This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
File:                     15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json)
Hash identifier:          Vw2xHi/WEgkdmkq2sAe03TKHa4pkeUtitZhaIzj9XwM=
Subject key identifier:   2C:64:8C:5C:50:29:B6:E4:2E:A8:2D:6C:61:93:15:F4:F8:1E:8C:6D
Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
Certificate issuer:       /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
Manifest number:          93
Signing time:             Fri 19 Dec 2025 05:32:54 +0000
Manifest this update:     Fri 19 Dec 2025 05:32:54 +0000
Manifest next update:     Fri 26 Dec 2025 05:32:54 +0000
Files and hashes:         1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: sZeOxA8zyIxlZeOxoBIVzTbgiaofv4nxnD9NELdmGas=)
                          2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: 970zffhkVpQStk3jgKgrN42mDxhaIFK4aP3YfXR8LM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
                          rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
        Validity
            Not Before: Dec 19 05:32:54 2025 GMT
            Not After : Dec 26 05:32:54 2025 GMT
        Subject: CN=6944e386-932c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:88:42:76:72:d3:b6:ad:99:e5:68:b6:32:
                    03:68:1a:4d:df:8f:04:02:bd:74:cb:7c:67:b1:cf:
                    24:d5:0f:65:c0:89:25:a9:bc:14:80:1f:d1:8c:1b:
                    93:26:f1:86:fa:65:38:db:c6:24:80:fe:5b:00:dd:
                    3e:43:52:18:81:5f:3f:e0:53:d5:e6:db:3b:1f:a3:
                    b6:d9:ff:ba:22:33:c2:b3:12:80:4e:bf:6f:52:2f:
                    47:6f:e9:7d:a8:2d:94:a7:8c:57:63:34:6c:c1:09:
                    80:d5:d2:37:9f:e8:6c:4a:60:81:ad:f3:a1:d4:56:
                    a2:f1:70:ff:8c:8e:c8:f8:49:ac:9f:3b:47:53:23:
                    31:b8:f0:b2:7d:36:4b:3f:d5:57:49:e7:37:2b:87:
                    c0:a2:32:6e:4f:c6:aa:82:e3:5f:b9:45:6e:3c:ad:
                    8b:a2:61:af:34:f2:c0:c3:e4:59:47:17:e2:0b:f4:
                    8a:96:77:ca:af:a7:b1:20:fe:3a:63:ea:59:57:1d:
                    dc:47:e4:0f:75:c5:37:55:a7:50:65:70:8c:49:1d:
                    54:aa:50:35:0e:a1:13:ab:f9:66:42:c6:4f:37:b7:
                    b3:72:85:4a:b5:f7:1c:76:3d:e5:72:bc:59:26:d5:
                    0f:ca:c1:cb:e0:64:fa:cc:f8:84:2d:7d:f2:35:fa:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:64:8C:5C:50:29:B6:E4:2E:A8:2D:6C:61:93:15:F4:F8:1E:8C:6D
            X509v3 Authority Key Identifier:
                keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5f:6d:4a:35:31:8e:59:5b:6b:da:68:9e:2a:2f:c1:48:c0:
         ef:b4:fd:4d:93:ca:78:92:f7:b7:6c:84:7a:53:e8:23:01:94:
         f4:f0:60:c4:02:3f:45:89:da:f2:fc:dc:89:5b:f5:19:96:4e:
         68:14:31:1c:15:a9:ab:c6:bd:b4:b3:18:96:70:0f:9e:2e:f5:
         ce:33:cb:3e:d9:60:70:45:9e:9a:25:9f:39:25:a5:4a:f8:f3:
         cb:7e:a7:c1:a6:34:47:a8:6d:41:20:4d:01:8b:8f:88:ef:df:
         7a:5f:9d:1f:f1:b0:08:e7:46:c4:0e:bf:6a:c2:5e:1d:de:00:
         39:7d:be:3d:43:1f:a4:c6:a7:58:14:3b:09:b0:29:65:b6:14:
         bc:2c:02:45:97:23:c8:18:c5:1f:5a:6d:55:dc:1e:89:bd:b2:
         af:f7:77:02:08:5c:fe:d0:10:bb:e9:40:78:dc:4e:67:cd:c0:
         96:fa:54:4d:5d:96:52:ec:60:51:6f:be:b5:2a:b2:58:13:af:
         06:98:c1:8f:7b:ae:c1:e6:a4:4e:aa:3f:19:a2:b3:02:d9:d4:
         a0:22:d0:79:7f:87:c4:2c:52:b0:81:00:45:6c:91:e7:39:9d:
         b8:4c:3a:d4:3f:80:e4:9e:d5:9c:e7:6a:5b:33:e0:fc:3c:ba:
         c2:5d:ec:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:35 2025 by rpki-client