This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
File:                     DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json)
Hash identifier:          Lco09A1/e95ClQGCTInI//FvnRgphLLgw59+zqajRNc=
Subject key identifier:   FB:AE:9D:A5:E2:77:5E:61:7D:11:A3:17:2E:DC:F3:9F:44:53:CD:EE
Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
Certificate issuer:       /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
Certificate serial:       03EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
Manifest number:          03DD
Signing time:             Mon 08 Dec 2025 23:01:27 +0000
Manifest this update:     Mon 08 Dec 2025 23:01:26 +0000
Manifest next update:     Mon 15 Dec 2025 23:01:26 +0000
Files and hashes:         1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: CQxFGjYwGc0FuN3GENlXdHy/EzD8Ln8DT3DgnV+WXTQ=)
                          2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: EyHs5y7oE17xIkYVPklIvc2ZONwGgz4agYPg5DpPAPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl
                          rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 23:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1002 (0x3ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
        Validity
            Not Before: Dec  8 23:01:26 2025 GMT
            Not After : Dec 15 23:01:26 2025 GMT
        Subject: CN=693758c6-2e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:bd:0d:a3:4e:8a:4a:e3:e8:58:28:bb:bb:
                    8f:c3:83:a7:8b:7c:e1:4e:7d:e7:7a:af:02:cb:01:
                    ab:16:04:19:79:af:d5:c1:65:79:ef:b5:c6:6d:8c:
                    2a:60:14:e7:04:73:4f:6b:ce:8b:2c:07:b0:f1:30:
                    4c:5e:20:cf:ab:65:a0:68:5b:1b:1b:3a:16:7a:03:
                    bf:40:37:db:8f:d6:ce:65:25:f9:00:78:58:c3:49:
                    a9:dc:eb:1d:07:00:52:e6:46:c5:1a:f9:da:71:74:
                    aa:03:8a:6b:f1:a3:81:7e:00:5c:01:23:88:ab:ae:
                    2c:23:dc:44:b1:c9:57:42:9a:fc:f7:52:68:a1:96:
                    e8:99:38:3d:82:05:c4:76:9f:69:02:35:c5:5a:85:
                    7c:67:f5:87:25:7a:a2:c7:a1:8e:79:e8:f3:ad:ea:
                    44:d8:5d:4a:4d:49:22:85:d0:bb:0e:b5:9e:49:e3:
                    83:ee:3e:1d:70:35:57:09:c3:52:0c:2b:44:0b:c3:
                    bc:bc:c5:f0:a5:76:07:d6:cb:89:61:01:cd:09:d1:
                    b1:c0:d8:90:87:f9:9d:7d:74:99:64:e2:da:aa:4f:
                    5f:ab:ce:5d:b5:4d:2a:15:09:5c:98:cc:ae:9b:2d:
                    11:7f:21:e7:c6:a3:3d:b4:e6:d4:10:96:4e:78:1e:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AE:9D:A5:E2:77:5E:61:7D:11:A3:17:2E:DC:F3:9F:44:53:CD:EE
            X509v3 Authority Key Identifier:
                keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:4e:c8:c5:27:40:03:4c:37:39:4b:48:45:11:dd:ee:c4:
         06:e0:2d:97:04:8b:13:b8:a0:d1:22:3c:38:89:da:e8:e4:d4:
         de:83:71:ff:57:86:e0:a3:99:f0:e4:a0:77:0f:4c:a1:64:c7:
         4c:2c:9b:36:7c:b0:40:9c:b3:a2:4e:d1:bf:d7:7c:0b:9e:73:
         2f:9f:b5:36:a7:3c:61:80:52:2b:f6:6d:6c:c3:3d:75:4a:88:
         ec:11:8f:b4:87:78:c5:9e:6b:e8:2f:46:1e:32:d6:6e:0b:bf:
         48:52:95:8c:1a:a2:c6:95:c3:28:f6:b5:2d:04:79:db:ff:a3:
         9b:9c:61:5c:9e:37:23:d0:24:06:fb:5b:5a:0d:2f:6c:29:57:
         02:ab:81:21:39:54:47:a3:62:f1:b8:e1:40:2e:b0:38:a7:b2:
         78:ed:19:ba:13:b8:c0:01:ba:65:dc:be:50:ff:2c:7a:80:98:
         a5:27:92:63:50:31:2e:f1:07:12:b5:fe:f9:36:dd:e4:8b:e6:
         d4:e3:9b:f6:cc:78:3f:91:08:c7:39:0c:7c:b3:0f:9d:ff:d0:
         f9:68:a3:47:ec:43:91:e3:94:d0:a7:29:97:74:ef:f3:5d:9d:
         f3:83:d5:6a:dd:75:27:3c:b2:ed:5a:7c:77:4e:63:c8:c4:06:
         ba:13:d8:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0
QUZDNjI2Q0UwHhcNMjUxMjA4MjMwMTI2WhcNMjUxMjE1MjMwMTI2WjAYMRYwFAYD
VQQDEw02OTM3NThjNi0yZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo+C9DaNOikrj6Fgou7uPw4Oni3zhTn3neq8CywGrFgQZea/VwWV577XGbYwq
YBTnBHNPa86LLAew8TBMXiDPq2WgaFsbGzoWegO/QDfbj9bOZSX5AHhYw0mp3Osd
BwBS5kbFGvnacXSqA4pr8aOBfgBcASOIq64sI9xEsclXQpr891JooZbomTg9ggXE
dp9pAjXFWoV8Z/WHJXqix6GOeejzrepE2F1KTUkihdC7DrWeSeOD7j4dcDVXCcNS
DCtEC8O8vMXwpXYH1suJYQHNCdGxwNiQh/mdfXSZZOLaqk9fq85dtU0qFQlcmMyu
my0RfyHnxqM9tObUEJZOeB6B5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuunaXi
d15hfRGjFy7c859EU83uMB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE
MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK
czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm
OXpWcE50Q1g0U1JLX0dKczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCanE7IxSdAA0w3OUtIRRHd7sQG4C2XBIsTuKDRIjw4idro5NTeg3H/
V4bgo5nw5KB3D0yhZMdMLJs2fLBAnLOiTtG/13wLnnMvn7U2pzxhgFIr9m1swz11
SojsEY+0h3jFnmvoL0YeMtZuC79IUpWMGqLGlcMo9rUtBHnb/6ObnGFcnjcj0CQG
+1taDS9sKVcCq4EhOVRHo2LxuOFALrA4p7J47Rm6E7jAAbpl3L5Q/yx6gJilJ5Jj
UDEu8QcStf75Nt3ki+bU45v2zHg/kQjHOQx8sw+d/9D5aKNH7EOR45TQpymXdO/z
XZ3zg9Vq3XUnPLLtWnx3TmPIxAa6E9hU
-----END CERTIFICATE-----
Generated at Wed Dec 10 18:24:39 2025 by rpki-client