This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
File:                     poz6MR67HxAyDqIHdTAw5_Oij3I.mft (raw, json)
Hash identifier:          Naul9DHUX2E9zLnhtJ+8gGndxmJXgkfADOItUDfjCPE=
Subject key identifier:   D8:D3:4C:7E:4F:DE:EB:52:73:D3:85:93:30:13:97:7C:47:AE:19:30
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Certificate issuer:       /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial:       0B2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
Manifest number:          0B15
Signing time:             Wed 10 Dec 2025 18:29:40 +0000
Manifest this update:     Wed 10 Dec 2025 18:29:39 +0000
Manifest next update:     Wed 17 Dec 2025 18:29:39 +0000
Files and hashes:         1: poz6MR67HxAyDqIHdTAw5_Oij3I.crl (hash: wxQhO4Vt6aprEmgBHgD+NSvN8z/e2Bl42Qetcv1Asy4=)
                          2: E3D288CA6BC311EDB9791958C4F9AE02.roa (hash: xfCVW/hkWWtb6veFD5avvPcY4Mz5aIouTpiWuzaIDT0=)
                          3: F4E06C32804911EDABB05C09C4F9AE02.roa (hash: ESJChcbSeTzsfPRjHjsX6geMHbvNO7hjmHXws1871ls=)
                          4: D353090841F711ECB1465157C4F9AE02.roa (hash: hyTgYf3yNb3P1osKlb2mkzCC43nsvagjPiYm8g/bHPk=)
                          5: 110731BE329D11EFB45DDA57C4F9AE02.roa (hash: wHUnMKyUsP+z0ZGxOO5ssZzuISHdGqM1+8ZYBh44vj4=)
                          6: 1E95063A21E611EEB4824339C4F9AE02.roa (hash: zTEEFeYyenG7e2iJRNTQNMi/VEI/2vKOaAjTvCstuBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
                          rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 18:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2863 (0xb2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913258C, serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
        Validity
            Not Before: Dec 10 18:29:39 2025 GMT
            Not After : Dec 17 18:29:39 2025 GMT
        Subject: CN=6939bc13-bf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:08:9e:d1:9f:e6:07:2c:b1:09:cb:b6:43:11:
                    47:10:ed:04:5f:dd:e8:bf:25:32:95:89:21:b0:31:
                    2a:5e:22:54:e3:96:ec:22:ef:7c:b2:05:36:fa:19:
                    6f:25:2d:29:48:c9:a2:8c:7c:47:ad:7b:b4:8e:22:
                    36:e3:43:0f:bb:02:b4:18:e4:9f:a3:9b:1f:65:22:
                    d7:87:0c:89:3f:c5:ba:1c:d4:8c:71:b5:fd:70:c0:
                    dd:64:7e:f7:4f:fe:fe:fa:71:74:08:90:d4:59:f4:
                    7c:78:27:4e:df:6d:b8:ea:a1:27:52:f1:04:2b:c8:
                    25:f0:34:20:22:ea:da:1d:6a:1c:b2:f9:04:cd:db:
                    36:34:3c:4e:84:68:61:68:8f:b0:ec:56:92:4c:99:
                    be:9d:0d:35:51:d0:05:1c:86:ce:d7:cf:16:6e:8e:
                    be:6c:41:33:1a:c5:c8:26:9b:65:10:6c:5a:1c:0a:
                    16:33:05:65:72:56:f1:14:32:d0:b9:ef:6e:6d:5d:
                    b5:cb:99:ca:7e:5b:83:00:38:da:9c:43:36:7a:59:
                    b7:2a:f3:9d:ef:d9:ef:ac:27:f9:58:50:95:6e:f4:
                    6f:7f:37:cc:03:87:56:14:db:3d:37:32:5f:44:a5:
                    06:e0:0b:b7:6b:bf:a7:dc:06:62:0d:33:c2:89:d9:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D3:4C:7E:4F:DE:EB:52:73:D3:85:93:30:13:97:7C:47:AE:19:30
            X509v3 Authority Key Identifier:
                keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0e:12:5d:ca:cd:0d:d1:c1:f7:9b:ff:9a:36:b4:fe:9c:71:
         df:06:3b:f7:d8:cc:89:7f:20:1b:b6:ac:53:8d:1b:c4:01:63:
         dc:2b:28:89:7f:d8:7d:2e:7c:02:7d:9e:a8:c0:e8:1c:a2:d8:
         83:4a:1d:5d:7a:68:2c:1e:c0:e3:64:d6:e7:56:d6:85:a9:71:
         7a:04:19:45:3b:7e:ed:5f:ba:23:d1:8f:f1:69:40:b8:17:87:
         a8:4a:70:dc:d7:52:d2:22:cc:f2:af:1e:94:ce:53:18:77:73:
         60:28:71:17:a2:4e:98:44:ac:38:87:29:07:c4:cd:28:8b:d3:
         46:05:d5:95:88:eb:34:0f:f9:1b:f8:16:96:f9:ff:e9:b7:28:
         9d:13:ed:90:fd:cf:a9:49:6c:aa:2a:46:71:85:53:75:ca:bd:
         30:86:45:b1:0c:d0:db:22:01:ec:fb:bc:a8:e6:e6:e7:fe:7c:
         e5:2f:2d:76:13:06:c5:78:12:09:05:cc:d8:c9:68:a3:4e:8a:
         c3:e7:29:fe:ff:a1:36:1c:8a:1e:63:84:96:a4:7c:73:ae:b0:
         ec:ce:36:99:ba:96:58:72:4f:fc:83:c4:d8:fb:11:50:af:b9:
         27:b7:ec:fc:26:e1:fb:b4:2c:c7:f0:2b:e2:9e:cb:bd:26:9e:
         c3:82:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 19:08:20 2025 by rpki-client