This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
File:                     GVeTbMpsS9l-IilhpIkhsz_6IHc.mft (raw, json)
Hash identifier:          mUTFgEaIU5LYxtRJs7XqPVAwEOwMUapoqLdvooSRgZ0=
Subject key identifier:   40:FC:48:27:76:B1:55:7E:17:70:C0:D9:A9:00:42:CD:52:C9:09:FD
Authority key identifier: 19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77
Certificate issuer:       /CN=A91F6C10/serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
Manifest number:          70
Signing time:             Thu 01 Jan 2026 06:23:50 +0000
Manifest this update:     Thu 01 Jan 2026 06:23:50 +0000
Manifest next update:     Thu 08 Jan 2026 06:23:50 +0000
Files and hashes:         1: GVeTbMpsS9l-IilhpIkhsz_6IHc.crl (hash: 81oJsIeZKPxDCx3JCv2XGK+oSPf/mSLf/iTdQW89nT0=)
                          2: 7DDEB3163B9D11F08338F965C4F9AE02.roa (hash: Nx9zhfXamOV1v87PEDCD/XYv0n33Isg7pa/1D1NmyVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 06:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C10, serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
        Validity
            Not Before: Jan  1 06:23:50 2026 GMT
            Not After : Jan  8 06:23:50 2026 GMT
        Subject: CN=695612f6-f64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:77:c3:c0:82:85:b6:6b:b8:c4:7d:ee:1a:
                    e7:12:dd:05:f6:63:b1:d4:ea:22:87:5e:8b:9d:20:
                    b9:4b:b3:6a:6c:31:83:00:1a:17:40:c2:55:48:3c:
                    3b:57:8d:72:96:38:fc:4b:f6:29:5b:f0:bb:82:02:
                    0c:a9:0d:9f:b7:cd:d9:66:50:f3:c5:64:0c:56:eb:
                    75:ef:74:f5:4b:eb:4d:de:81:b1:e4:5f:ce:06:5e:
                    50:78:f4:97:8c:93:a4:12:5e:31:d2:68:7e:9a:61:
                    75:c6:2e:57:a1:8b:3b:ab:41:c5:ec:e4:43:4c:96:
                    a1:49:c4:b7:ef:f5:cf:0d:f6:e1:66:78:df:49:08:
                    7e:3f:f4:fb:9a:d3:f7:a6:f1:89:56:7c:6e:79:df:
                    ff:62:e0:22:74:2f:8f:4a:9d:e5:2e:35:51:ee:31:
                    3a:3f:fe:05:21:3b:76:51:e0:14:5c:60:43:59:3a:
                    42:6a:f1:58:06:bb:80:ed:41:d5:d6:a4:32:7a:65:
                    f0:04:5a:85:18:cc:1e:7d:32:4b:9a:40:8a:fb:fb:
                    dc:40:d9:d2:e3:9b:29:74:ce:8c:22:82:38:3d:64:
                    65:69:32:e1:9d:2d:7a:de:0f:f7:12:61:48:35:76:
                    53:83:d6:71:89:d3:26:85:32:f7:13:e8:75:40:bb:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FC:48:27:76:B1:55:7E:17:70:C0:D9:A9:00:42:CD:52:C9:09:FD
            X509v3 Authority Key Identifier:
                keyid:19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fc:58:70:f9:48:f8:8e:fb:a0:b1:e8:47:ea:e8:52:a1:39:
         55:80:d4:51:85:4e:c7:6a:a2:61:3c:c4:c3:ff:da:51:e4:8b:
         ec:8c:da:ba:5e:bb:04:12:39:51:71:23:29:c1:a6:a5:a3:a4:
         95:f0:76:98:ee:4a:40:d5:ec:fa:b0:af:8e:7b:c7:3c:fe:52:
         70:23:93:dd:3c:af:e7:4e:04:b8:6b:ea:94:1d:d2:43:92:44:
         1a:85:38:78:fe:e2:94:fc:cd:7b:6c:a9:ee:a7:95:a9:3e:d7:
         ef:40:0f:03:1f:3f:d8:f2:ee:0c:00:ec:b0:b3:f5:86:2d:76:
         71:3d:b3:5c:d6:8a:f8:20:4b:cc:be:66:7d:53:8e:72:fe:5f:
         98:b0:63:53:d3:94:cd:06:4c:cf:71:d0:d4:55:89:48:70:43:
         ea:ba:cd:ac:c4:b9:f6:6d:97:86:00:ea:4a:04:93:aa:ea:42:
         9c:76:fc:97:56:cc:df:c9:52:a7:d4:6a:26:b0:ed:a8:c1:af:
         f2:6c:01:d6:8f:09:d9:6f:1e:6b:d1:28:01:b8:8d:29:a5:98:
         84:cf:50:45:58:74:28:5e:32:eb:e0:6d:13:5a:76:11:97:c9:
         dd:97:cf:f7:ab:ca:47:62:bb:fe:1e:77:71:2c:1d:43:21:15:
         09:63:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 18:02:36 2026 by rpki-client