This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
File:                     Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json)
Hash identifier:          nhP2mJ4AQFXWmHwNI7VDaCsJhYJXOHvrxu3cVvsl9ms=
Subject key identifier:   6E:38:C8:5F:61:F3:84:D6:A3:D9:BF:FF:7E:C9:20:4C:DC:2F:E6:95
Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A
Certificate issuer:       /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
Certificate serial:       074B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
Manifest number:          0744
Signing time:             Sat 20 Dec 2025 21:06:52 +0000
Manifest this update:     Sat 20 Dec 2025 21:06:52 +0000
Manifest next update:     Sat 27 Dec 2025 21:06:52 +0000
Files and hashes:         1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: QBi3/lv7sflmu8VCXpLksfdR1wFIRRLzdy4cLlZ3TjY=)
                          2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: sUO+w24EDWFxtZWWupPK+h5YUKSCC6bz+nIIV5mnxZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl
                          rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
        Validity
            Not Before: Dec 20 21:06:52 2025 GMT
            Not After : Dec 27 21:06:52 2025 GMT
        Subject: CN=69470fec-f07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:2c:34:dc:3e:83:7c:d0:9f:0d:17:ef:de:
                    de:82:64:66:11:18:0a:3d:e5:f7:d8:50:42:d0:9c:
                    e5:09:5d:86:2e:ec:0e:e6:05:50:b7:a0:ad:51:17:
                    df:e1:2e:b6:84:54:65:4b:dc:aa:39:37:3b:59:f4:
                    d8:55:3e:58:45:ba:39:a5:e0:4b:19:d3:ba:0e:64:
                    f6:66:ad:5c:7e:32:7c:49:68:08:f9:80:f3:be:de:
                    d2:c9:31:30:52:72:74:97:19:cd:e7:ed:5e:26:ef:
                    ca:90:73:b5:84:00:e6:71:0a:d7:3a:38:d0:bc:a6:
                    58:8e:67:d7:6f:85:87:f4:15:77:44:93:d9:5b:49:
                    76:e6:dc:6a:8a:f0:17:c9:59:56:bd:ec:f8:68:c6:
                    28:d3:49:6e:1a:55:78:a6:0f:0a:71:6b:3e:2c:c1:
                    b3:dc:fb:0d:f3:2b:ae:78:5c:1b:fd:0b:50:6f:df:
                    fc:ac:95:4c:34:c5:ff:09:68:ea:15:07:72:d1:21:
                    23:12:21:e0:eb:db:c5:43:9c:02:28:ea:48:e2:51:
                    c4:40:b0:10:1c:84:ff:67:7b:89:b8:7d:b2:d7:e1:
                    be:b0:1c:69:9e:6f:db:e2:01:2b:b2:43:67:31:9f:
                    ee:b0:2b:d6:c9:91:84:d1:2d:48:a4:49:09:1c:8f:
                    53:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:38:C8:5F:61:F3:84:D6:A3:D9:BF:FF:7E:C9:20:4C:DC:2F:E6:95
            X509v3 Authority Key Identifier:
                keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:20:84:1d:f2:1c:7f:fc:67:63:03:f0:0c:9e:3c:ad:55:6c:
         07:9e:7a:94:46:49:77:bd:ad:30:1d:6f:95:c6:67:e8:4e:c7:
         42:b6:34:df:35:98:e5:f2:27:b0:71:2d:61:70:93:53:42:ae:
         cf:16:00:be:da:89:33:f2:76:f4:d5:38:05:ed:f1:43:d5:c2:
         5a:39:7e:33:3d:95:c8:41:77:92:c2:bf:74:9f:d8:ff:cb:bd:
         6a:a8:c2:f3:ca:77:9b:79:35:10:d9:48:92:7f:b0:8f:22:41:
         0c:d9:97:7d:e6:e6:da:13:41:e7:45:c3:0c:cd:87:32:b6:a5:
         87:9a:2a:1a:d4:28:fa:0d:35:1f:7b:35:14:77:e9:a1:d0:5b:
         16:fc:3f:e4:53:c3:c8:8f:36:fb:16:55:c2:54:12:6d:15:27:
         19:37:a3:67:d4:0c:a4:c2:37:fa:f5:f5:49:72:e6:51:9c:ae:
         cc:79:1b:20:04:22:b1:10:27:a7:df:96:bf:2a:67:3e:70:24:
         c7:13:ea:de:66:2f:50:96:b4:30:ff:54:b6:3d:84:9f:67:a9:
         71:9a:6e:d3:81:14:12:7e:56:b4:c7:79:47:50:93:50:c2:d0:
         91:fc:40:4d:2f:5e:69:28:b0:5b:71:a5:50:62:44:f0:d2:b6:
         ea:01:f8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:29:33 2025 by rpki-client