This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft
File:                     gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft (raw, json)
Hash identifier:          ypAnTk9KB2+WW7aCjOoZbqf21wsnsBcVKAm3w7h4jGo=
Subject key identifier:   D5:0C:1D:D5:D4:C4:C3:7B:0F:C6:85:43:62:98:3A:F8:C2:E5:36:8F
Authority key identifier: 80:60:50:56:33:93:4E:4A:C9:07:17:B2:30:94:DF:98:45:6A:BE:95
Certificate issuer:       /CN=A915D8E2/serialNumber=8060505633934E4AC90717B23094DF98456ABE95
Certificate serial:       07DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft
Manifest number:          0947
Signing time:             Thu 18 Dec 2025 20:47:15 +0000
Manifest this update:     Thu 18 Dec 2025 20:47:15 +0000
Manifest next update:     Thu 25 Dec 2025 20:47:15 +0000
Files and hashes:         1: gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl (hash: aXVyz7MVBh0tdsg4VLyYEzr5mtq0S8kqTpevK8vsWaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl
                          rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014 (0x7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8E2, serialNumber=8060505633934E4AC90717B23094DF98456ABE95
        Validity
            Not Before: Dec 18 20:47:15 2025 GMT
            Not After : Dec 25 20:47:15 2025 GMT
        Subject: CN=69446853-44c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:95:51:7b:63:2c:69:61:8a:e1:80:50:4f:
                    b9:3f:4f:93:87:b5:94:dc:41:16:60:a4:0c:ad:6d:
                    c4:71:72:56:d2:50:fe:ec:2d:3b:4e:00:31:f7:bd:
                    00:b5:18:4e:75:50:40:d7:e2:ed:81:21:6f:3a:8b:
                    66:02:bb:20:30:03:2d:8e:82:cc:d1:48:02:41:0b:
                    ec:02:1d:02:57:cd:50:c4:51:f9:f0:34:79:82:b5:
                    8a:8a:e5:6c:16:50:58:62:07:f7:30:df:17:34:b5:
                    86:f8:09:51:e3:41:ad:64:13:ca:99:1a:70:f1:76:
                    16:41:c7:b6:22:2b:b7:8e:4e:f2:35:ec:2d:9d:eb:
                    45:3c:db:b2:12:cb:f7:e4:f4:b8:75:01:99:f7:85:
                    cb:2b:d5:9b:23:5a:ce:be:4d:66:ab:da:ce:41:cc:
                    ac:e3:72:d8:83:a4:dd:0f:78:40:70:df:60:ad:47:
                    da:d4:11:5f:a7:bd:1d:00:3d:b8:a5:e0:20:81:83:
                    fe:7f:ca:88:b4:e8:2e:f6:9a:2e:4a:25:bb:cc:a1:
                    4b:c3:7c:68:cf:31:ed:5b:1f:45:9f:89:7f:68:7c:
                    52:de:11:82:9d:b0:97:25:45:8d:ca:c1:c6:b6:cf:
                    a7:e6:fd:4b:09:1f:ab:8a:de:6f:59:f6:cf:e2:ea:
                    ce:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0C:1D:D5:D4:C4:C3:7B:0F:C6:85:43:62:98:3A:F8:C2:E5:36:8F
            X509v3 Authority Key Identifier:
                keyid:80:60:50:56:33:93:4E:4A:C9:07:17:B2:30:94:DF:98:45:6A:BE:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:cc:76:25:89:ff:2d:f1:35:88:88:94:6a:03:f5:cd:d7:7c:
         69:9a:17:fa:ac:e9:6b:a3:56:7c:9c:47:8d:21:dc:81:48:89:
         bc:c6:7b:fa:f7:df:35:2f:f0:71:3b:c7:e2:a3:57:12:c3:91:
         f0:4e:8c:d2:07:d3:5a:1f:25:c3:ef:08:7e:73:a0:a5:f2:ad:
         20:82:6b:6d:c0:31:da:91:3c:02:3f:9a:40:b5:bb:bb:d0:6e:
         3b:66:b8:55:71:fc:66:82:03:5e:af:13:66:3d:4c:26:7e:39:
         0c:b9:4a:6b:93:b8:c0:7d:ac:8b:8e:72:2d:5d:c8:a8:7b:7d:
         66:9f:ec:fc:a5:68:3e:b8:58:e5:3e:4f:39:a9:b4:1b:16:72:
         dc:b5:5f:73:cc:91:95:f7:d8:53:4d:7c:51:e8:66:7c:bc:97:
         1d:ca:f0:62:8e:d8:62:6b:be:b2:f4:d3:f3:eb:97:f1:09:6e:
         37:f8:d1:80:4c:5e:f0:da:32:4a:ed:c8:01:fd:2c:91:ed:2a:
         9e:4c:53:b8:b0:b0:43:88:7a:da:7c:7c:10:d7:2c:a4:4e:86:
         b4:b6:8d:4d:50:d8:fd:a2:bb:7d:4c:ad:c1:e3:7b:11:7c:b8:
         ca:48:9a:48:04:2b:d0:75:b5:ac:99:f4:bf:90:a1:0d:d7:70:
         f5:23:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:16 2025 by rpki-client