This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
File:                     2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json)
Hash identifier:          FV/GxbuJD4C9LQh8Cocenj8lSdMsz3Ef6DNPLCgdcM4=
Subject key identifier:   7E:28:D7:14:E5:70:B0:09:62:C5:48:93:6A:61:91:8A:38:45:30:1F
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Certificate issuer:       /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial:       17AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
Manifest number:          178C
Signing time:             Mon 22 Dec 2025 16:21:11 +0000
Manifest this update:     Mon 22 Dec 2025 16:21:10 +0000
Manifest next update:     Mon 29 Dec 2025 16:21:10 +0000
Files and hashes:         1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: CUveX4T1wQl3DLy1wBZlW4AYwo5SUWyh7eaOHVKuEdQ=)
                          2: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: h+Bf/dSTxmYNIw4E2dr2Pk1RCT+hYqXsNKneahGznRI=)
                          3: EE9AC4A2CF3E11F0BD67F029C4F9AE02.roa (hash: ukdO87WAf/HOAmSfdD0XwhgfXedlsv2aXlEz1cOk5UE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
                          rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 16:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6060 (0x17ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
        Validity
            Not Before: Dec 22 16:21:10 2025 GMT
            Not After : Dec 29 16:21:10 2025 GMT
        Subject: CN=69496ff6-ef47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:61:9e:0c:13:88:bc:48:98:6b:0c:f2:94:46:
                    52:2f:20:20:cf:48:cc:73:52:0d:cc:ca:14:2e:cc:
                    bf:a5:fe:c9:48:ad:61:5a:57:75:db:80:f0:a5:c4:
                    74:27:cd:a8:cd:2e:b7:41:36:26:0e:81:bd:81:91:
                    24:83:0e:d6:eb:2e:cd:00:66:ed:76:d9:eb:7e:1b:
                    57:2f:3c:10:28:65:99:70:7a:b2:67:ae:18:f4:17:
                    28:51:bb:c9:56:e7:a2:09:37:1f:2b:73:f1:1f:5f:
                    cf:75:20:18:ff:e9:ad:4f:46:52:14:80:fb:d2:01:
                    d4:49:2c:97:1b:0e:98:d8:c6:3e:14:f3:d3:d4:d5:
                    f7:fd:93:b2:73:65:55:75:6c:ea:06:c7:63:db:d0:
                    a1:9e:84:23:75:45:be:b6:22:78:e9:4f:e0:2e:0a:
                    40:0a:5b:54:dd:d5:c2:65:44:37:34:38:39:88:e7:
                    da:f3:a3:00:40:42:0f:99:8c:b6:4a:81:38:15:e5:
                    fb:71:d4:59:a7:b7:37:5d:c8:e1:bd:be:23:02:8e:
                    50:20:3d:4c:cc:1c:88:ce:1d:bf:44:6e:f8:55:19:
                    cc:11:5c:3f:35:54:f1:6d:b9:0e:c7:62:c6:d2:45:
                    c8:83:34:a2:61:d5:0d:39:48:d6:e2:24:47:17:ad:
                    6a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:28:D7:14:E5:70:B0:09:62:C5:48:93:6A:61:91:8A:38:45:30:1F
            X509v3 Authority Key Identifier:
                keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:46:99:99:32:2c:ef:d9:49:12:cd:e9:bf:ab:a2:5c:a0:56:
         2a:1c:68:ca:ec:14:06:99:4f:21:77:68:42:49:af:05:9a:cd:
         b5:ab:3f:7e:68:78:a3:44:68:15:4a:40:3b:44:fd:88:50:25:
         9d:39:e8:5d:d8:98:4a:aa:1d:5e:97:29:b1:2c:f9:fe:bd:45:
         0e:22:85:73:29:61:c8:38:9c:8f:2b:73:02:71:3d:71:1e:30:
         70:ed:69:be:40:ac:6f:c4:bd:3f:15:cc:77:72:f4:6f:04:cd:
         f8:c4:00:cd:92:a1:cb:5d:f7:48:95:18:8a:2b:dc:40:e0:2f:
         19:7c:6f:be:14:2f:e2:23:3c:aa:a9:db:0f:62:a2:40:dd:09:
         db:f4:8f:47:09:54:55:bd:2f:e6:a8:1d:6d:8e:1c:5c:1b:33:
         a3:ed:1a:5e:a6:b0:d1:a3:0f:c7:fd:2e:66:a5:dd:ab:d7:82:
         0d:9c:d0:10:4e:4d:24:b5:87:7e:4c:a9:50:06:3d:cb:ca:72:
         ce:2c:1e:73:61:67:cb:a6:f1:25:eb:62:89:78:8b:32:9c:59:
         d7:d0:65:e2:c7:7c:3d:8c:1e:91:91:22:b3:e3:cb:d3:de:18:
         b3:a1:57:36:07:8a:46:4d:bb:bc:3f:77:36:ab:b9:85:2b:72:
         71:37:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:59:02 2025 by rpki-client