This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
File:                     G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json)
Hash identifier:          +0rY4l5uhJ8DV/im5it9KNqywabIFkigVFvNZkKZwqw=
Subject key identifier:   16:4E:78:43:85:8A:4E:DD:6F:36:DA:FA:A1:60:6E:C4:02:2F:3E:FF
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       22DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
Manifest number:          22D0
Signing time:             Thu 18 Dec 2025 15:46:33 +0000
Manifest this update:     Thu 18 Dec 2025 15:46:33 +0000
Manifest next update:     Thu 25 Dec 2025 15:46:33 +0000
Files and hashes:         1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: zkxvz8fbH9ln/xCRkE8wQe2LV9qLi47nCmrjqBltdyo=)
                          2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=)
                          3: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: uQM6SKGof/O1Wbld70qp2buHFHsOt09Sypi0b/EZeEM=)
                          4: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: yMBDorU4Lt5NEIhIOX3t46/cZp8SC2Q4+GgHPUR0It0=)
                          5: 27BCA4ECCCAD11F0B8832177C4F9AE02.roa (hash: /b/HE29VkzRu6puxi118aV61lD4MgPZJsNuOhpfIX8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8924 (0x22dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Dec 18 15:46:33 2025 GMT
            Not After : Dec 25 15:46:33 2025 GMT
        Subject: CN=694421d9-9ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:76:b1:b3:7a:fe:59:e2:8e:f2:0c:f1:4e:50:
                    37:db:99:a5:e4:4f:84:f9:fa:61:61:93:34:f4:32:
                    9f:24:ce:e3:2d:33:f2:f2:e9:c8:a0:3c:99:7d:3c:
                    33:5f:0e:05:a3:0d:81:e9:4e:98:d8:ec:b5:a4:0a:
                    79:4f:79:94:1d:d7:8c:54:3b:31:25:16:25:cb:c8:
                    db:aa:05:23:b7:01:cb:76:62:a4:37:90:12:5b:4c:
                    91:3f:87:81:f4:15:65:d9:63:7b:52:09:b4:e3:a6:
                    e2:b2:2a:d8:72:49:58:4c:0a:f5:01:9f:f2:d1:74:
                    9b:2d:58:16:e2:e0:8c:c9:6e:fc:0e:d2:07:5e:fe:
                    b6:15:95:26:e9:14:a3:bb:fc:7e:5f:ba:7a:4c:fd:
                    e1:6e:93:3c:52:22:da:b3:42:d7:39:a0:ac:f4:29:
                    13:09:ad:35:d7:1e:c7:0b:0b:67:9f:62:b8:63:45:
                    07:52:10:17:53:69:50:4f:38:72:38:0d:3a:42:2a:
                    00:2a:04:fc:52:74:05:8e:a3:34:05:26:ba:54:e2:
                    11:13:dd:0d:bc:fa:53:e7:a3:42:34:c4:b1:ca:d7:
                    8e:7e:80:7f:4e:03:ad:3d:9b:bb:16:49:05:18:35:
                    d8:dc:de:d0:4d:f7:3d:fa:3b:df:c2:61:37:85:0e:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4E:78:43:85:8A:4E:DD:6F:36:DA:FA:A1:60:6E:C4:02:2F:3E:FF
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ff:3c:a4:2e:cf:5e:62:f4:7d:83:04:27:db:c7:62:18:58:
         c2:7e:af:8b:20:ee:18:0a:67:a7:8b:29:d9:65:60:96:b8:b6:
         24:46:0d:a5:bc:74:ba:30:eb:49:34:3a:cd:a1:4c:cd:e8:47:
         0c:cb:3b:f0:e1:d0:97:55:95:da:53:eb:92:a0:4e:49:3a:82:
         cb:7d:ab:58:aa:be:f6:00:b4:01:c8:d2:e2:99:1e:ab:4d:82:
         ce:e2:3f:42:b3:fd:74:ea:cf:bb:2d:85:53:3a:b5:1d:be:16:
         d1:78:25:2d:c8:ba:cc:07:6f:d1:87:47:c9:cf:d1:00:9c:d9:
         8b:16:66:22:5b:ae:9b:d4:52:af:1e:cc:67:32:6f:ec:8a:62:
         e7:6b:52:da:bf:ae:17:d8:8e:a1:8e:31:e9:da:0b:73:f4:b1:
         8e:f7:c9:4b:2f:8f:c5:2c:70:62:9d:ee:15:10:45:75:92:e8:
         29:62:e9:1a:60:9d:af:d2:89:29:39:47:cf:2d:d5:40:36:a9:
         bb:6d:9c:72:ce:26:e7:82:ed:93:77:0a:87:16:97:60:d2:e3:
         4a:2b:bd:b4:ab:58:a6:ba:41:ff:f9:cf:97:e8:0c:a9:d4:ce:
         88:67:04:ab:1e:37:cb:e8:75:d2:a9:13:b3:59:f5:bf:ad:f2:
         db:62:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:23 2025 by rpki-client