This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
File:                     1rdRTL8L4gRsE8oNf10iNS_aWO4.mft (raw, json)
Hash identifier:          /9GuWdO31DRjMl2ynWagolIvl+MLPF64V5tecdvoU4c=
Subject key identifier:   4D:12:E1:A3:4D:5F:7B:A0:E2:AB:13:1D:09:A2:C6:EE:AD:32:14:AA
Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE
Certificate issuer:       /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE
Certificate serial:       0236
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
Manifest number:          0232
Signing time:             Tue 23 Dec 2025 01:02:13 +0000
Manifest this update:     Tue 23 Dec 2025 01:02:12 +0000
Manifest next update:     Tue 30 Dec 2025 01:02:12 +0000
Files and hashes:         1: 1rdRTL8L4gRsE8oNf10iNS_aWO4.crl (hash: 1w6ZDTkl8IZ4pkneeG+EUlfT/rb8o3G8AeFLf5p7cRU=)
                          2: 8E3128B4837D11EDB082012FC4F9AE02.roa (hash: pbCZups9CHpt8yF1jqE6eaTv1T+fEJy3uGbRYPbMwLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl
                          rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134B2D, serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE
        Validity
            Not Before: Dec 23 01:02:12 2025 GMT
            Not After : Dec 30 01:02:12 2025 GMT
        Subject: CN=6949ea15-1d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:df:2f:bf:39:05:03:96:87:ae:cf:bb:02:
                    47:2e:39:91:29:38:e0:cf:2b:80:d5:80:c0:a8:42:
                    7b:e3:e4:38:3a:fd:08:9a:2c:5d:3c:b9:89:37:17:
                    a7:43:e3:61:cb:49:b0:75:e2:d4:64:51:5e:76:4b:
                    e7:9a:6b:fa:3a:06:4a:f2:65:8d:e5:5d:77:f3:dd:
                    07:80:f0:b3:c4:02:b6:a2:5f:b2:19:e8:e5:17:ca:
                    65:8f:36:81:76:dd:f1:c7:16:8d:14:13:b5:b6:f0:
                    ab:47:8e:33:f0:5f:0b:09:bf:ac:2d:e9:5e:35:88:
                    f2:75:3f:37:e5:51:77:f9:7f:b7:d2:72:8e:eb:52:
                    41:b0:35:b9:c7:13:c0:2c:0f:f6:c5:cf:c2:50:d4:
                    73:96:98:ad:33:52:d2:38:f5:ea:a9:4d:dc:bc:f1:
                    74:07:f0:45:40:1c:ad:35:0e:05:02:5d:77:e0:d3:
                    b6:3d:35:d9:04:5b:77:19:2a:0c:c7:3f:64:05:91:
                    cd:4c:68:d8:71:9c:66:6d:a7:95:2a:3f:6d:72:d0:
                    c2:6a:fd:18:d0:2a:bc:bc:41:4c:d1:c8:18:7e:6e:
                    7b:fa:63:5c:45:89:29:49:2c:e2:25:a9:cc:06:3e:
                    dc:40:06:29:df:d2:32:27:04:b5:49:88:11:41:12:
                    f7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:12:E1:A3:4D:5F:7B:A0:E2:AB:13:1D:09:A2:C6:EE:AD:32:14:AA
            X509v3 Authority Key Identifier:
                keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ec:1d:c4:fa:3a:36:be:e5:db:77:45:6d:3f:d9:a1:bc:8d:
         cb:b6:1c:d0:d9:d8:3d:e2:31:72:9a:21:c2:41:e4:86:16:0a:
         32:be:97:72:1b:20:bd:bd:cd:03:92:51:f4:c2:52:25:ee:6c:
         13:26:74:df:d1:04:36:ed:23:8f:7c:5e:22:3e:a7:e1:ad:00:
         c9:f7:d0:01:f5:70:81:29:06:69:34:d2:24:1c:6a:44:fb:3b:
         f5:94:ba:40:5f:7d:e4:a2:06:6e:13:97:ac:a2:22:55:95:2f:
         49:f6:f3:75:96:09:96:6c:90:8f:87:91:d8:d0:ba:fb:b3:75:
         27:71:ac:72:52:fa:c7:61:30:2b:d1:a5:d5:cb:c5:e1:d4:30:
         7e:02:c1:13:d7:67:b5:72:a8:3e:ec:a0:96:8a:eb:2e:4b:7a:
         74:a9:ad:b9:5b:01:56:85:2d:14:42:52:a2:7c:4c:a2:af:d3:
         00:d9:df:71:99:cd:8d:16:dc:0e:41:89:5d:96:e5:85:a4:4d:
         ba:9d:47:e4:15:69:67:dd:a9:37:42:91:13:f4:de:56:88:67:
         cf:50:d2:62:e0:5a:32:6b:2e:53:3b:56:b2:be:53:68:18:79:
         ea:1c:57:d6:27:61:7d:0c:23:7d:23:0d:8f:49:92:98:4c:b1:
         4c:5c:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:23 2025 by rpki-client