This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
File:                     gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json)
Hash identifier:          k/aVKedRiwiQYW34WULzktxfooC+DSYNbKAvbHAS0VA=
Subject key identifier:   75:6F:32:F7:59:CD:71:ED:54:DE:0B:E7:AE:6D:8B:8E:01:56:F7:26
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Certificate issuer:       /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
Manifest number:          60
Signing time:             Mon 29 Dec 2025 03:46:45 +0000
Manifest this update:     Mon 29 Dec 2025 03:46:44 +0000
Manifest next update:     Mon 05 Jan 2026 03:46:44 +0000
Files and hashes:         1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: 9VR1iVMs5d5JHwKX6PfD/SVYL+CsksaR7g/4j7y10QA=)
                          2: A78653B2561F11F09624D128C4F9AE02.roa (hash: v13B1iQ4hhFI0k63jpGnWfr1WzzOqwI0W1kZRI7DnNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
                          rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 03:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
        Validity
            Not Before: Dec 29 03:46:44 2025 GMT
            Not After : Jan  5 03:46:44 2026 GMT
        Subject: CN=6951f9a5-6272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7e:76:1d:85:d3:2f:16:ec:22:7e:09:27:bf:
                    51:0b:2d:b8:03:62:89:d5:d6:82:e8:56:7d:a3:be:
                    58:4b:41:38:c1:05:ae:d2:7a:af:a7:e4:71:c8:d9:
                    dc:c7:3d:0c:ef:93:76:7e:95:b2:86:62:97:d1:0d:
                    70:00:36:2b:0a:a5:34:b2:cb:b7:46:ec:ef:c9:85:
                    2a:bb:9e:0b:d6:b5:1d:16:f8:fd:10:79:34:e3:4a:
                    ef:00:a6:6b:d0:38:05:9f:1e:dc:d0:20:bb:32:53:
                    14:02:c3:9c:37:8d:8b:8d:c8:9e:7b:ac:ed:01:54:
                    47:0d:da:8a:d8:74:2c:41:75:82:e0:66:24:4a:a0:
                    da:b6:6c:c1:64:0d:52:ad:c9:63:ae:2a:f9:8a:5c:
                    ad:03:c4:d8:8e:31:11:d3:07:54:b2:61:31:bd:70:
                    78:10:b3:70:7c:0b:34:2a:f3:b9:b1:32:ba:3c:13:
                    7f:e9:f0:e1:30:1d:e5:5e:e0:1a:f3:4f:4a:4b:1a:
                    dc:f3:cf:a8:c8:23:ba:2a:fe:75:63:a2:5d:c6:1d:
                    7d:cf:96:57:7a:71:2d:0a:8e:c8:18:31:cc:a8:42:
                    2a:fa:92:37:33:81:32:4c:dc:38:d2:9f:29:11:50:
                    68:d3:0b:42:eb:42:31:0c:b1:02:b0:74:20:92:9f:
                    8e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6F:32:F7:59:CD:71:ED:54:DE:0B:E7:AE:6D:8B:8E:01:56:F7:26
            X509v3 Authority Key Identifier:
                keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c1:cc:7e:46:53:f2:f4:33:34:4c:e8:ea:7d:e0:2f:30:ab:
         d0:44:36:05:4c:7f:fe:f9:e0:55:94:54:c3:4c:bf:37:4b:4f:
         00:a5:0b:b1:f9:31:6e:84:ad:3b:19:bf:60:bc:89:fc:05:e5:
         b3:05:db:11:06:ce:d7:1e:de:a2:de:ad:87:85:05:2e:76:dc:
         a8:2a:f5:d0:d9:0c:a7:e2:7d:05:53:75:23:c6:9d:92:29:b0:
         ea:4e:22:d1:dc:32:8d:5c:e8:09:be:61:16:e8:91:42:ac:f6:
         90:82:3f:17:2b:db:ee:ea:23:50:2b:6c:a0:4d:82:35:4c:bc:
         a2:0c:37:cc:6e:b2:eb:93:88:8b:81:09:76:f5:6a:94:67:ad:
         6d:17:b2:e3:e9:54:4d:cf:d1:21:c0:a9:de:6e:da:9c:21:59:
         a5:53:60:f0:e7:ab:e1:64:b9:f5:8f:26:01:50:5c:60:05:5a:
         4a:d8:85:8c:c6:34:f9:b3:23:ed:b6:b0:fd:ca:b0:c5:dd:b2:
         fe:27:39:09:a0:32:4b:a1:f0:07:75:69:aa:ce:f3:50:c9:4a:
         1e:5d:c2:cf:70:b1:f3:91:35:d3:2f:df:98:a7:24:ea:3a:2c:
         02:16:45:dc:eb:84:24:f5:b7:52:3a:69:f1:b3:13:be:d9:bb:
         2b:57:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 06:55:36 2025 by rpki-client