This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
File:                     gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json)
Hash identifier:          xR7yyw7VXSUCurvLlzV0XQTqkEb9hlZlZQHrsD93oRY=
Subject key identifier:   EA:7D:20:89:E8:28:E8:E8:E9:D5:29:DC:D8:15:6B:0E:52:86:FF:51
Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55
Certificate issuer:       /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
Certificate serial:       0284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
Manifest number:          027D
Signing time:             Mon 29 Dec 2025 00:39:25 +0000
Manifest this update:     Mon 29 Dec 2025 00:39:25 +0000
Manifest next update:     Mon 05 Jan 2026 00:39:25 +0000
Files and hashes:         1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: CPtvP8S1sAK6u/3CyqhFpliX6jnngHvZO2OhvEfSLnk=)
                          2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: +md5I194ApAFzI9Vr3T+f9A2DpbYrH7HshUb/eOgpZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl
                          rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 00:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
        Validity
            Not Before: Dec 29 00:39:25 2025 GMT
            Not After : Jan  5 00:39:25 2026 GMT
        Subject: CN=6951cdbd-1d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:cd:2a:ed:14:d4:9b:19:a6:41:f3:cc:5c:
                    24:75:02:dc:86:5d:f0:fb:a1:30:46:ec:23:29:1b:
                    70:75:3a:47:d7:cf:38:9e:da:e3:d0:d3:c7:34:60:
                    ad:ae:b5:f3:d8:21:d1:c9:12:2e:a3:78:f8:b2:4d:
                    4f:17:30:ae:b9:93:b5:6a:e8:13:93:d5:ee:af:16:
                    42:2a:e9:2b:64:8f:b9:71:d4:d2:cc:1c:65:8a:16:
                    58:7c:e8:ef:b0:17:8d:bb:82:db:63:56:e6:2e:13:
                    13:05:de:40:04:3b:9b:4b:35:56:11:84:f3:78:b1:
                    f7:8a:45:c5:06:78:0b:1a:02:2c:15:96:2f:ed:1e:
                    54:fe:4b:8d:dd:60:3f:c3:f3:c9:bd:3f:09:39:12:
                    1c:ca:e3:84:b5:ee:35:b9:58:17:71:ed:03:3c:18:
                    a9:d1:ae:de:b7:71:49:7e:f8:29:47:c2:52:4b:40:
                    c9:57:40:7f:22:c1:b6:08:ad:6c:40:ca:6a:9a:8f:
                    28:9e:3d:f8:b4:52:17:6a:35:e7:fe:29:72:54:8a:
                    a3:e3:e1:50:cc:16:a2:2f:47:b5:be:d9:1e:c8:1d:
                    11:ce:d9:23:0e:ca:42:e2:6a:58:c9:ea:f3:43:33:
                    88:5b:b8:7e:52:7f:93:6f:e4:d7:1c:4f:d0:28:58:
                    7e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7D:20:89:E8:28:E8:E8:E9:D5:29:DC:D8:15:6B:0E:52:86:FF:51
            X509v3 Authority Key Identifier:
                keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0f:74:7b:d7:91:17:a0:86:01:ed:a8:7a:92:6b:cf:9d:13:
         b6:03:92:81:dd:6b:43:ac:53:56:c3:d9:1f:d8:51:0f:d8:fb:
         e6:13:ae:55:45:51:1f:00:9d:8f:f9:ad:b3:cb:d9:4e:cf:ea:
         c7:1c:3a:7d:cf:6e:44:2a:91:17:dd:df:cb:eb:1f:c0:57:44:
         47:37:9b:da:2f:49:09:30:71:d4:34:9e:4a:c2:6b:83:36:d0:
         0c:5a:2f:7d:a5:11:15:d5:f4:54:56:30:61:43:ee:69:57:00:
         8d:2b:16:f1:5f:f9:07:20:ba:f1:3b:49:df:85:a5:d0:cf:27:
         5e:cc:b3:fb:bc:66:84:6a:d0:5d:ad:59:e2:38:fb:8b:51:48:
         dc:d1:b5:e7:b5:c5:8f:b8:3c:e3:5d:95:d8:7d:46:3d:0b:8c:
         8c:8b:4f:69:6c:8d:d7:06:9e:b4:fe:ae:5e:dc:09:5e:b0:2a:
         12:84:24:86:cb:fa:ed:1b:b2:7e:46:2d:36:85:7b:ab:8f:e9:
         6b:23:07:fc:a4:4e:86:1a:bd:f1:7b:8e:08:eb:95:db:9c:44:
         1d:64:5e:89:b0:d2:d6:e2:e2:20:b2:37:03:7a:22:3d:60:e1:
         c9:20:7a:a3:30:6a:35:bf:96:04:8f:17:40:7c:00:6c:f9:b8:
         e2:11:1b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:30:22 2025 by rpki-client