This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
File:                     GvPInPFH8v61HarolX25nThyY7g.mft (raw, json)
Hash identifier:          UdR/yqV2ZdJuDUhTTTGEQ0LjuQu6qSWolRgV+YUs+3o=
Subject key identifier:   C9:E7:FB:12:A6:59:4D:78:8E:AC:A6:A5:F9:97:A4:8A:F5:36:A9:81
Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
Certificate issuer:       /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Certificate serial:       01C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
Manifest number:          01B5
Signing time:             Thu 25 Dec 2025 02:24:37 +0000
Manifest this update:     Thu 25 Dec 2025 02:24:36 +0000
Manifest next update:     Thu 01 Jan 2026 02:24:36 +0000
Files and hashes:         1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: 37oo0ihemNQtBxKobMOTRW4viEFiopJfPwI3hwHJVN8=)
                          2: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: 5TSYl4K6oaHO9/sYuo4sA5dPP5a+BBwemJeXP7ycDF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
                          rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 02:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD09B, serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
        Validity
            Not Before: Dec 25 02:24:36 2025 GMT
            Not After : Jan  1 02:24:36 2026 GMT
        Subject: CN=694ca065-27b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:64:98:09:57:a4:d0:9b:17:15:d2:9e:62:
                    fe:53:19:4b:ba:c9:11:e2:0a:d4:a2:5d:49:1f:1f:
                    08:ce:71:e0:e2:2f:20:81:a1:e7:5d:03:bc:69:92:
                    5b:66:35:39:f0:cb:25:a1:24:eb:74:98:1b:8c:4a:
                    ce:4e:ce:67:7a:60:d3:72:7b:e1:25:08:ad:7f:dc:
                    11:7f:71:cb:41:3a:90:29:9a:9e:a7:3c:1c:e7:c8:
                    c5:0c:48:33:e7:21:8c:58:af:ea:ed:3b:da:7b:5c:
                    0f:af:cd:88:59:85:ab:f4:1a:97:18:a5:78:b5:d0:
                    22:d1:f6:70:ed:c7:08:6c:86:5d:4b:87:79:9f:7b:
                    e4:79:c1:b2:6b:73:46:f3:bd:15:46:97:90:e5:23:
                    31:75:cf:21:98:52:60:26:09:4e:ba:92:f8:95:4e:
                    18:cc:b6:d3:d3:5f:80:52:97:e3:29:d4:6b:55:9b:
                    80:a8:4b:91:74:48:76:3a:3b:73:0b:21:24:78:9f:
                    a3:0e:d5:32:46:60:46:c2:48:66:62:7b:51:28:9f:
                    78:24:08:41:b9:38:c1:fc:07:f0:17:5b:97:e4:68:
                    08:34:18:d2:7e:e0:3c:9e:db:85:35:21:f2:37:2c:
                    ca:b9:61:91:f9:b6:50:b9:11:dd:21:d4:8d:c5:e5:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E7:FB:12:A6:59:4D:78:8E:AC:A6:A5:F9:97:A4:8A:F5:36:A9:81
            X509v3 Authority Key Identifier:
                keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2a:1f:43:07:ed:aa:ed:1a:9e:99:a8:f4:dd:d0:db:be:3d:
         00:60:db:e7:97:67:e6:eb:36:dc:88:5f:be:b7:cd:90:7b:3d:
         cb:ca:dc:34:d0:1a:71:e6:12:e9:40:6d:5d:b9:c7:69:69:3b:
         fa:f7:f6:b1:43:bf:53:aa:1b:26:6e:62:01:2a:e8:6b:f7:e4:
         3e:1a:50:43:8f:8d:00:b9:81:ae:a1:28:04:27:11:60:6a:de:
         0a:68:28:d6:0c:b5:6d:27:89:e4:68:81:1c:11:b0:11:08:e6:
         65:b5:15:7e:b4:88:6e:ad:39:69:55:6d:fe:08:32:84:b0:ee:
         11:80:38:6f:31:47:60:1f:1e:31:a4:1e:5e:d6:6c:a1:4a:98:
         09:d8:e4:2c:d8:b1:d7:79:ea:f9:58:93:c6:8f:2c:27:0a:7b:
         e1:62:1a:61:c2:08:11:de:a2:68:9d:57:4b:b2:13:e4:99:ef:
         74:73:98:49:3f:7f:74:fa:a4:69:95:e4:78:44:f4:df:b8:f0:
         01:8f:fa:8d:b8:ba:8e:51:6b:80:2f:1f:86:cf:aa:64:bb:2c:
         dc:66:c9:30:14:68:c6:33:d6:4d:96:8f:56:e9:b6:b9:00:99:
         fe:de:7d:6b:47:5e:6f:4b:f6:09:7a:7f:50:57:9a:ae:e6:21:
         13:07:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 23:10:47 2025 by rpki-client