This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
File:                     GVeTbMpsS9l-IilhpIkhsz_6IHc.mft (raw, json)
Hash identifier:          hQoRnTVl2QGR8rU0ZO1EKYoupH4db/0UsoSIs8tQsU0=
Subject key identifier:   52:9C:6E:6D:61:28:DE:90:78:44:E6:13:45:6D:B2:BE:9B:EB:39:04
Authority key identifier: 19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77
Certificate issuer:       /CN=A91F6C10/serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
Manifest number:          6A
Signing time:             Sun 21 Dec 2025 06:00:26 +0000
Manifest this update:     Sun 21 Dec 2025 06:00:26 +0000
Manifest next update:     Sun 28 Dec 2025 06:00:26 +0000
Files and hashes:         1: GVeTbMpsS9l-IilhpIkhsz_6IHc.crl (hash: 8wFa25OMzwQCnZF6iLz5Y8gAL1amJTxz/plg8f3vpeo=)
                          2: 7DDEB3163B9D11F08338F965C4F9AE02.roa (hash: Nx9zhfXamOV1v87PEDCD/XYv0n33Isg7pa/1D1NmyVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C10, serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
        Validity
            Not Before: Dec 21 06:00:26 2025 GMT
            Not After : Dec 28 06:00:26 2025 GMT
        Subject: CN=69478cfa-148a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:58:df:20:b4:a8:c4:75:0d:e6:ec:a8:60:
                    e1:17:2d:02:df:4e:6d:c7:2d:1b:c7:22:22:36:94:
                    f8:38:82:f3:5a:c0:b3:ec:5c:fc:e1:eb:7f:e8:8b:
                    39:fd:0d:38:8a:08:2c:86:07:14:1d:20:32:2f:aa:
                    87:13:05:55:6a:d8:32:26:be:d8:93:1d:83:31:ae:
                    27:98:2e:87:b1:be:db:31:f5:e6:c9:96:e7:53:57:
                    76:a5:2d:c9:7b:07:33:51:8c:a7:36:50:30:a9:df:
                    2a:f4:05:e7:eb:4c:15:87:b7:a3:43:e0:38:cd:9f:
                    87:17:ee:91:54:e7:13:53:5a:ae:c7:92:e9:8d:90:
                    e6:11:f7:7e:d6:48:2c:b2:9c:ad:87:d2:28:8f:60:
                    39:e6:ce:81:5a:f2:01:b7:c3:e6:7e:12:51:9e:dc:
                    35:47:a1:aa:85:c4:75:57:ba:3e:59:3f:56:a1:8d:
                    6b:86:01:6b:02:83:95:73:ce:c3:92:9b:ab:4c:70:
                    44:f6:39:1d:c5:da:db:6b:79:7f:0f:77:bb:9d:ca:
                    8d:27:5d:62:5d:55:78:b4:90:b4:cf:60:df:49:87:
                    35:68:bc:49:d5:30:5e:3c:05:9f:32:4a:31:18:6e:
                    4e:8c:e1:27:ce:08:c6:28:0f:96:25:00:7f:df:d2:
                    0e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9C:6E:6D:61:28:DE:90:78:44:E6:13:45:6D:B2:BE:9B:EB:39:04
            X509v3 Authority Key Identifier:
                keyid:19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:41:29:3d:ab:01:28:2f:bb:5a:af:a7:a6:87:5e:d7:2d:94:
         69:9d:75:88:c5:76:6c:c2:6b:56:bf:e1:8c:26:51:be:bc:b8:
         65:f6:22:4f:1b:48:97:f7:8c:4d:56:5f:24:76:68:f2:1e:75:
         6b:0a:18:d0:9a:34:6c:cb:95:7e:6c:16:7b:07:8c:d8:cc:48:
         4c:4f:90:05:69:d8:7e:99:5a:70:d8:b4:a0:25:e9:c1:8a:f8:
         ad:c5:0e:6a:87:37:f2:36:5c:5e:35:96:7d:8e:d5:a3:7f:c9:
         74:45:f9:76:3b:26:ef:e1:db:06:a5:1b:b5:11:0c:93:8c:bb:
         4b:a5:de:f7:8d:33:23:48:b5:e5:83:8f:98:af:18:ba:91:29:
         c7:6a:82:a5:bc:4f:ee:5a:df:8f:4d:ee:1b:e0:12:68:7b:c3:
         54:ad:10:28:f3:b6:e2:28:0c:7b:00:89:01:c7:97:ee:14:87:
         87:fe:a3:df:d5:92:5c:e5:2a:c9:3f:99:40:9b:2e:02:5a:9b:
         2e:b9:72:16:76:56:42:77:e7:7e:13:7e:2c:ee:06:18:e4:1e:
         1e:26:d6:09:70:11:40:5f:13:de:38:08:4d:5c:6d:0e:1c:10:
         cf:fe:bd:fc:f0:fc:45:0d:6f:53:e2:31:19:52:28:02:73:c9:
         ac:f6:d9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:54:30 2025 by rpki-client