This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
File:                     gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft (raw, json)
Hash identifier:          rLIiu2FqnHdQfaFoJ+Ar68L/So4d4H70GDrZ7rAmcxs=
Subject key identifier:   4A:09:92:19:28:56:C0:87:FB:97:BB:AE:72:CC:3B:4B:C1:63:41:A4
Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
Certificate issuer:       /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
Manifest number:          91
Signing time:             Fri 19 Dec 2025 05:33:00 +0000
Manifest this update:     Fri 19 Dec 2025 05:33:00 +0000
Manifest next update:     Fri 26 Dec 2025 05:33:00 +0000
Files and hashes:         1: gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl (hash: eVdTxfrFcbWAvqPNtj9V3r2iZ2ZYFNJVQm9HK07i/a0=)
                          2: 691B3B36FCC611EF8337B652C4F9AE02.roa (hash: 9OScaduExEngNPz5wsuWcHvwLQIw8gltPcbBA5tFHWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
                          rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
        Validity
            Not Before: Dec 19 05:33:00 2025 GMT
            Not After : Dec 26 05:33:00 2025 GMT
        Subject: CN=6944e38c-18a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2b:d8:82:88:c4:37:18:7e:df:0f:11:75:fc:
                    9c:c8:e9:1d:49:e4:28:5d:d5:f9:f1:4a:0b:43:fa:
                    d0:c0:5c:af:93:52:45:df:b6:87:55:19:c9:77:8a:
                    31:6d:fc:f1:15:6d:db:5e:2f:4e:15:fa:a7:3b:06:
                    8f:f0:6b:81:7b:18:4b:d1:31:77:64:d9:45:a2:1f:
                    cb:aa:bc:13:c5:d8:9a:b9:da:2f:4f:2a:3d:a6:b6:
                    05:13:04:12:91:4c:ba:0d:74:f7:90:48:87:9e:84:
                    ae:e9:17:a3:3f:05:32:d5:ed:fa:c7:d6:bb:07:3c:
                    5a:f0:bd:ca:81:69:da:0a:76:c5:33:30:61:f7:29:
                    f8:e3:4f:27:b1:97:fa:68:48:2a:cf:ae:33:b7:f3:
                    e3:7c:83:f0:f7:c5:4d:56:03:ed:7a:e2:44:9a:3e:
                    7c:1d:1d:53:93:bf:b7:8d:25:58:f5:3c:52:96:40:
                    b5:66:c8:bb:27:3e:68:00:51:e8:d1:6d:fb:8c:79:
                    d4:5c:84:2d:06:f8:c0:da:ab:28:af:de:e7:e4:9b:
                    84:34:b2:63:c5:97:c5:f1:a3:93:23:1c:b3:62:e6:
                    bb:7f:70:d7:47:51:95:6a:8e:86:12:3f:2d:f3:8b:
                    db:61:c0:40:a4:33:1a:f6:52:59:70:3a:49:90:90:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:09:92:19:28:56:C0:87:FB:97:BB:AE:72:CC:3B:4B:C1:63:41:A4
            X509v3 Authority Key Identifier:
                keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:78:4d:37:e1:c8:e8:56:06:8e:74:cc:8d:9e:7b:ce:da:6e:
         ad:d4:14:14:17:7e:94:50:6f:65:ff:be:aa:92:92:84:cf:ac:
         9b:2e:39:eb:55:09:cf:40:98:a7:99:1c:bf:6a:30:d0:db:78:
         a5:02:a3:84:4f:a8:2f:d7:7b:83:86:18:88:47:66:f0:e3:24:
         04:d8:24:71:a0:c2:16:f1:98:c8:70:af:ca:40:c0:06:c3:ef:
         28:3a:67:7f:45:d0:38:e1:a6:b3:24:86:68:c0:84:de:eb:e2:
         a9:36:41:91:62:d9:80:56:76:38:71:cb:01:e0:f5:52:8b:a3:
         b9:e5:de:8c:34:2a:0c:d3:5d:3b:2a:3a:b3:e2:03:bc:bb:e4:
         f6:74:0b:35:50:06:13:85:be:07:1b:a4:f9:19:6e:ab:a9:6b:
         1d:7d:3e:67:2b:b7:58:6f:d0:88:7b:d8:cf:c0:01:a2:a9:99:
         f5:f5:a5:27:06:38:d4:ff:c2:b9:02:fc:e4:38:18:65:b4:f9:
         60:63:2d:f9:b1:fe:6c:df:f4:f1:bf:54:ae:f8:36:f5:96:2f:
         ec:d3:e1:6a:2f:fc:0a:9d:35:d1:aa:40:88:10:da:a0:82:e0:
         03:e3:fe:ab:fd:d0:0e:ac:27:95:2b:8f:59:86:20:27:8f:37:
         5e:a5:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:41 2025 by rpki-client