This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
File:                     GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json)
Hash identifier:          vK4Hlv3ABUWSGWcOpEp9wCfPsfZjbpEXFZzwcbehLEQ=
Subject key identifier:   41:3B:10:BE:30:74:C3:5A:8F:27:C1:56:22:14:EF:96:40:93:1F:7C
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       0396
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
Manifest number:          036B
Signing time:             Fri 19 Dec 2025 00:17:22 +0000
Manifest this update:     Fri 19 Dec 2025 00:17:21 +0000
Manifest next update:     Fri 26 Dec 2025 00:17:21 +0000
Files and hashes:         1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: WiFwN/fqBmTW+VjOMiMx2GDlt7x8RlCxeH+am965KLk=)
                          2: EC6F91D234E111F0AC656B38C4F9AE02.roa (hash: E1WKt1YaZn8IuZR2WkpfcwtdDLc+dHKZAfiwmmiESyg=)
                          3: AEF7F896B23511EF99CCD73DC4F9AE02.roa (hash: zyZNP96AkvyazKN+7Z9uXIl84GYsJy6FhTmGH2JNTf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918 (0x396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Dec 19 00:17:21 2025 GMT
            Not After : Dec 26 00:17:21 2025 GMT
        Subject: CN=69449991-cbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:73:dd:29:7c:2a:c0:19:27:82:e0:7f:4f:
                    f2:ce:4d:dc:89:9a:de:a2:fe:5b:f5:50:ef:fe:1a:
                    ae:3c:af:df:07:48:7a:02:b0:03:fb:3c:24:ef:86:
                    0b:cb:cd:c6:56:15:d9:ca:84:65:41:12:cc:f5:cf:
                    19:8c:26:09:81:3c:48:e0:48:4c:cf:a0:37:1d:5d:
                    23:6e:b8:10:b1:da:af:10:5e:cd:d3:d4:bb:9a:32:
                    17:3e:a9:b3:83:f2:a0:69:85:c7:d2:4d:09:77:c1:
                    0f:29:24:50:78:82:79:e9:10:ed:42:c3:13:c2:a3:
                    56:cf:16:84:e6:9e:8a:9d:fe:b4:52:15:6a:b8:e2:
                    5c:1c:96:56:3b:f1:ea:52:84:b5:d3:22:8f:3d:d5:
                    ad:f8:72:52:5d:49:e1:c5:bc:d0:59:3b:a0:7c:f9:
                    a6:9c:88:b5:55:d9:21:a0:9c:d8:55:fc:e7:51:9d:
                    4a:cc:4c:58:4d:39:0f:cd:3c:d5:9f:f7:e8:42:c0:
                    06:35:e6:67:26:10:27:20:eb:2a:c9:94:47:e8:4b:
                    e1:bb:88:aa:98:21:ac:12:17:d8:36:6a:c3:0e:e0:
                    e4:f2:15:18:e5:c1:d4:90:ad:d2:e3:91:0e:e3:09:
                    0f:66:27:cf:1e:9a:42:e0:a2:74:c6:e0:0a:ce:3c:
                    e5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3B:10:BE:30:74:C3:5A:8F:27:C1:56:22:14:EF:96:40:93:1F:7C
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:50:2f:52:60:f4:11:9c:5c:11:f7:0c:28:40:c2:7b:e1:0a:
         11:1b:56:19:ae:1e:2c:a9:40:64:23:c9:fb:8f:7b:69:f9:96:
         fc:f2:ed:28:5a:fa:07:1a:29:cd:46:b2:76:0f:4c:83:01:5a:
         d8:d0:16:2c:ec:91:06:6b:95:1b:ec:67:ae:c9:aa:1b:84:de:
         71:11:d1:d2:63:ae:cd:04:1f:f0:be:5b:7c:87:05:f8:04:2b:
         7f:46:56:a7:7c:32:45:81:9b:ac:a2:38:d4:93:7a:9a:33:6e:
         57:cd:ba:09:38:04:1d:2c:c7:79:34:4a:44:fd:1e:19:88:5f:
         cb:a7:d7:88:7c:7e:8e:7c:bc:ee:b2:14:e5:81:1a:de:7e:fa:
         a9:4b:5e:e1:3c:97:76:3c:e8:0b:13:ae:cf:d2:36:3a:fb:4b:
         21:c6:8d:00:7a:92:56:ab:71:6f:f3:d4:29:53:ba:11:5d:dd:
         3c:9a:3d:15:19:b4:9a:a6:02:37:fc:29:e4:61:ff:13:d7:ab:
         be:d6:2d:e2:7e:ca:7e:ea:7b:01:6f:3c:75:17:1e:88:c2:66:
         2f:ab:67:5a:b1:f8:6f:1b:16:12:c2:b2:94:e7:dc:ed:e7:32:
         2a:74:51:f0:7a:ae:49:88:9b:8e:6d:f9:52:92:1d:29:8a:43:
         c7:1c:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:47:27 2025 by rpki-client