This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
File:                     G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json)
Hash identifier:          ePNXzrHT6rvNk2r2MPSm1vzYeFSf6H8VPsk7yahoc5w=
Subject key identifier:   B4:D9:B3:2C:6E:D6:87:25:04:D3:87:B3:33:47:D8:4A:DF:94:83:B8
Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
Certificate issuer:       /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Certificate serial:       056E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
Manifest number:          055F
Signing time:             Wed 24 Dec 2025 22:37:00 +0000
Manifest this update:     Wed 24 Dec 2025 22:37:00 +0000
Manifest next update:     Wed 31 Dec 2025 22:37:00 +0000
Files and hashes:         1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: ObDu16ZQGouUrGwqarCyskJVN+LFebq08WBgVlhksik=)
                          2: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: IhF3xpRX9OoLW4rm4Xp59CrFWa/bSzisaDG59ePuZ74=)
                          3: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: 1qOnTV46N1waQtQ9X47A8DgcQV4uyBkcfnz65a0/6wE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl
                          rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 22:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
        Validity
            Not Before: Dec 24 22:37:00 2025 GMT
            Not After : Dec 31 22:37:00 2025 GMT
        Subject: CN=694c6b0c-09fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:c6:de:b1:3d:ac:e5:8a:8e:89:68:4d:81:
                    e6:5b:73:a5:a4:ee:98:3b:71:26:df:b8:bf:ae:26:
                    37:7f:00:30:8a:9a:29:76:8f:de:8f:25:67:d9:4f:
                    b3:65:06:d1:e7:9a:57:5b:2d:7f:99:ca:d6:af:11:
                    dc:f0:18:83:39:31:7e:2f:1a:3b:8b:94:9d:cd:06:
                    b0:0e:e3:92:c0:ce:1b:eb:2c:39:2f:bf:8d:69:6c:
                    ff:ee:f1:23:c9:70:90:70:9d:48:9b:6d:49:96:43:
                    fa:f3:b9:d4:01:68:30:f2:9d:41:93:da:a6:2f:86:
                    83:9d:43:52:a1:13:15:a1:d5:26:2e:e3:46:76:bf:
                    c0:62:19:c9:51:17:d0:12:7a:b1:03:56:9d:e3:ec:
                    2b:24:96:d8:38:e1:54:fd:e6:23:57:6e:6a:de:71:
                    12:d4:7c:27:80:a0:61:53:f2:54:ea:4a:e2:a3:b4:
                    77:87:c9:58:a8:bd:19:b2:70:9e:ff:a8:65:ff:f8:
                    09:7c:20:49:61:74:3c:87:d4:a2:5c:7d:e1:a0:a4:
                    59:2d:e9:40:4e:df:a8:32:f6:a4:67:39:71:eb:e8:
                    4c:d3:64:0f:b8:50:94:46:6b:28:e8:13:f9:da:3b:
                    5e:e0:2d:8a:db:2b:65:2e:4f:90:96:8f:e6:30:ad:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D9:B3:2C:6E:D6:87:25:04:D3:87:B3:33:47:D8:4A:DF:94:83:B8
            X509v3 Authority Key Identifier:
                keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:23:64:15:cf:f4:93:ed:1c:ca:03:ab:dd:77:33:14:29:b5:
         2d:21:3a:7b:c8:a2:94:f0:59:1a:1e:74:26:5d:d0:da:35:2f:
         48:fc:51:c6:07:ee:e9:f8:0c:38:1e:51:53:43:26:09:7c:e9:
         e1:e9:34:97:b9:a7:93:2b:77:43:c9:17:18:61:62:50:ad:3f:
         bb:99:a7:bc:30:52:b2:a2:4b:8c:d1:30:f4:5e:c9:85:24:e8:
         fd:1b:4d:2c:6a:f8:f3:6a:b6:2c:b6:07:0f:6d:18:c2:79:25:
         2e:1e:ee:76:61:b1:92:89:f7:cd:da:ec:30:b6:ef:e6:1d:77:
         f5:3a:e7:ea:87:a7:6d:0b:92:ab:31:37:75:90:06:9e:d4:06:
         71:8f:a2:e1:e4:4d:93:34:bb:9b:c9:15:6e:e1:c9:7b:e2:0a:
         40:97:14:16:d1:09:9b:8f:a4:dd:1f:82:e7:b7:69:09:20:5e:
         3f:18:7a:e5:ad:cd:50:42:a6:c9:15:49:f7:d9:3c:18:0d:94:
         6c:3a:e4:04:4a:52:26:23:cb:2c:e1:48:bb:05:5f:cc:ea:0c:
         2a:7c:f0:37:12:7c:ce:c0:fc:7e:2b:46:76:45:21:1a:29:98:
         c8:01:af:7a:1d:f8:28:e8:c5:62:e3:cd:ed:fc:a9:15:24:c5:
         2a:45:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 05:14:19 2025 by rpki-client