:a0:50:
         43:c5:e6:fb:36:b6:98:8f:86:49:02:76:c9:56:2c:5b:da:ef:
         0e:2f:83:09:58:cc:b2:03:3e:66:35:6a:74:83:2a:a2:8c:57:
         af:34:2d:ac:6d:a6:50:9e:71:c1:e4:9f:78:59:69:cc:41:8a:
         25:36:a6:ad:11:d2:f2:74:96:b0:e6:31:36:e2:36:f8:0b:93:
         b3:26:26:55:b7:cc:a1:42:2c:5f:e7:ce:75:27:61:8b:45:cc:
         3c:05:4f:81:f4:2d:8f:38:19:62:6d:f8:a4:82:94:b7:f9:7e:
         83:83:4e:9b:69:4f:81:da:29:e5:b6:79:87:c7:5f:41:6a:a9:
         77:31:24:f9:25:ef:44:fc:91:53:7b:0a:e4:2c:05:14:8f:e1:
         8b:04:30:dc:f6:e6:c8:08:07:9f:75:65:0a:a9:4f:ec:7f:c5:
         0e:30:42:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:58:46 2025 by rpki-client