This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
File:                     gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json)
Hash identifier:          Cr22lEnuV/lJBWoqwt+P1pfMXW5okHOdqxmwBLPosMA=
Subject key identifier:   9F:6C:F4:51:FD:49:32:C5:5A:DD:82:A2:31:9F:8D:A9:31:9C:A5:7B
Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
Certificate issuer:       /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Certificate serial:       0787
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
Manifest number:          0782
Signing time:             Thu 18 Dec 2025 20:59:52 +0000
Manifest this update:     Thu 18 Dec 2025 20:59:52 +0000
Manifest next update:     Thu 25 Dec 2025 20:59:52 +0000
Files and hashes:         1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: M4WXJ9i+qo9VE7MgPXS4ZfjtDT4utfqNVHLRy0bQYtk=)
                          2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: vYc0h4qvjuE88FDf7yqk3rmrIjWt9VABoOzgwIDoM5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
                          rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
        Validity
            Not Before: Dec 18 20:59:52 2025 GMT
            Not After : Dec 25 20:59:52 2025 GMT
        Subject: CN=69446b48-ff65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:59:27:46:a7:19:39:eb:ef:49:f2:86:63:
                    e6:0a:79:1e:22:10:82:b3:a7:5d:9f:af:45:f8:b2:
                    93:db:ba:8f:b6:66:32:4e:7b:63:93:7a:4b:38:d8:
                    b2:81:6d:43:a2:44:35:1e:78:91:28:91:9a:28:50:
                    5c:d4:02:79:ef:02:c4:21:17:b4:95:a0:62:72:f1:
                    4a:49:be:a9:4b:65:f0:02:df:f9:b1:de:7e:29:82:
                    ed:4d:d2:67:8b:72:2a:d1:33:fc:f7:75:da:62:54:
                    48:e7:2a:63:84:db:18:8d:21:aa:dd:9d:d9:a6:2b:
                    5c:1f:00:8f:12:76:9d:56:c6:d5:9d:a1:94:8b:22:
                    27:78:fd:de:57:c5:6b:62:f8:64:fc:c1:f5:d9:a0:
                    89:42:36:89:c4:0c:ff:1e:b2:b2:92:65:d6:28:85:
                    90:8e:8b:70:5e:b9:e9:e9:7c:f0:d9:35:a8:50:1f:
                    12:ce:69:51:e1:5b:05:a6:de:4a:49:00:55:3f:3b:
                    ca:2a:ad:26:bf:a7:bc:75:98:2c:78:b1:32:ff:23:
                    b0:1a:72:d4:9a:6e:33:f3:f9:2a:01:23:1f:a4:8d:
                    14:ea:e1:3d:87:28:e8:02:fc:b0:0d:a7:92:d2:ab:
                    ce:03:8e:cd:dc:aa:19:7f:dd:ff:be:d9:a4:56:10:
                    b1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6C:F4:51:FD:49:32:C5:5A:DD:82:A2:31:9F:8D:A9:31:9C:A5:7B
            X509v3 Authority Key Identifier:
                keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ef:3d:02:77:43:4d:62:b8:a3:04:ce:2a:9a:b4:41:af:e9:
         2c:df:8a:f5:c9:d5:ca:4b:13:68:29:b5:21:c6:35:cd:ec:ab:
         11:0f:de:15:ae:21:78:9d:3c:44:44:c4:76:23:91:05:9e:68:
         1d:f1:ac:3f:20:1b:89:92:27:37:55:06:87:40:a0:1c:a8:e5:
         94:f8:90:36:d1:1a:7b:44:a8:7e:5f:2c:c8:66:85:94:30:ec:
         79:16:06:9a:96:45:96:89:d6:27:4e:15:9f:1e:cb:71:6f:2e:
         75:0e:be:69:f0:3f:9a:8e:3b:03:87:04:c9:f7:b2:8a:7c:a3:
         45:21:a3:b0:23:44:b1:f9:f5:bd:ba:2b:e1:25:66:39:c1:f0:
         84:97:33:d9:40:3a:8a:f9:3c:13:e8:ae:a1:61:40:de:9f:a9:
         ff:c7:62:7a:09:35:7e:8d:ba:fb:8a:87:79:ed:c9:77:f7:40:
         23:07:9c:06:01:85:c9:31:8b:af:9c:2d:49:b5:60:8f:ff:c8:
         44:2b:d0:f7:95:80:4c:cb:29:28:45:97:cf:3d:7b:ab:16:76:
         7c:01:d2:6c:ef:b5:1d:91:07:08:9d:dc:f7:f0:8b:94:60:7e:
         6d:1a:69:14:b8:93:75:a3:bb:dd:68:22:59:97:0a:0b:9c:17:
         bc:a1:76:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:46:00 2025 by rpki-client