This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File:                     rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier:          6l8Om74c3OBBcyK6ANMpps+G12h9bsktdLQVvd44PI4=
Subject key identifier:   84:FC:1D:2D:65:B4:FF:37:5D:E5:13:5A:A5:AB:05:CB:4C:13:34:8C
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0F56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number:          0F4D
Signing time:             Mon 22 Dec 2025 17:14:41 +0000
Manifest this update:     Mon 22 Dec 2025 17:14:41 +0000
Manifest next update:     Mon 29 Dec 2025 17:14:41 +0000
Files and hashes:         1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: ThrZCN+lysadEMc4dxAIM3klN3MOaCy6IkKCGIlh6Vs=)
                          2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: LbtoKXQWVtjM8PuzryWfj67xT/YA5C3Pl76nVAvV2lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3926 (0xf56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: Dec 22 17:14:41 2025 GMT
            Not After : Dec 29 17:14:41 2025 GMT
        Subject: CN=69497c81-2dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:09:f8:cf:62:0a:72:f3:eb:14:6b:6d:e6:fa:
                    de:68:01:71:47:c6:78:49:8a:c6:5b:ff:25:3e:5c:
                    02:9f:a2:56:e6:44:85:96:12:c7:8f:25:5a:84:17:
                    df:43:8f:16:cb:9b:ed:ba:31:4c:83:ad:c9:8e:19:
                    b4:38:6a:be:59:ab:40:a6:c2:92:b4:b6:06:c5:9e:
                    79:41:60:18:9f:7f:33:bb:ae:87:3d:fa:b6:55:ac:
                    46:de:6c:68:da:33:d9:f7:ee:61:27:48:c1:9d:0f:
                    0f:47:4f:b8:b6:fa:6a:4c:d8:c3:18:f4:97:1c:6b:
                    4c:5b:68:0f:bc:77:30:bb:64:79:1c:f7:fa:a2:aa:
                    21:57:2c:31:b9:ea:fd:7f:1c:62:2b:b9:8e:04:f9:
                    ba:1d:45:1b:99:a0:6c:f9:bb:cc:3d:de:64:b1:e6:
                    19:95:ab:38:64:ee:e9:c4:77:ea:31:ff:8d:f1:15:
                    c2:a7:cc:9b:6d:da:70:82:77:48:5d:aa:e6:c9:39:
                    23:d5:71:b9:e5:3f:71:a8:ed:23:17:23:53:04:d5:
                    3a:6a:ac:e2:8d:32:4e:19:4d:f8:2c:eb:de:f3:89:
                    33:40:71:05:58:13:49:21:8c:9a:42:6a:85:5a:01:
                    2f:64:98:0d:bf:1f:14:7b:27:43:ec:ed:c9:bd:ff:
                    2e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FC:1D:2D:65:B4:FF:37:5D:E5:13:5A:A5:AB:05:CB:4C:13:34:8C
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:27:85:f4:17:9a:ac:e7:7a:5c:7e:4c:ac:39:b9:de:1b:63:
         97:ae:19:f2:90:a5:d0:74:87:89:20:bc:33:33:cf:19:18:f8:
         b5:b4:fe:3c:fd:ee:3d:a2:f1:5d:6d:74:8e:79:95:be:f7:f0:
         96:11:46:ea:c6:cd:d5:c9:69:70:ab:03:48:c4:07:93:a7:30:
         77:fa:b7:68:4e:fb:f9:e3:c5:0d:03:00:91:bc:7f:24:4c:b2:
         a6:05:66:3d:2b:f6:c8:28:c4:29:c0:2e:05:cf:aa:ca:4e:2a:
         be:7d:b8:f0:04:2b:45:ff:ea:33:e4:4e:93:ae:75:36:23:38:
         a6:ec:60:c1:c2:f9:3f:db:a1:02:51:df:01:aa:61:7f:92:f2:
         61:2f:c5:12:68:59:f2:3c:43:7b:8a:b6:d9:d9:67:8f:70:80:
         f3:47:08:cd:82:58:11:83:2d:02:50:2a:a1:dd:78:54:2e:24:
         35:f7:96:d0:94:e3:f2:d7:ef:c4:b3:05:96:ee:2b:37:16:2d:
         29:0b:97:ea:26:24:0b:0d:f3:10:98:d1:55:8e:d0:24:b0:34:
         b2:21:f7:b7:e0:39:56:98:76:56:7b:95:5e:03:e8:ea:03:aa:
         9a:c5:ac:e5:7d:e0:d2:6a:24:1b:d8:0e:d8:06:d9:06:85:18:
         21:11:fe:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:26 2025 by rpki-client