This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft
File:                     XA0XaoArLkVX6IWmwOq10NBw16c.mft (raw, json)
Hash identifier:          PqOgZloQLkIelL0B0X+KUep++ytF1wCvxDlFZojCa3M=
Subject key identifier:   48:35:12:4D:9E:EE:6E:F4:D8:14:82:FC:7D:07:77:9A:9A:DE:8E:05
Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7
Certificate issuer:       /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7
Certificate serial:       0632
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft
Manifest number:          062C
Signing time:             Sat 20 Dec 2025 22:05:24 +0000
Manifest this update:     Sat 20 Dec 2025 22:05:23 +0000
Manifest next update:     Sat 27 Dec 2025 22:05:23 +0000
Files and hashes:         1: XA0XaoArLkVX6IWmwOq10NBw16c.crl (hash: /KEIotD/+u28HxhQ3B7BEHUhFdSycH8G24Bqwqx+wV8=)
                          2: E390F83EC1CD11EB86A00568C4F9AE02.roa (hash: ydOAiWCM6NkM+mxAS7XZYLAQc/Fn5GEwebXDqOLlzZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl
                          rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1586 (0x632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911959A, serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7
        Validity
            Not Before: Dec 20 22:05:23 2025 GMT
            Not After : Dec 27 22:05:23 2025 GMT
        Subject: CN=69471da4-26aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:77:cb:f7:8f:1f:70:e3:ba:62:aa:22:37:
                    a7:8d:59:80:26:8e:0d:03:59:ed:1c:c3:3f:80:49:
                    3f:ee:9e:b0:28:ea:ea:5d:47:30:26:86:0d:6d:df:
                    88:8a:6d:d5:96:aa:af:cb:c4:26:0e:fd:99:89:ed:
                    2e:62:28:0c:0a:cb:65:40:5b:75:5f:93:dd:bc:c3:
                    02:af:09:03:4a:79:18:18:48:10:d3:b9:81:f3:3a:
                    2e:29:48:84:84:50:e9:7d:c9:e8:cf:7a:69:39:b9:
                    be:80:21:9d:cc:37:c9:bb:78:0e:45:d1:42:6a:a3:
                    33:a1:b5:73:7f:81:f1:3b:94:9d:3b:2e:9d:ca:b6:
                    db:47:4c:c4:ff:c7:77:65:9d:11:36:0f:46:36:62:
                    ad:a3:7e:aa:18:bc:c7:d6:f6:5b:eb:38:68:ba:62:
                    d2:66:f3:f4:15:f9:b5:38:f7:b6:0d:48:a7:11:2e:
                    21:2f:5e:8e:01:a0:31:a3:a7:f4:f6:ca:67:71:1a:
                    11:46:cf:8b:2a:85:c6:52:04:99:32:33:8e:02:26:
                    fb:96:3d:68:75:d9:b3:de:72:e0:53:d9:44:5c:aa:
                    28:e5:e6:76:56:72:2b:eb:ef:60:bc:be:80:2d:de:
                    e2:f6:bb:76:bf:50:71:c2:4d:ee:84:0f:6d:0b:b4:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:35:12:4D:9E:EE:6E:F4:D8:14:82:FC:7D:07:77:9A:9A:DE:8E:05
            X509v3 Authority Key Identifier:
                keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d0:de:71:20:bd:32:95:cd:7f:a1:f1:4a:30:2e:b5:2a:7d:
         04:f0:06:b4:d5:37:6a:c9:43:37:b3:a8:ba:ee:e5:f5:64:5f:
         5d:95:3a:41:b2:55:6a:86:4b:e5:2b:20:52:fb:d0:41:a1:af:
         49:fa:b5:38:d3:70:7e:00:85:ed:fd:b6:62:50:6e:83:3b:a6:
         bd:65:76:68:df:7f:de:64:e5:f6:a8:8d:27:5e:e4:0f:90:14:
         fb:ac:dc:1f:34:9a:5d:27:2f:5f:6b:e1:9b:35:a5:52:f3:a6:
         2c:9a:b9:ba:53:95:ba:0f:05:80:b9:6e:b9:08:3a:3f:44:3f:
         82:05:e5:fd:9c:1c:c8:0c:c2:74:cd:cd:cc:95:12:98:6e:d7:
         dc:2b:22:56:83:df:8d:d1:63:96:f2:6f:31:ca:e3:77:52:ea:
         59:b4:4d:c1:58:5b:23:61:d8:61:b8:d2:75:9e:04:31:11:5f:
         ba:8a:82:a0:82:12:19:c1:44:bb:1d:c4:68:6d:19:72:f0:63:
         93:40:a3:6e:fc:f5:d4:53:95:d0:41:79:e1:fb:15:56:46:4f:
         0f:0f:97:2d:6a:59:3c:06:da:40:ec:fb:ab:b8:98:07:d6:af:
         36:88:6b:16:8b:23:a9:04:f9:c0:e5:dc:d3:79:8a:a3:a4:aa:
         5b:40:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:38:32 2025 by rpki-client