This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
File:                     G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json)
Hash identifier:          bBYjQfEvLXLgZE7Z/y6Zral3W+yuFUV0Qrg6gcqavxc=
Subject key identifier:   53:BF:4A:C7:52:C3:04:8C:E2:98:0C:32:E5:4A:24:7E:86:79:86:83
Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
Certificate issuer:       /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
Manifest number:          57
Signing time:             Sun 21 Dec 2025 06:12:47 +0000
Manifest this update:     Sun 21 Dec 2025 06:12:47 +0000
Manifest next update:     Sun 28 Dec 2025 06:12:47 +0000
Files and hashes:         1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: 9Wu7XrvLdOq4gsOdMZKJE62pLWLSFxWlI1YDVmI23xE=)
                          2: 6D18C6E88FF311F0B3309340C4F9AE02.roa (hash: c9l4QPfF5HgbdK2wjGcEEf1Z5xYqEsv1DWpNYE3IzBw=)
                          3: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: BfA3s4/uFwS/+pxJ7ydc7p+vBZQ3SLc68WxBr74xpL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
                          rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 06:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
        Validity
            Not Before: Dec 21 06:12:47 2025 GMT
            Not After : Dec 28 06:12:47 2025 GMT
        Subject: CN=69478fdf-347f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:fd:c6:b8:75:71:b5:69:7d:7c:c5:9a:a6:
                    12:ed:eb:ad:e8:38:2f:fb:ed:5e:d6:7b:cb:42:3e:
                    fb:de:12:fa:c8:e3:ba:cf:64:7e:30:84:b5:3d:0d:
                    dc:51:9e:9d:e2:07:fd:b9:2b:74:6e:5e:b9:a0:1a:
                    14:99:30:79:42:47:71:01:b7:fb:48:81:e5:88:ac:
                    c1:f2:2f:01:7f:aa:b4:26:f1:e3:e6:50:ca:4c:ba:
                    24:4d:63:93:72:90:6e:ba:4c:29:42:91:79:49:e7:
                    2e:a9:d5:f4:42:52:61:fb:cd:7a:ba:ac:89:1a:9e:
                    f3:a3:bf:3b:27:6b:87:08:c3:25:b2:f0:4c:76:35:
                    e0:ea:23:fe:54:48:8e:ec:90:33:d6:fa:2b:28:81:
                    3f:35:c9:b3:60:57:b5:00:b5:2c:6f:b0:c0:b0:9c:
                    33:93:6d:66:ef:30:6f:9c:c3:4d:02:ac:6c:3f:eb:
                    60:08:48:7b:43:25:f5:bd:eb:68:2c:16:39:b6:65:
                    90:9b:fc:8d:cf:ab:55:8e:de:c7:88:b6:c9:5a:ab:
                    bd:84:dd:b1:63:98:95:29:ce:0b:59:9b:6b:4e:11:
                    14:ba:4a:22:e7:cc:6a:38:30:a3:d9:43:b6:f7:61:
                    50:6f:a1:64:ff:ed:81:db:1a:bf:30:59:dd:38:8b:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BF:4A:C7:52:C3:04:8C:E2:98:0C:32:E5:4A:24:7E:86:79:86:83
            X509v3 Authority Key Identifier:
                keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a6:1a:e7:59:8d:23:9f:0a:44:85:1f:6d:b5:0d:7d:dc:67:
         da:14:70:b6:f5:3e:b6:ed:7d:b9:c1:7b:73:b4:2e:2c:4d:81:
         fe:af:0b:6a:ed:0a:ba:d0:51:52:6f:bb:fd:15:a5:c9:3b:43:
         12:dd:2e:7e:17:3d:c6:39:70:26:cb:3c:3b:75:c6:cf:99:58:
         71:cb:0b:9f:56:91:85:bf:a6:13:16:15:c5:71:73:5e:90:a4:
         9b:53:c3:44:6b:33:69:6b:1c:cf:2d:33:a9:3a:37:7f:2f:e5:
         7f:93:9a:62:ab:9f:ba:f1:f1:50:36:82:ea:c7:7e:27:4f:78:
         45:cc:18:79:33:7d:04:b8:55:10:e4:b7:ff:36:7b:05:5f:0b:
         a4:1f:6c:66:81:ae:fc:b9:4f:d4:24:63:30:f0:41:1f:58:68:
         a1:f8:a1:7b:33:d1:6e:cd:b9:4b:c0:f6:68:ba:ab:7f:d3:6b:
         62:95:27:13:6e:3f:3e:6b:78:ce:95:2c:a2:dc:4a:29:ca:0f:
         8f:6f:11:b7:a3:85:49:e0:82:0c:1c:5c:ff:b5:cf:75:71:67:
         07:52:92:99:06:a2:af:50:8a:93:d4:40:21:12:03:98:21:93:
         bd:83:fa:6b:e0:28:62:54:55:53:bb:e2:f0:88:58:ed:cf:67:
         02:d3:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:19:23 2025 by rpki-client