This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
File:                     A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json)
Hash identifier:          9VhdFsxkH8wErj/nR33wP41r4FSBccnah7aM6qXMlGQ=
Subject key identifier:   3C:96:13:24:97:A3:19:42:19:1B:F3:71:D3:E2:17:20:46:6F:88:07
Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
Certificate issuer:       /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
Manifest number:          0204
Signing time:             Tue 23 Dec 2025 01:23:50 +0000
Manifest this update:     Tue 23 Dec 2025 01:23:50 +0000
Manifest next update:     Tue 30 Dec 2025 01:23:50 +0000
Files and hashes:         1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: u+dZoq1pJqahjH5EdumvD2jtkQTDqKcvnrWJIlXGElc=)
                          2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: hqEhlFzljzL9QNC3npjH/PXhuwMeiWo8+fxKQZav0bo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl
                          rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
        Validity
            Not Before: Dec 23 01:23:50 2025 GMT
            Not After : Dec 30 01:23:50 2025 GMT
        Subject: CN=6949ef26-e98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:33:3b:5c:38:f4:20:64:81:1e:7a:60:b6:8a:
                    bc:66:b5:b8:8a:e8:48:18:52:7a:95:46:82:28:c1:
                    dd:a2:a1:65:8a:31:f4:fb:e7:af:66:91:0f:98:20:
                    a4:00:04:e9:25:f6:fb:39:14:ff:ff:ec:56:d4:2f:
                    0d:60:3d:bb:f3:23:4e:a6:a1:71:04:ec:f2:5d:10:
                    4d:1d:1d:dd:8e:5c:6b:a9:b0:c0:b9:07:86:ba:8f:
                    17:e1:14:04:c6:b6:71:3e:ee:89:fa:81:f2:9b:8f:
                    3f:a8:c5:ac:12:6a:a2:8a:3e:cc:90:cc:b5:99:05:
                    39:33:7a:4a:8d:76:75:82:f3:87:e1:40:4a:13:3c:
                    93:83:16:71:82:1b:fb:6b:43:6b:5c:32:67:6f:a6:
                    c4:16:0d:8a:17:fc:29:36:36:74:a7:12:8f:f6:18:
                    ff:ad:c7:14:b5:70:d8:6e:7e:11:1a:20:37:61:77:
                    4d:b5:5e:db:76:c0:39:31:94:38:35:f8:67:d1:e1:
                    91:83:69:8b:5d:0f:ad:2e:1b:ce:87:98:95:86:45:
                    30:d1:23:9e:83:7d:e1:8e:84:6b:1c:ff:1b:03:2a:
                    3d:5f:ac:07:90:95:4f:c1:2b:96:11:bb:b7:d1:0f:
                    af:a3:fe:8f:d3:c8:81:65:6e:f2:22:13:4d:73:26:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:96:13:24:97:A3:19:42:19:1B:F3:71:D3:E2:17:20:46:6F:88:07
            X509v3 Authority Key Identifier:
                keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:77:ca:5a:a5:b9:4f:16:e8:d5:31:85:e1:2f:31:5b:d1:f0:
         ee:44:ad:e9:28:26:e0:33:58:b0:40:bd:7d:65:47:83:a7:de:
         12:e1:3a:b2:56:f6:95:9b:93:74:0c:72:df:98:2e:cf:3a:52:
         e7:e7:1c:4a:44:14:aa:2c:0c:60:e0:45:54:e8:d8:54:d0:62:
         fa:38:c5:22:3f:c1:8a:9a:26:80:35:ab:be:39:76:ba:f6:26:
         8c:fe:fe:18:39:f2:0d:a1:a0:31:08:e5:23:46:92:33:0c:47:
         d3:dd:56:45:7e:e3:4b:d7:67:07:4e:c1:6b:9f:b9:6d:e9:de:
         c7:82:f5:1a:2d:4b:af:ba:0b:f2:38:bc:6a:89:fa:58:95:c7:
         69:07:b8:62:66:67:73:07:7d:13:18:66:6b:a4:57:60:af:83:
         ce:89:a3:1e:d5:0b:3c:10:23:11:78:9b:7c:74:05:2a:5f:7c:
         f1:79:eb:b6:2e:e7:2b:ed:42:52:67:9c:e7:65:ee:24:6d:02:
         c9:43:a7:55:02:3e:00:23:54:5c:e5:9e:8f:d5:c3:76:96:ce:
         b5:de:c6:3b:e4:3d:ab:e7:91:3c:5a:2c:b7:67:97:c6:90:6a:
         76:f4:4e:0c:81:89:c5:ee:23:7a:d3:af:f7:ed:0d:dd:ee:0d:
         29:dc:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:13:54 2025 by rpki-client