This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
File:                     GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft (raw, json)
Hash identifier:          bylOqQ2ZsWLYejY0JC3JL6KU+S55PuVDkfmFils1N+M=
Subject key identifier:   34:98:99:FF:08:5F:B1:EB:4C:3D:49:47:BA:E8:BD:9A:E0:96:33:F9
Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
Certificate issuer:       /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Certificate serial:       043E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
Manifest number:          0411
Signing time:             Sat 20 Dec 2025 23:48:28 +0000
Manifest this update:     Sat 20 Dec 2025 23:48:27 +0000
Manifest next update:     Sat 27 Dec 2025 23:48:27 +0000
Files and hashes:         1: GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl (hash: oDwYtRsr7BVNGUmIv4ZUhVkrf6BhCmeovu0ivIpAR7s=)
                          2: F0223A56C8F711EFB2542D5FC4F9AE02.roa (hash: 56+jMhrwrBRvzV5zRD4LOd1TD+rLYKpQCMVw5apHuys=)
                          3: 3D3FCB5EC8F911EFA0603266C4F9AE02.roa (hash: 8BJmRiErzxldmGuPcVm3YUprnJm+HfKbTIGSnCrNI1I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
                          rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0720, serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
        Validity
            Not Before: Dec 20 23:48:27 2025 GMT
            Not After : Dec 27 23:48:27 2025 GMT
        Subject: CN=694735cc-d9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:8a:47:8c:8b:93:fc:a2:13:37:ab:9a:97:
                    e3:b7:f1:ea:22:9e:9e:e6:9d:cd:e5:f1:9f:37:b5:
                    96:d6:7f:b0:48:55:4a:69:6b:d1:81:29:b3:5c:34:
                    2f:b5:6f:73:f0:37:2b:79:2c:f2:0c:25:2d:c2:44:
                    3b:a7:49:7c:72:26:9d:e6:6c:39:a6:d9:7b:6b:7a:
                    c4:be:79:bb:f9:77:1f:81:d0:90:ae:49:8f:34:9a:
                    82:94:e2:4d:73:ba:77:ae:02:48:a4:92:d0:78:f6:
                    f9:85:de:0b:0e:04:5c:0c:2e:9f:18:d2:1b:ec:a2:
                    30:df:1a:58:fa:bc:fd:31:84:ef:a5:c0:6a:b5:44:
                    b5:22:8e:10:51:c7:51:98:be:5d:c9:27:78:dc:c4:
                    e7:96:b1:d9:10:62:72:6b:b9:ba:e2:5d:99:89:10:
                    8e:6d:c1:e0:d0:8a:90:9b:f4:4b:fe:c6:ab:ff:fa:
                    01:46:8c:3e:4b:08:c3:8c:6c:87:41:32:43:6d:68:
                    66:73:22:b0:3c:d7:e4:92:9d:57:35:ce:84:fc:a3:
                    4a:6c:31:4a:84:ae:b4:f9:94:ee:a5:aa:0c:43:8a:
                    a1:59:65:de:d0:4e:2b:a1:b9:a0:19:10:3b:cb:c5:
                    7e:eb:05:0b:97:f3:e7:75:c8:40:16:1a:99:d8:14:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:98:99:FF:08:5F:B1:EB:4C:3D:49:47:BA:E8:BD:9A:E0:96:33:F9
            X509v3 Authority Key Identifier:
                keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f2:2d:42:80:cc:70:c4:45:3c:4f:8e:dc:ad:f7:bc:97:d5:
         1e:56:ba:1e:df:57:9f:d0:11:e0:fe:a4:c6:ff:94:92:25:be:
         4f:08:46:a2:f0:1a:1c:69:77:f1:5d:0a:06:ff:f0:b3:17:4d:
         a6:10:7a:81:0b:cd:2e:5f:cc:70:72:be:4d:4b:62:77:f7:c8:
         66:d3:5c:bd:5e:70:63:a3:d9:fd:16:7b:7b:00:df:38:f1:18:
         2a:e1:49:27:a5:74:56:78:d4:de:46:05:88:71:45:d7:69:40:
         83:69:f5:dd:a4:ab:97:e5:71:d2:93:1c:b4:82:92:dc:76:ae:
         46:a7:6a:3f:09:98:c3:86:70:e9:15:ba:d1:85:40:c3:57:a4:
         75:42:43:45:fd:a1:67:f8:30:5c:9a:f8:86:c2:13:74:e9:40:
         2b:b2:e2:97:16:f4:82:f0:90:4c:d4:5d:cb:8c:34:77:6c:83:
         66:73:3e:ae:6a:2a:2a:92:5d:6a:28:1f:fd:71:61:ee:a8:07:
         bf:15:b1:8e:73:fd:29:71:6b:44:fe:91:66:34:30:c6:70:54:
         d8:f7:5e:38:f5:71:46:9c:d8:c5:3c:7a:9d:9e:4e:60:84:2c:
         ee:64:17:b4:56:e8:47:15:ce:22:7b:4b:a1:a8:70:7c:11:d4:
         e5:a2:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:32:59 2025 by rpki-client