This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
File:                     atr7oploMMUdaBwyEtBLXHJMEx0.mft (raw, json)
Hash identifier:          JeAAWbfF32ZZnL2qa0iMZCYGXPQVF0Ki2nL2uH4PI58=
Subject key identifier:   33:64:78:30:78:9E:22:69:21:01:84:0E:DC:88:30:5E:CA:40:EE:57
Authority key identifier: 6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D
Certificate issuer:       /CN=A913F8FC/serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
Manifest number:          016E
Signing time:             Sun 21 Dec 2025 03:13:19 +0000
Manifest this update:     Sun 21 Dec 2025 03:13:18 +0000
Manifest next update:     Sun 28 Dec 2025 03:13:18 +0000
Files and hashes:         1: atr7oploMMUdaBwyEtBLXHJMEx0.crl (hash: NpCW+UzozzyIsnUjdTSujeeM5uoV1+8BBPqAO1q+3xM=)
                          2: 0A3010E62EFE11F0B225630AC4F9AE02.roa (hash: 2T/CGiXHJAOobm+XKqDaSIUbyAyKWmHWHVyPPZ+SnIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl
                          rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 03:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F8FC, serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
        Validity
            Not Before: Dec 21 03:13:18 2025 GMT
            Not After : Dec 28 03:13:18 2025 GMT
        Subject: CN=694765cf-d6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:7d:6e:ed:d0:c5:d7:d3:7a:8c:02:0b:2f:
                    6a:bd:8b:e2:d7:ed:cb:df:c3:2d:d7:d0:e3:09:4a:
                    34:db:7e:96:32:ff:84:9b:5a:ef:ce:40:64:a9:a4:
                    5f:32:ab:3e:75:6f:55:49:77:62:db:ff:cb:9b:61:
                    0a:11:22:52:72:0d:18:4d:d2:78:65:dc:95:c0:ce:
                    a9:69:89:35:d5:f8:51:8a:75:16:25:ba:f0:75:a0:
                    30:6d:8d:c5:b3:3b:2a:f5:ad:00:36:fe:a1:e1:c2:
                    00:e9:28:b4:4f:34:54:50:da:bf:70:9c:41:41:05:
                    dd:56:e2:b0:3e:d2:6c:e3:69:8f:79:11:f1:8c:39:
                    fe:b6:56:3d:7f:78:59:01:37:86:4f:25:3e:30:81:
                    5b:19:47:01:81:31:29:26:5e:ed:7f:5e:2d:9a:35:
                    c9:26:34:1b:ce:af:b5:cd:8b:37:61:53:ed:f5:75:
                    9c:ec:b4:30:e0:42:c7:c1:06:98:38:ac:d3:f2:96:
                    73:ad:f5:27:77:b6:95:d0:68:16:8c:ba:6b:cd:cc:
                    f9:67:aa:ae:85:71:18:7a:fb:94:68:d5:3c:73:62:
                    c7:bf:04:e8:89:89:9e:48:74:4f:dd:be:b7:76:61:
                    f8:c5:cd:d4:fd:d6:68:20:ae:80:ee:15:fa:45:cd:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:64:78:30:78:9E:22:69:21:01:84:0E:DC:88:30:5E:CA:40:EE:57
            X509v3 Authority Key Identifier:
                keyid:6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:02:11:f6:ef:48:3e:ab:b0:70:77:40:69:b3:60:8a:a5:2f:
         3a:e3:13:b1:d5:40:b9:0b:ef:40:98:71:71:68:7e:7e:a7:44:
         ca:d4:68:3e:26:5b:ef:fd:da:3a:49:69:8f:1d:46:b0:3d:e0:
         ee:b1:2f:2c:75:1f:96:d1:6c:eb:cc:75:89:a4:aa:4d:c3:54:
         5e:18:cf:64:a0:b9:a8:c6:86:e0:a1:d6:9f:00:54:9e:5c:d2:
         c8:f8:17:93:09:c9:4d:ae:ca:97:d3:5e:89:ae:d5:07:06:a3:
         54:90:d3:d0:9e:ba:34:11:f4:b7:6c:0b:dd:11:5a:ad:e8:ef:
         56:8a:56:b0:44:2e:cf:46:2f:dd:30:43:0e:21:0f:c0:67:49:
         62:02:12:83:8c:e8:af:a2:9a:bd:62:dc:73:00:d9:e1:27:81:
         2d:93:d1:09:5d:f4:a3:85:27:71:8b:1a:ae:9e:20:c5:2a:40:
         e1:e6:f3:78:be:76:1c:0d:7e:8e:fd:23:af:c6:60:08:8a:3e:
         6d:9d:64:d4:2f:4d:92:6e:93:c0:e2:00:e3:27:5b:fd:e7:4c:
         b9:37:4c:12:07:33:8b:86:73:dd:5e:77:c5:cb:a6:18:50:08:
         f9:a0:db:05:a8:8a:cc:5b:ba:43:4c:4f:8a:8d:80:5f:5d:22:
         92:67:6f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 13:37:00 2025 by rpki-client