This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
File:                     48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json)
Hash identifier:          zOcYoREVVlj+dV6s13KBPPuR3myqhRz6aqZ0fprGV2U=
Subject key identifier:   83:20:06:15:FC:5F:7C:50:2A:02:46:FA:FD:E3:3D:AA:C3:B2:65:A4
Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
Certificate issuer:       /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
Certificate serial:       0809
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
Manifest number:          0809
Signing time:             Tue 02 Dec 2025 20:18:09 +0000
Manifest this update:     Tue 02 Dec 2025 20:18:08 +0000
Manifest next update:     Tue 09 Dec 2025 20:18:08 +0000
Files and hashes:         1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: /FlwbVqkRKBXajr2UkUydBUt0GdPg3/ZDDC3wfAi06g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 20:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
        Validity
            Not Before: Dec  2 20:18:08 2025 GMT
            Not After : Dec  9 20:18:08 2025 GMT
        Subject: CN=692f4981-7ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:12:de:87:52:a1:19:25:63:cb:ac:4e:a7:
                    83:e3:05:b7:ce:49:20:8f:04:99:2a:24:73:27:e8:
                    af:8d:3c:84:15:44:70:f6:37:b4:dc:f2:4e:74:7c:
                    65:b6:b1:17:7c:5f:70:c9:23:57:75:81:e9:29:2b:
                    66:96:57:4d:34:84:36:ce:1f:f2:19:ee:97:e5:2a:
                    f5:16:da:a2:9a:8f:ca:1b:5d:9b:7e:dc:d0:47:f0:
                    d1:63:72:80:ab:ba:2c:fb:2d:18:9d:7e:21:87:e6:
                    74:07:71:a0:81:23:20:0a:44:26:95:1b:08:5d:69:
                    0a:43:52:01:55:ab:eb:a7:3c:eb:ae:dd:98:ea:b3:
                    06:51:fa:a8:78:c7:9d:79:ca:6d:67:fc:42:21:58:
                    5a:fb:95:f3:83:f9:21:12:84:ab:a3:fb:b2:ff:38:
                    2b:73:d0:0d:29:9c:c9:b1:a9:1b:a9:7c:ba:e7:5d:
                    37:85:ad:35:dc:d6:7e:35:a7:ea:06:9b:33:5a:42:
                    a7:bc:63:c9:34:50:17:bd:da:3b:34:f8:11:47:5d:
                    67:53:73:61:fd:65:f0:71:09:4c:b0:59:ce:bb:77:
                    98:1f:9f:8e:2a:57:52:32:6a:b3:df:e5:25:08:6e:
                    22:9c:f2:92:8e:3d:98:a6:a6:09:19:7a:61:3b:e4:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:20:06:15:FC:5F:7C:50:2A:02:46:FA:FD:E3:3D:AA:C3:B2:65:A4
            X509v3 Authority Key Identifier:
                keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:51:56:e1:f1:9e:c2:2d:25:8b:89:d3:6f:85:7b:ed:4a:52:
         99:1e:63:21:49:74:d6:a3:2f:1c:16:8a:83:4d:8e:39:b3:3f:
         6e:07:34:0c:7d:40:cb:c1:6b:e0:5a:b9:9b:ca:55:04:d4:bd:
         66:78:27:6b:76:aa:dd:4d:16:1e:c9:70:db:de:f3:09:6a:bd:
         2b:79:c0:68:6f:63:7b:65:85:98:77:e1:2a:5a:3e:31:4d:0d:
         33:38:4d:25:b9:28:af:0e:b7:48:75:15:68:c7:69:a0:49:62:
         96:9e:33:5d:16:fc:0d:30:d4:d2:f3:6a:0d:23:1e:ce:69:24:
         05:7f:b1:70:65:a1:95:8a:a6:c5:fe:c8:5e:80:19:0e:e7:67:
         99:2c:b4:d9:18:a8:be:5e:a4:0a:66:bd:b8:79:38:c1:75:a3:
         40:0d:e8:99:45:6b:ab:b5:6b:66:f9:89:f4:91:46:df:f7:3f:
         85:8d:84:59:e7:08:74:05:1a:cf:b9:31:93:f7:78:7c:e4:7c:
         78:fd:5a:f6:ec:86:66:66:fc:ee:e1:f2:09:77:4c:df:ab:e0:
         94:15:43:a6:48:c2:88:82:12:5f:5a:88:9c:c4:d4:1f:ff:b8:
         5b:9e:4d:c5:9a:76:41:db:f5:29:35:32:21:fe:f2:09:01:e6:
         81:e8:9f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:25 2025 by rpki-client