This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File:                     ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier:          3DQPNqBeG0exu86LaB4bLoNcoGSnsxB5CWakyuNNx3k=
Subject key identifier:   EE:4F:4B:47:3F:7A:F9:96:35:53:12:3B:14:09:96:20:37:FB:65:02
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer:       /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number:          C8
Signing time:             Tue 23 Dec 2025 04:52:26 +0000
Manifest this update:     Tue 23 Dec 2025 04:52:26 +0000
Manifest next update:     Tue 30 Dec 2025 04:52:26 +0000
Files and hashes:         1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: TqT5fHeVOFr7YmuJzOf+poQzTTzFEU84rjBhKJ86VUA=)
                          2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: OH16X8GEk+h/u670xpKDKmtIszx6M9DvNarlNlVqoko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
                          rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
        Validity
            Not Before: Dec 23 04:52:26 2025 GMT
            Not After : Dec 30 04:52:26 2025 GMT
        Subject: CN=694a200a-d595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:8f:c7:6a:c9:1c:de:89:d8:d7:99:2d:93:
                    dd:2f:84:04:31:54:4c:db:40:0b:1f:52:19:98:c1:
                    4a:d7:0e:6f:96:65:0d:11:7e:51:41:17:0a:63:b9:
                    48:a3:3e:fe:ab:77:2a:0c:60:fc:4d:bc:46:cf:31:
                    cb:55:01:69:5a:3c:9c:1e:c3:1b:8d:bc:cd:ab:8c:
                    33:9d:a6:c8:17:3a:4e:38:c9:aa:1f:70:48:8d:d7:
                    eb:f9:e8:bb:79:2f:5c:b4:47:a9:1d:79:77:98:a1:
                    eb:7c:91:34:51:5f:62:14:53:54:9e:cf:d7:85:7c:
                    72:64:f1:b6:db:88:fb:fc:ad:72:07:21:fd:57:df:
                    f3:cb:dc:7e:c6:c8:d3:87:54:68:62:3f:a6:f1:d4:
                    26:f4:7c:bc:c4:91:1e:e3:8d:9e:4a:7e:d6:07:47:
                    ef:3e:7f:93:11:88:d8:45:27:94:3e:11:4f:da:be:
                    c6:ee:9e:ed:93:ff:ab:ba:e1:e9:12:39:eb:8e:a4:
                    4f:c0:1f:a4:02:1e:d4:4c:d6:a5:05:18:d9:52:e4:
                    d7:f6:0d:a2:35:57:e3:03:84:d3:21:a3:3e:9f:29:
                    f9:58:ef:e7:74:3c:d6:82:b8:64:64:ea:50:f9:17:
                    e6:f5:a9:8e:2b:1e:d2:29:d9:23:a0:75:ee:ee:d3:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4F:4B:47:3F:7A:F9:96:35:53:12:3B:14:09:96:20:37:FB:65:02
            X509v3 Authority Key Identifier:
                keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:da:c8:b8:7f:25:d3:4b:da:b5:49:8d:75:08:f6:3d:85:fc:
         93:3e:59:f1:2a:7f:a2:c9:95:bb:5d:34:5b:98:ce:ef:02:9d:
         0c:8f:88:65:e4:2c:f3:38:ab:3c:2d:85:90:cf:c8:46:8c:75:
         29:f0:d9:a8:bf:e7:93:ec:59:63:e8:91:cf:27:dc:f7:c3:0a:
         8f:92:a3:6d:69:28:b7:39:87:37:d9:a7:6a:a1:fe:d1:fa:d6:
         5c:f5:11:2b:2c:7e:22:e5:35:54:90:d4:23:16:02:1d:3a:1a:
         11:70:dd:55:4a:c0:64:87:44:a8:16:e2:a1:d0:08:72:14:4d:
         3b:00:72:c5:ea:f8:4e:16:9f:ee:fe:62:c6:a0:92:68:74:ab:
         3c:4b:8d:35:d5:db:91:9c:78:60:79:b0:72:cf:71:e2:57:55:
         2c:39:69:db:2b:4c:40:39:b3:f2:ec:6a:45:83:2b:62:07:78:
         2f:36:3f:f6:e9:d1:44:6f:84:43:c7:95:50:02:cd:78:e4:ce:
         4d:ef:dc:f0:07:f8:02:fd:d3:ce:2a:aa:48:84:96:59:3a:2f:
         70:66:86:dd:70:be:0a:4b:64:76:9d:44:a8:da:02:47:b8:47:
         5b:f3:d0:55:f9:21:f4:4c:92:81:1d:57:cc:37:fc:79:ca:35:
         21:28:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:31:17 2025 by rpki-client