This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File:                     30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier:          rN3hrQ9/o93fiu17Rm442R58vW5gEfoq4gJV7pNAZg4=
Subject key identifier:   B5:22:9F:09:13:61:FA:27:BC:A8:48:F2:D3:58:4D:3A:B3:4F:92:39
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer:       /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial:       34F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number:          34F1
Signing time:             Mon 22 Dec 2025 14:55:35 +0000
Manifest this update:     Mon 22 Dec 2025 14:55:34 +0000
Manifest next update:     Mon 29 Dec 2025 14:55:34 +0000
Files and hashes:         1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: +wSsND4wQt4WXaMi6l0IyA+9btHEOgOzhksSz7sPu/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
                          rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 14:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13553 (0x34f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118479, serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
        Validity
            Not Before: Dec 22 14:55:34 2025 GMT
            Not After : Dec 29 14:55:34 2025 GMT
        Subject: CN=69495be7-f965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:55:a7:98:46:cf:65:65:9b:5b:c9:90:9e:
                    fa:3d:09:8c:03:4d:4d:ff:da:5b:b5:a4:19:be:ff:
                    34:c8:8e:50:3a:31:ec:9d:1a:99:56:48:87:e1:49:
                    55:85:5f:fa:58:56:69:0c:a4:67:54:5a:a4:d9:07:
                    f0:93:ef:f6:c8:16:03:fb:fa:1f:29:aa:5a:07:9f:
                    8d:2a:07:dc:17:f1:59:d0:a5:72:7b:9c:56:fc:11:
                    53:ef:f1:71:8e:5b:ae:d3:22:e2:2f:dd:ac:e4:78:
                    59:0b:92:9d:4c:38:f4:49:34:fd:99:95:9d:a1:da:
                    87:f5:17:b7:7b:09:d0:0d:9f:65:9b:a9:c4:88:c2:
                    75:a2:99:0d:d0:a5:80:bc:8e:cd:5b:00:76:4e:aa:
                    cc:88:22:8d:9f:3f:7d:f7:4e:1c:4d:24:af:0e:3c:
                    69:ec:b5:9e:d2:1f:4c:f3:3f:d7:15:39:b8:86:3a:
                    cd:a5:c2:53:3a:b0:99:37:37:b8:ea:39:3b:45:55:
                    34:c7:53:a3:c4:f5:03:0a:32:2d:c7:76:30:9a:2d:
                    5f:88:95:af:c8:6b:d3:c3:4e:fe:8b:92:3d:57:ef:
                    44:67:5d:6b:00:ef:98:d7:30:85:1d:8c:d0:bb:4f:
                    41:d3:29:38:22:39:1a:80:72:54:bd:f7:f1:89:a8:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:22:9F:09:13:61:FA:27:BC:A8:48:F2:D3:58:4D:3A:B3:4F:92:39
            X509v3 Authority Key Identifier:
                keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:20:3d:d4:3c:65:66:de:02:fb:3b:02:dd:1a:d5:27:e6:
         d9:1c:a1:5b:d0:a8:f6:ec:7f:43:66:19:91:b9:48:c3:51:1b:
         f7:48:6e:bb:6a:18:cf:22:25:0c:b8:74:01:fd:4a:55:f5:2c:
         bd:c9:15:45:36:c2:f8:f3:db:3a:a2:18:1d:84:53:04:cf:9b:
         8e:83:6b:2a:46:c5:55:c3:74:d7:03:a5:d8:73:aa:3a:1d:8f:
         b2:c3:0f:55:c1:f0:b8:4a:79:c4:e0:45:48:3f:55:d9:67:1c:
         a1:fb:5d:39:e5:6c:7f:e8:d9:7f:ab:76:f7:dd:90:ed:b1:7a:
         0c:59:d6:47:3d:f2:f8:70:c0:14:b0:ad:c8:43:a2:19:0e:4d:
         3d:58:33:61:d4:50:7f:1b:b6:7b:6e:d2:47:84:11:1c:d1:36:
         20:1e:d6:bd:4b:e8:76:81:59:85:30:24:fe:dc:ae:9a:e0:ce:
         95:2f:d5:34:80:d9:b5:66:f9:c5:ff:80:58:ac:36:f6:34:79:
         9c:74:bc:ff:90:c3:ed:c9:1b:af:3e:e9:23:fc:7c:ae:35:1b:
         93:74:1d:c9:38:c2:12:ab:68:23:c6:ca:d8:89:6d:ec:61:18:
         02:f2:c1:47:16:17:17:17:d7:3a:8a:8b:d0:3d:fc:a3:09:1d:
         f6:b3:7e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:22 2025 by rpki-client