This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File:                     gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier:          R1EBv1iaSsMH9rrOY6+HbDTJmKhuItPC8zq+hwT+fQI=
Subject key identifier:   FD:1D:19:C3:C7:F2:C0:49:5A:92:F0:63:80:35:2F:7B:B4:EC:2F:9C
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       0699
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number:          066F
Signing time:             Mon 22 Dec 2025 21:49:27 +0000
Manifest this update:     Mon 22 Dec 2025 21:49:26 +0000
Manifest next update:     Mon 29 Dec 2025 21:49:26 +0000
Files and hashes:         1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: EERFX3dfgQVJb7wcUcYQXdKmPXBgrphqK0mjArBlHwk=)
                          2: A6C94076624711EC9B815772C4F9AE02.roa (hash: XosrUy+Xd/y9+zlNKWBW88xmxi0w+unp/BWLX4a8k/0=)
                          3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: jcE65YGPbY23C0JRfHdMvEfT+xppldiedci4zrgXKQc=)
                          4: 899A5138691611EFBED13942C4F9AE02.roa (hash: VYrhe6Mi0RTaO+P8HqkxU1Qva61wirf2XWWIcdNAN4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: Dec 22 21:49:26 2025 GMT
            Not After : Dec 29 21:49:26 2025 GMT
        Subject: CN=6949bce7-0240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:0d:4c:d6:b0:44:d9:9d:33:22:bd:24:3d:
                    e1:75:db:2c:d1:a8:fa:7f:2e:0b:22:d5:11:f0:22:
                    f7:d8:a7:e1:2f:24:7d:8f:44:3f:fd:4a:6f:33:b5:
                    58:d4:ad:0a:d0:27:7c:ef:99:87:4d:1b:86:b6:2f:
                    95:2c:04:08:c0:1e:6e:cd:03:cc:57:08:0e:98:49:
                    c8:92:fc:8d:4e:80:4d:a4:65:6b:47:af:6c:00:0b:
                    c0:26:c1:fe:17:1a:01:e6:a5:fd:a2:f9:8a:8a:d6:
                    26:dc:b9:a7:6e:24:e7:3e:fa:35:28:c8:2a:1f:4f:
                    86:d4:c1:97:46:5a:d2:26:e7:59:f6:ac:8c:f3:e2:
                    2e:81:89:2c:7b:f7:51:5b:7f:55:6d:a3:ab:23:09:
                    29:9b:4f:da:2b:aa:3d:84:7c:27:01:a6:3b:6a:62:
                    82:30:f2:0b:be:e9:2c:30:5c:02:bf:0c:73:5b:be:
                    b4:6b:78:02:08:a4:7c:fd:f5:fd:cc:e0:2c:36:9b:
                    9f:e5:f3:4d:69:7a:74:6b:97:e4:ca:be:a3:ab:77:
                    91:ba:34:ba:5d:62:6e:1a:21:75:1b:93:fd:5b:3e:
                    0c:bb:77:7a:d8:33:5d:91:a5:67:14:dd:d0:5f:56:
                    71:5d:29:3d:66:1f:df:87:7d:40:4f:1b:a8:04:51:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1D:19:C3:C7:F2:C0:49:5A:92:F0:63:80:35:2F:7B:B4:EC:2F:9C
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:aa:a1:5b:5c:90:46:34:f6:00:23:3d:e9:bf:c4:e4:89:43:
         29:fe:97:54:d6:13:0c:bd:90:f6:9b:e2:06:38:55:8b:e2:ee:
         7c:e7:2d:e9:d4:2c:95:64:73:3e:2f:40:4c:c4:fd:66:18:db:
         fa:75:93:5a:16:72:88:f2:fb:c8:66:dc:2f:d9:02:97:b9:d3:
         96:99:64:d0:75:16:7e:15:f3:e8:d4:ac:17:60:3a:ba:bd:ce:
         8a:01:ea:9d:6a:53:df:1c:e1:73:fb:87:ba:97:15:73:a0:d9:
         a5:4e:7e:19:f8:6c:a6:c3:28:2f:82:cc:da:00:e5:27:d8:e5:
         61:f7:14:30:53:38:49:d4:bd:7d:bf:06:6e:fb:f7:a5:09:b3:
         85:dd:40:8d:71:9e:7a:58:86:47:2d:38:ae:c1:15:dc:2d:16:
         5b:ce:2c:78:e2:0f:35:f2:d7:1e:45:75:f1:86:98:a2:bd:2d:
         15:10:98:b4:3f:25:62:41:73:c6:5c:cc:a7:56:b9:71:d7:1d:
         61:18:3b:f3:33:22:c4:47:ca:57:97:15:53:21:b9:d8:dc:36:
         12:82:fd:a0:b5:75:53:85:15:9a:e6:18:7e:5a:5f:38:5c:86:
         78:08:5f:fc:68:34:f3:f0:10:a3:35:6f:b1:09:e9:8a:be:d2:
         96:c8:af:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 12:32:36 2025 by rpki-client