This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
File:                     G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft (raw, json)
Hash identifier:          X2r8TMjfv54UBK4B3SejHCdG7f2whtMfiPJhKTWUVFk=
Subject key identifier:   49:36:91:C4:22:92:E2:BD:FA:63:97:D5:4D:12:95:D5:29:10:04:81
Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
Certificate issuer:       /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Certificate serial:       0998
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
Manifest number:          19CE
Signing time:             Thu 18 Dec 2025 17:13:53 +0000
Manifest this update:     Thu 18 Dec 2025 17:13:53 +0000
Manifest next update:     Thu 25 Dec 2025 17:13:53 +0000
Files and hashes:         1: G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl (hash: SG57e8GDXmgWUuvW8ozJkGXWDS72tyldlbHkL8RrSn0=)
                          2: F70F5E7A505E11ED9947920DC4F9AE02.roa (hash: i9BL1rlX0oUvps1Va07G59cz+t1l/lyXzZ/KRVLbWW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
                          rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2456 (0x998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
        Validity
            Not Before: Dec 18 17:13:53 2025 GMT
            Not After : Dec 25 17:13:53 2025 GMT
        Subject: CN=69443651-a5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:7b:3a:f0:05:7c:c2:d1:7c:c3:40:95:ff:
                    c9:8b:3c:9e:21:43:7e:bd:01:fb:b1:44:49:fb:9e:
                    f9:51:a4:62:47:cb:5a:1e:6c:4e:a6:3f:22:c0:b5:
                    5d:5d:80:cc:19:ec:46:d4:ab:2a:20:a2:0e:0d:aa:
                    ba:f2:59:5f:e9:08:5d:70:5e:9f:25:fc:ef:e8:24:
                    25:66:bc:f8:1f:05:91:c4:5b:ab:72:0d:3c:7a:dd:
                    5d:78:2d:18:4a:6e:32:5d:33:9b:dd:e9:c0:5f:a9:
                    85:03:ef:ce:70:e3:da:e5:a7:02:b3:64:81:a9:82:
                    a9:e5:53:81:a5:4c:22:77:e6:91:fa:74:cd:02:89:
                    b4:5c:ab:74:d2:a6:22:1f:ca:05:c8:2b:75:44:32:
                    d0:0e:89:df:5f:13:24:03:8c:70:fc:8c:fe:19:42:
                    92:bf:6e:78:dd:04:dc:b1:6e:f1:f6:c6:9d:23:f0:
                    3d:e9:70:b0:71:c9:ed:af:63:b4:fc:60:e3:86:4e:
                    23:72:b3:81:37:ff:c7:3c:3c:db:00:d9:b7:b8:bf:
                    83:fa:f5:0c:0d:82:1e:7d:f3:06:cd:67:41:44:a6:
                    89:d9:03:e6:30:06:f1:2a:61:86:92:92:c9:12:e7:
                    38:31:1a:04:c3:ba:b6:cd:59:91:a0:6e:80:ff:10:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:36:91:C4:22:92:E2:BD:FA:63:97:D5:4D:12:95:D5:29:10:04:81
            X509v3 Authority Key Identifier:
                keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:09:c9:6e:ad:c7:dd:23:31:8d:68:e0:89:4b:6b:62:8d:f3:
         ad:a6:4e:3f:59:01:2d:33:5a:30:96:b5:23:81:49:2c:1f:20:
         04:bb:d3:ee:22:b6:4e:6f:42:ec:14:58:e6:d3:b8:cb:4d:14:
         fb:e5:1d:e1:04:3c:90:62:3d:65:fc:9c:96:aa:ef:81:68:25:
         34:d9:74:9a:3d:fd:52:03:a9:55:49:ae:81:28:5f:0b:8c:45:
         4a:da:b9:12:54:8c:45:39:69:2a:62:42:9e:17:b4:de:e2:be:
         50:83:f9:50:71:86:95:96:b3:09:cb:71:8b:02:9a:79:44:9c:
         06:4d:a5:00:cc:fd:e6:7e:9c:1a:1c:56:d3:3f:b8:94:25:0b:
         25:96:c4:fb:a5:56:29:ff:c2:49:26:e2:1b:79:de:f2:fd:8d:
         a6:d1:68:f4:dd:05:99:18:68:26:9c:1b:38:a0:6f:6d:bd:c9:
         a1:3c:e8:b4:b6:05:bb:81:e5:e4:34:c6:5c:8b:e8:98:c0:ee:
         8c:60:47:df:b0:fd:f7:b9:65:87:de:3c:11:3d:2a:77:6a:62:
         30:2a:59:bb:af:4c:22:21:31:78:8a:07:7c:7d:dc:2c:eb:bf:
         be:61:26:a4:6f:9d:10:0d:ea:fc:62:94:de:c1:e6:ae:a5:fb:
         be:c4:b8:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYxMUYxMTAvBgNVBAUTKDFCRThEMDdBQUQwRUI4MDk2NDNEMEU4REQ4QTQyMzU3
MDNENEY3NDUwHhcNMjUxMjE4MTcxMzUzWhcNMjUxMjI1MTcxMzUzWjAYMRYwFAYD
VQQDDA02OTQ0MzY1MS1hNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Yp7OvAFfMLRfMNAlf/JizyeIUN+vQH7sURJ+575UaRiR8taHmxOpj8iwLVd
XYDMGexG1KsqIKIODaq68llf6QhdcF6fJfzv6CQlZrz4HwWRxFurcg08et1deC0Y
Sm4yXTOb3enAX6mFA+/OcOPa5acCs2SBqYKp5VOBpUwid+aR+nTNAom0XKt00qYi
H8oFyCt1RDLQDonfXxMkA4xw/Iz+GUKSv2543QTcsW7x9sadI/A96XCwccntr2O0
/GDjhk4jcrOBN//HPDzbANm3uL+D+vUMDYIeffMGzWdBRKaJ2QPmMAbxKmGGkpLJ
Euc4MRoEw7q2zVmRoG6A/xAKiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEk2kcQi
kuK9+mOX1U0SldUpEASBMB8GA1UdIwQYMBaAFBvo0HqtDrgJZD0OjdikI1cD1PdF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD
N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VBbGtQUTZOMktRalZ3UFU5
MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ctalFlcTBPdUFsa1BRNk4yS1FqVndQVTkwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VB
bGtQUTZOMktRalZ3UFU5MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4CclurcfdIzGNaOCJS2tijfOtpk4/WQEtM1owlrUjgUksHyAEu9Pu
IrZOb0LsFFjm07jLTRT75R3hBDyQYj1l/JyWqu+BaCU02XSaPf1SA6lVSa6BKF8L
jEVK2rkSVIxFOWkqYkKeF7Te4r5Qg/lQcYaVlrMJy3GLApp5RJwGTaUAzP3mfpwa
HFbTP7iUJQsllsT7pVYp/8JJJuIbed7y/Y2m0Wj03QWZGGgmnBs4oG9tvcmhPOi0
tgW7geXkNMZci+iYwO6MYEffsP33uWWH3jwRPSp3amIwKlm7r0wiITF4igd8fdws
67++YSakb50QDer8YpTeweaupfu+xLho
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:41 2025 by rpki-client