This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
File:                     c0XTOFGViQaITYcWQKS-0shG0U4.mft (raw, json)
Hash identifier:          hz7Q3Dh0DER1/1XP03utbN3xd7qyBbanvfQaPmZIJBM=
Subject key identifier:   8B:29:E5:BB:66:BA:54:6E:FB:34:1A:4F:73:FB:A7:F2:18:DF:D3:73
Authority key identifier: 73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E
Certificate issuer:       /CN=A912F3B6/serialNumber=7345D33851958906884D871640A4BED2C846D14E
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
Manifest number:          0107
Signing time:             Fri 19 Dec 2025 04:09:40 +0000
Manifest this update:     Fri 19 Dec 2025 04:09:39 +0000
Manifest next update:     Fri 26 Dec 2025 04:09:39 +0000
Files and hashes:         1: c0XTOFGViQaITYcWQKS-0shG0U4.crl (hash: DtGI2W2zCVoXWgVsVY5zuFF+YSJjP+rAQkU6CMd7GRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl
                          rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F3B6, serialNumber=7345D33851958906884D871640A4BED2C846D14E
        Validity
            Not Before: Dec 19 04:09:39 2025 GMT
            Not After : Dec 26 04:09:39 2025 GMT
        Subject: CN=6944d004-6d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0c:b0:92:d8:66:83:05:57:17:8b:4c:27:b5:
                    bb:01:5f:2c:ee:94:ad:c0:03:d6:c1:71:18:94:5a:
                    b8:e0:04:de:f9:46:07:f0:7e:d5:7d:a4:26:28:19:
                    ee:9a:86:cf:28:2a:17:e4:5b:aa:7d:83:3e:0c:d4:
                    7b:07:90:12:4a:3e:d0:16:e7:58:33:7c:2f:b9:60:
                    6a:7e:27:0c:eb:39:bc:a7:be:6a:7b:67:47:23:b7:
                    db:b9:31:39:c7:a6:59:c0:e3:08:11:89:3e:59:39:
                    d4:d0:e8:d0:75:83:0c:9e:a2:b5:18:37:ff:88:35:
                    e5:61:e9:d0:17:d9:11:26:c0:49:3e:07:9e:95:38:
                    38:42:bb:e1:eb:c9:71:c4:52:d7:8e:aa:3d:b9:1b:
                    2c:4f:8a:2d:bd:cb:b4:ac:2f:82:c6:30:f7:ef:11:
                    38:7a:d0:e2:81:40:f5:c7:e0:99:3d:9d:5e:00:b5:
                    cf:60:f8:cd:1c:a9:db:21:48:9c:c7:82:20:40:26:
                    7e:41:75:2d:7a:c7:7f:3d:55:de:25:f2:5d:e9:08:
                    54:24:46:c3:33:5a:d5:05:fa:80:e7:d8:d8:ca:ec:
                    fa:80:4c:94:ab:7a:6c:d2:01:1b:3a:20:38:af:59:
                    5d:b9:19:22:9f:da:1b:65:b9:bf:59:f4:d8:57:d1:
                    ba:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:29:E5:BB:66:BA:54:6E:FB:34:1A:4F:73:FB:A7:F2:18:DF:D3:73
            X509v3 Authority Key Identifier:
                keyid:73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:a3:b5:93:05:25:21:83:cb:42:cc:a0:80:fe:06:87:07:
         bf:75:24:70:ed:68:b8:0a:b7:93:1c:8c:03:74:f2:77:77:34:
         8b:56:9a:95:76:98:0f:8d:c7:91:a0:01:1b:d5:0f:c4:9d:8f:
         29:77:6a:ff:b8:04:44:32:eb:b7:25:c9:0b:72:a2:44:47:84:
         7f:d0:cd:82:8f:a0:64:a7:43:f8:1b:2b:f0:f3:86:de:af:4b:
         1a:ed:42:f5:12:ce:19:83:ed:16:d9:8d:83:7e:6f:bf:33:e6:
         00:dc:a6:57:ef:a4:d9:19:9e:4e:66:3f:16:cf:bd:25:89:fc:
         14:f4:f8:df:c9:7c:3f:a7:33:b1:ca:7f:de:94:b7:31:f9:9f:
         21:6f:1c:21:63:a9:b1:45:f9:9a:8b:20:0a:67:76:5b:bf:bf:
         9d:58:67:52:06:2b:bd:b8:02:70:95:f1:98:ec:b9:5d:cd:53:
         23:3a:df:75:8f:fb:84:01:5f:ae:b4:e1:7f:44:24:ae:cc:76:
         79:68:bd:80:ac:58:8a:00:ec:6b:75:09:d4:2e:1a:34:c2:0c:
         f1:6a:d4:21:de:c6:73:35:49:b2:aa:1a:67:75:36:e5:61:07:
         00:50:83:c0:1d:d6:7c:6c:f5:4e:c5:ba:60:7a:f5:f4:79:39:
         1b:52:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:11:24 2025 by rpki-client