This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
File:                     K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json)
Hash identifier:          PcXwpeB6RGtNypLZwunJD9LjfzDROFgauqZJH8+iihI=
Subject key identifier:   28:E1:AF:8B:21:C9:9D:BC:9A:EE:F2:C2:06:98:3C:D1:09:37:77:CB
Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
Certificate issuer:       /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Certificate serial:       0E4C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
Manifest number:          0E3E
Signing time:             Sat 06 Dec 2025 15:23:47 +0000
Manifest this update:     Sat 06 Dec 2025 15:23:46 +0000
Manifest next update:     Sat 13 Dec 2025 15:23:46 +0000
Files and hashes:         1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: q5jLFwpM/YFrh+MBeVxnJ1FCcmdlPBlaG0c/16bw2qc=)
                          2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: Our/a/Q4riPqnap8Bs+iL6aJ7lQ+NPuqmEKv5JVFqNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl
                          rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3660 (0xe4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
        Validity
            Not Before: Dec  6 15:23:46 2025 GMT
            Not After : Dec 13 15:23:46 2025 GMT
        Subject: CN=69344a83-7472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:9b:93:a3:1b:28:42:d5:20:2e:f0:b5:88:
                    bb:62:53:d5:e5:b9:28:9d:1f:fb:9a:d8:85:8d:f4:
                    a7:5e:51:aa:ab:aa:b8:e1:ad:52:3b:9b:87:e5:89:
                    cb:72:19:80:4c:f8:19:97:65:af:2b:b5:4e:bc:9b:
                    44:01:3b:e9:21:90:26:7d:d9:78:a6:6a:16:ee:79:
                    27:fa:44:31:70:4f:43:fe:cb:db:f2:b2:2f:9a:9b:
                    f4:1f:a7:25:0a:af:df:4c:4e:66:96:10:6d:37:90:
                    e9:7a:54:43:b0:ac:1e:79:a6:ab:67:b6:ae:49:39:
                    e8:08:28:ee:c4:e1:e1:e1:99:d0:b0:2b:eb:35:5e:
                    87:ce:be:65:02:82:55:72:55:5e:d6:21:75:f0:86:
                    fe:e7:b1:97:60:a2:a0:d4:e9:4e:ce:5b:ea:36:a3:
                    4d:45:3c:3a:2c:d9:0a:7c:46:4b:9c:38:c2:3c:e4:
                    07:4b:a6:22:9c:c0:1c:85:b6:a8:d2:9a:85:c6:63:
                    bb:09:76:d1:76:87:1a:3b:22:39:1c:03:62:09:60:
                    a5:77:dd:c3:91:e6:6b:7c:10:14:dd:49:7c:e3:65:
                    fa:5b:62:a5:73:97:7d:58:c8:89:3a:ec:e0:50:8d:
                    08:08:a9:52:7b:fb:5c:c7:8a:d3:cf:63:81:6a:5d:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E1:AF:8B:21:C9:9D:BC:9A:EE:F2:C2:06:98:3C:D1:09:37:77:CB
            X509v3 Authority Key Identifier:
                keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:35:22:63:f9:50:63:7a:6b:ff:4a:7c:b2:39:ee:2f:f5:84:
         bb:9c:d2:f0:fa:f1:31:e8:ab:6e:4f:4f:a9:c7:f6:40:d6:37:
         98:67:a2:39:cd:c6:ca:c7:a9:3d:6e:cf:df:3f:dd:21:38:61:
         9e:12:1a:ee:01:d5:f0:bf:b3:77:75:a7:8d:a8:c2:e0:50:03:
         2a:ee:f6:cb:2f:ea:a8:8e:5f:ec:dd:6c:b4:41:8b:91:42:d3:
         05:45:c8:9c:61:3b:e2:11:ed:a2:45:6f:31:bd:4d:67:67:08:
         9d:65:f3:47:9a:49:ec:db:04:e7:3a:20:cd:ce:4a:8b:b4:64:
         d4:22:4d:43:18:46:0f:e1:93:0b:7d:a2:a7:a7:10:f5:04:67:
         67:29:dc:e7:3d:12:bd:4c:71:ab:2b:86:db:86:57:d0:77:bd:
         34:33:8c:1b:5f:5b:9a:ed:48:2b:88:0f:5b:ef:10:fe:59:d7:
         cc:85:85:26:f0:72:f0:5a:01:e5:c4:ef:33:f7:02:5a:29:1f:
         62:70:f2:11:0b:85:5f:19:0d:fd:d9:35:43:d7:13:7d:3a:4f:
         af:b4:ff:8c:bf:db:0e:4a:ee:39:6c:37:8b:59:96:15:91:44:
         e8:43:7a:5f:3f:22:3f:9e:0a:c5:3f:93:0e:11:3f:33:fd:d8:
         1f:09:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:03:00 2025 by rpki-client