This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
File:                     3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json)
Hash identifier:          4jWoTjrwcZIx5ccDgP4K2emZ80C1N1iyGB27HThQJOU=
Subject key identifier:   DB:BD:53:32:00:B2:69:72:A3:E8:3B:1B:93:D9:80:BB:E2:E8:96:07
Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
Certificate issuer:       /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Certificate serial:       06D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
Manifest number:          06CD
Signing time:             Mon 22 Dec 2025 21:23:18 +0000
Manifest this update:     Mon 22 Dec 2025 21:23:17 +0000
Manifest next update:     Mon 29 Dec 2025 21:23:17 +0000
Files and hashes:         1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: l29zCm40mJu75385muuWNcYlUCyo2BRF1NaUAx+oIpA=)
                          2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: w4Og6ZXZfhcGLwCGrYKzyuX9/ySsrXuevHVn0ggUgdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
                          rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1749 (0x6d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
        Validity
            Not Before: Dec 22 21:23:17 2025 GMT
            Not After : Dec 29 21:23:17 2025 GMT
        Subject: CN=6949b6c6-52a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:3b:fa:9a:f7:ac:ec:91:b2:9f:f5:69:aa:
                    02:d7:63:5d:1f:c9:82:aa:ee:bb:b6:1f:ad:c6:02:
                    48:e4:86:db:da:75:d3:96:b5:20:78:5b:1c:14:17:
                    9d:1d:3c:b1:18:02:f8:e3:5e:10:7b:e1:eb:d3:32:
                    b8:0a:b7:7f:cd:73:ec:87:88:b9:cd:6f:d4:5e:1f:
                    d6:af:5b:c4:09:a7:f2:3b:ed:ae:0b:86:4d:5f:0d:
                    0b:1c:6f:f9:81:98:54:8f:c0:f3:9c:15:ae:b8:71:
                    ba:06:26:8d:cb:dd:32:6d:0f:86:21:d6:d2:db:34:
                    42:86:fb:f1:1b:83:c0:34:30:05:c3:ad:e2:f5:b9:
                    70:17:49:e6:e0:4c:af:55:43:ff:28:9f:70:69:c0:
                    bf:04:71:38:5b:d4:05:07:f2:85:82:74:8a:a4:e5:
                    83:77:fe:70:14:77:ae:a2:a0:04:55:c4:d7:a3:dc:
                    ed:24:60:09:e8:3d:31:e5:bf:8a:42:21:0c:bf:e3:
                    0a:a2:d1:30:c2:3b:8c:60:c1:b2:00:d0:b5:a2:0a:
                    2d:2e:6e:59:0e:8f:26:ed:b8:18:0f:a1:b8:06:87:
                    22:64:1c:19:22:9e:91:5a:ae:a9:2b:15:4f:79:88:
                    45:e2:a9:ed:22:3b:a3:ab:28:27:84:b3:97:36:09:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BD:53:32:00:B2:69:72:A3:E8:3B:1B:93:D9:80:BB:E2:E8:96:07
            X509v3 Authority Key Identifier:
                keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:31:ef:ef:52:f8:b2:f1:fe:1a:59:ba:e3:9d:ac:f6:87:cc:
         17:e1:9f:db:eb:81:65:3b:4b:ee:eb:56:5a:f7:fe:97:32:07:
         9d:93:ae:6f:a3:1b:52:c0:12:ba:ee:7e:01:a0:d2:6b:1e:c7:
         e2:8e:19:0f:5f:38:f5:2e:93:87:af:c8:1d:25:1f:91:b8:e6:
         40:01:fa:3e:14:5d:49:be:ff:21:ed:a0:6e:d3:c8:e1:42:eb:
         44:29:5e:f1:ed:74:19:16:59:dd:7c:5a:4b:f3:6c:28:48:c1:
         e4:86:ea:b5:a7:e6:3e:ce:7f:f8:5f:4c:f8:2d:39:d3:a1:09:
         f1:a6:8e:fc:c0:cf:bf:9c:92:6b:95:e7:09:8b:8d:e6:10:50:
         c8:a9:a7:10:90:32:29:05:6d:62:a4:fb:5e:c4:bc:61:01:2b:
         e4:af:5d:33:ba:60:39:71:9a:30:11:ef:30:cb:11:4f:03:e3:
         04:49:a6:64:d0:6e:3c:66:69:bf:c9:11:88:38:8e:8d:11:7a:
         d0:26:3f:8c:6b:24:0d:10:8f:67:77:6d:c5:a3:95:a1:9b:56:
         b2:46:bf:6d:f6:f9:ed:c0:5a:82:df:2c:99:24:17:ab:a3:a3:
         6a:eb:dc:3d:ce:a6:7b:59:bb:40:69:3b:a7:75:89:92:eb:38:
         9c:cb:ab:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:35:04 2025 by rpki-client