This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File:                     xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier:          6oUJQlC+wCKNqgQdlRMEeOHkwuDLpIacuGWyLWqWnYo=
Subject key identifier:   A9:95:5A:94:E7:DB:55:53:BB:58:2D:7A:16:23:09:9B:6D:F3:26:33
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number:          DA
Signing time:             Tue 23 Dec 2025 04:35:37 +0000
Manifest this update:     Tue 23 Dec 2025 04:35:37 +0000
Manifest next update:     Tue 30 Dec 2025 04:35:37 +0000
Files and hashes:         1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: jYT4k6YF9KasXbBE3JtYoPSek8IQy3B2f+fqWDRhgm8=)
                          2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ijUv0+puTZ+N4j9fhEKBY9wHAWPDCsnAi/IUGHnumK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: Dec 23 04:35:37 2025 GMT
            Not After : Dec 30 04:35:37 2025 GMT
        Subject: CN=694a1c19-138e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:ad:d9:58:96:30:ec:3b:29:d9:4b:fc:9e:
                    b3:de:c8:0f:11:b7:c8:2d:2c:54:b2:ea:ab:f9:3d:
                    27:98:19:64:04:3a:73:75:64:47:82:b8:bb:f5:c7:
                    34:21:62:71:97:62:e2:5b:d5:cb:11:57:1e:b3:42:
                    93:58:53:ce:f6:80:97:53:73:02:64:38:65:1d:f1:
                    1f:5b:99:8e:de:3d:a4:9c:57:8c:09:fd:59:a9:84:
                    92:5f:0e:48:47:79:6d:ea:ec:8a:ff:87:38:7c:78:
                    91:2b:24:e5:eb:93:37:f8:d5:9c:d8:1d:aa:d9:07:
                    a6:dd:e3:78:5f:81:f4:21:32:d1:1b:99:bc:86:d6:
                    da:25:71:6c:c0:78:d7:f2:17:1b:a9:c5:f0:4f:d0:
                    29:25:b5:f6:4d:a9:d7:db:e3:56:c8:24:02:c5:8f:
                    53:d2:f5:88:12:25:6b:b5:63:d6:30:a4:5c:24:22:
                    f5:6e:28:7e:93:c3:b6:3c:3b:70:2e:df:4c:f0:b9:
                    3b:0f:f6:89:c5:42:7d:aa:84:28:08:af:be:e4:9d:
                    07:f4:c2:02:9c:22:36:2c:e4:a8:08:c5:85:90:26:
                    45:34:49:67:f3:c7:01:f9:be:2c:5e:31:bb:e4:cf:
                    58:42:e8:08:a8:95:c1:e5:ea:ef:cf:0e:6e:ce:22:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:95:5A:94:E7:DB:55:53:BB:58:2D:7A:16:23:09:9B:6D:F3:26:33
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1d:43:c0:b9:40:d7:81:a6:6a:3e:f7:33:37:aa:b6:38:dc:
         b3:df:f2:12:f3:49:20:cb:0f:75:f3:5a:fd:5a:3d:a0:57:06:
         00:ed:c5:af:e2:0c:42:67:8d:bc:8a:c1:89:b2:53:31:00:a5:
         54:9f:29:2f:3f:b5:46:13:f1:ca:e2:79:94:86:48:ae:ec:25:
         7c:23:06:f8:06:f6:47:0d:67:23:5a:ac:98:44:dc:49:4e:59:
         18:7f:9d:c5:61:fa:09:95:0b:1b:28:e9:8f:28:06:79:6a:da:
         fe:d9:65:d9:b3:83:6e:cd:ca:4f:b3:0e:5c:85:0f:32:37:d2:
         11:ce:0e:16:2c:bf:10:24:0f:56:47:91:3a:0c:43:c5:e2:68:
         53:c3:91:5a:1b:a5:0d:ea:d7:3b:d5:84:a0:c9:47:48:f8:49:
         d1:2e:23:59:bb:ae:46:7f:c3:dc:2d:09:ad:16:b8:ba:e9:9b:
         95:64:04:5c:ea:d2:25:8f:ef:dd:fc:23:74:b9:22:59:14:45:
         1f:ac:c7:a5:7f:17:b4:1e:df:28:1a:d3:21:37:74:5c:42:9b:
         99:56:c2:c2:28:72:9c:c5:76:25:90:92:53:a5:76:4e:0d:01:
         be:78:29:c3:77:c2:48:ef:3c:31:bd:2d:03:2f:ad:97:59:12:
         07:38:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:40 2025 by rpki-client