This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
File:                     gYkRn4AeKAprTdViZT7xA2lh0Js.mft (raw, json)
Hash identifier:          dCqPKCzeQSojnjU7Bo5BmfaLqilqmMcvLWzqOOLkOzg=
Subject key identifier:   61:15:EC:8A:0A:AB:32:C0:AB:26:7D:03:D6:F1:9E:D2:89:C7:A8:33
Authority key identifier: 81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
Certificate issuer:       /CN=A91D9CAE/serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Certificate serial:       04EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
Manifest number:          04E6
Signing time:             Tue 16 Dec 2025 23:10:25 +0000
Manifest this update:     Tue 16 Dec 2025 23:10:25 +0000
Manifest next update:     Tue 23 Dec 2025 23:10:25 +0000
Files and hashes:         1: gYkRn4AeKAprTdViZT7xA2lh0Js.crl (hash: QA0641dl0MElQSWVVeNLC9/ofklQm8/TyA8LVbC9CLc=)
                          2: D30098F6413111ECB71E086AC4F9AE02.roa (hash: Vt6tO0X/X1UwDMUAdETQmDLxSBvUfwttK8IaifttuUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl
                          rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 23:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9CAE, serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
        Validity
            Not Before: Dec 16 23:10:25 2025 GMT
            Not After : Dec 23 23:10:25 2025 GMT
        Subject: CN=6941e6e1-e164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:a3:6a:3e:33:22:18:a4:fb:c0:b1:b0:54:
                    e8:d0:11:b3:e7:17:50:f0:ed:c6:f2:ca:17:42:00:
                    cc:19:7f:d2:5c:76:e1:9f:cf:84:a3:fb:80:97:73:
                    e4:dd:5e:4a:e1:12:32:f1:6e:81:a7:fb:41:2b:00:
                    2c:d2:7a:9b:76:a9:c4:d0:90:79:44:5c:1d:6c:36:
                    60:5c:de:77:8c:83:a1:75:a7:91:b6:21:37:51:a9:
                    f2:cb:7f:1e:f1:84:5b:c8:2c:17:26:77:ff:38:ba:
                    df:50:b4:6e:26:0d:e3:8d:b7:f3:a7:d9:78:11:c7:
                    2a:ac:3f:6e:6b:f7:5e:19:41:d9:00:01:92:b1:8b:
                    15:3c:6c:81:f5:b3:b2:ef:a5:82:07:e1:37:1a:d4:
                    6e:43:f1:a0:db:13:ea:29:cd:8e:73:b1:31:c7:d2:
                    4b:b0:cf:3f:d2:a1:2f:d5:dd:32:74:13:b4:30:8e:
                    cf:13:06:84:33:48:19:1a:ae:23:60:e7:cd:fd:0d:
                    7e:61:66:2c:22:9f:a7:16:1b:a8:66:a7:0e:cb:8c:
                    f7:80:8b:8a:df:be:b0:67:4c:3b:33:02:e5:e8:f4:
                    73:1e:f5:74:51:af:a3:67:66:58:aa:09:6f:51:e3:
                    c8:a9:23:02:86:8c:97:59:4d:6e:72:b7:92:f2:54:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:15:EC:8A:0A:AB:32:C0:AB:26:7D:03:D6:F1:9E:D2:89:C7:A8:33
            X509v3 Authority Key Identifier:
                keyid:81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:38:b4:d8:2b:fc:59:5a:fe:d4:70:23:23:a0:3f:89:6f:fb:
         3a:c8:cb:a2:83:40:67:84:4f:fe:ed:c9:41:fa:a2:e0:bd:77:
         b3:03:51:e9:0c:b6:3a:48:5b:65:1a:a0:f8:62:5e:91:94:68:
         fc:e2:2a:7a:8e:d2:2c:57:0d:4e:0b:c6:90:3f:e3:c5:0a:9e:
         31:97:f8:85:8a:9d:62:1d:f9:63:82:93:ac:3d:12:68:00:73:
         0b:14:65:dc:37:08:fc:83:3d:f2:3a:0b:32:6b:29:68:04:59:
         29:f4:e5:79:43:3a:e0:1d:7a:22:af:05:2a:f1:18:48:e6:59:
         e7:f9:ad:21:57:9d:57:36:5b:43:50:d1:af:99:b6:b7:51:d0:
         3e:48:83:ab:66:a9:d7:25:ad:2a:4e:11:16:10:5e:62:11:8d:
         9c:22:35:9b:88:9b:58:bf:36:48:d6:8d:82:a1:ee:66:e8:fe:
         8e:ee:30:9d:95:14:d2:bf:12:4d:13:61:59:03:68:f7:42:55:
         67:bd:80:ca:d5:9a:8c:0d:68:eb:23:f0:07:bf:55:9a:f5:7c:
         4c:87:45:7f:3a:2f:f2:23:bd:4d:3f:41:8e:27:66:0b:b8:1a:
         61:11:60:b4:f5:09:ad:6c:61:5a:7e:2f:13:08:51:44:09:62:
         ec:56:80:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:12:53 2025 by rpki-client