This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
File:                     MnO_dM_TfcKwgKpPGtntXtY-YyA.mft (raw, json)
Hash identifier:          +oq9Kb1JpwkDJk8dbUlM1ldS0DU4rwtcEj4xy/bKk3M=
Subject key identifier:   BE:B5:99:71:27:9D:DA:31:DC:BC:E3:4C:C6:0C:F5:60:BA:5C:9D:EA
Authority key identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20
Certificate issuer:       /CN=A912E3C7/serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
Manifest number:          C4
Signing time:             Tue 23 Dec 2025 04:50:08 +0000
Manifest this update:     Tue 23 Dec 2025 04:50:08 +0000
Manifest next update:     Tue 30 Dec 2025 04:50:08 +0000
Files and hashes:         1: MnO_dM_TfcKwgKpPGtntXtY-YyA.crl (hash: M5BBkSawkPh0c+9hvWqEQNUngKYW/fHg0dM5b3JNSLI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl
                          rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E3C7, serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320
        Validity
            Not Before: Dec 23 04:50:08 2025 GMT
            Not After : Dec 30 04:50:08 2025 GMT
        Subject: CN=694a1f80-a922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:16:2b:56:b6:94:f2:dd:48:9f:7a:05:dc:a5:
                    29:44:5a:82:9b:ed:66:c3:83:8c:59:1a:40:7a:e1:
                    0d:83:30:37:6f:d3:f7:cd:f2:e8:24:57:37:65:8f:
                    61:81:db:27:54:da:b7:f0:c9:28:f0:83:5f:a7:ee:
                    9c:ce:70:b4:8b:43:67:17:b4:85:43:32:d3:47:82:
                    bd:bd:43:03:9e:b2:47:8e:6b:6a:39:c9:5e:74:e6:
                    c5:cb:96:f3:a8:0b:5e:34:1b:e0:f9:b4:6a:67:91:
                    72:bf:15:d5:59:54:a4:c5:a6:a7:94:29:6e:bd:1e:
                    d5:f9:69:d3:d0:14:79:2c:d5:24:85:f3:eb:2a:51:
                    12:67:70:13:ac:28:63:8e:06:3b:13:8c:4a:f3:4f:
                    99:67:fe:9f:f9:ea:fa:79:46:50:40:24:d5:85:86:
                    81:26:ff:9b:fd:de:84:41:9d:f2:dd:2a:87:09:11:
                    d6:44:e0:ae:27:e2:e3:1b:3a:8b:70:22:de:4f:e1:
                    92:e5:13:02:f9:45:a6:70:7d:0d:6f:7b:04:ba:db:
                    fb:5b:42:2e:81:a0:10:06:7e:b4:7a:61:af:08:84:
                    ea:a0:3d:61:b9:3b:2d:c5:81:73:2d:40:f1:22:d0:
                    f0:ce:82:a1:8f:e6:d2:bd:c2:e1:aa:b2:78:8a:f6:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B5:99:71:27:9D:DA:31:DC:BC:E3:4C:C6:0C:F5:60:BA:5C:9D:EA
            X509v3 Authority Key Identifier:
                keyid:32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:86:c0:34:94:2f:78:b1:90:bc:63:48:45:b6:b9:80:01:1b:
         45:60:2f:52:b4:8b:7f:59:7b:ea:a2:09:33:ea:18:0e:be:4b:
         ca:03:a3:d6:51:9e:79:cc:a6:50:b2:70:e4:b6:b4:3d:ad:09:
         0a:03:b7:e6:89:22:82:43:79:b0:78:00:ac:34:ca:81:b6:ef:
         63:08:be:87:2d:75:d6:4c:80:80:a8:08:1d:af:ec:11:e1:0b:
         21:f8:fd:74:5a:33:78:11:52:60:1e:4d:6a:69:ee:33:37:eb:
         57:f0:a4:76:6b:75:47:ca:0d:f8:da:78:f7:15:b2:9e:a3:8a:
         76:70:71:b6:26:ae:3c:ec:24:1b:27:7b:a1:3f:6e:6e:4e:f9:
         9c:23:95:03:47:67:70:41:b0:39:a3:df:2b:e9:fc:04:85:db:
         bc:aa:12:88:2e:d0:f1:45:82:a6:c5:41:a6:1d:a7:b4:58:ed:
         ae:41:af:57:c1:8b:36:50:4a:94:75:15:8e:a8:4a:7e:fe:0f:
         0c:19:62:5d:1b:31:e5:f2:0c:65:1d:0e:d4:e1:b8:ff:b3:9a:
         c7:a8:3f:e4:e6:ae:5a:5b:c9:20:4b:d0:24:86:a8:d5:f0:83:
         11:56:47:f3:be:84:14:75:6d:51:b3:7f:bc:dc:07:7f:12:c8:
         62:67:de:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:18 2025 by rpki-client