This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
File:                     snrsU_-6svW1vAy0fAhwbVBTMhA.mft (raw, json)
Hash identifier:          vubdufisK31iLCaQZn6D+07yBHSuF5L54NEH3uIzeK8=
Subject key identifier:   2C:38:5E:62:C4:CE:F7:BF:52:5B:04:DE:F5:07:A6:B9:E9:23:6D:82
Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
Certificate issuer:       /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Certificate serial:       0550
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
Manifest number:          0548
Signing time:             Mon 22 Dec 2025 22:34:18 +0000
Manifest this update:     Mon 22 Dec 2025 22:34:18 +0000
Manifest next update:     Mon 29 Dec 2025 22:34:18 +0000
Files and hashes:         1: snrsU_-6svW1vAy0fAhwbVBTMhA.crl (hash: EIITRhg/nrQakshFnpAlOEp/NfJfy+77aNIwGqYl0Zk=)
                          2: 793A891A1EA111ECA967444FC4F9AE02.roa (hash: 1+bdIoDctHGeWK3PYFNUTctx7UAbF9WMT3WnAcVgkOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
                          rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1360 (0x550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A7D6, serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
        Validity
            Not Before: Dec 22 22:34:18 2025 GMT
            Not After : Dec 29 22:34:18 2025 GMT
        Subject: CN=6949c76a-537b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:3d:0a:dd:3e:fe:ee:31:f9:02:95:ab:a6:
                    90:53:c2:ec:bf:45:5c:45:43:43:5d:08:f6:d1:99:
                    0b:a0:82:69:1c:f3:af:1a:3c:7b:35:68:93:77:e4:
                    b3:ed:44:31:b3:0a:c7:3f:8b:35:f2:55:03:11:02:
                    99:bf:e6:ab:c3:ff:82:c4:7b:30:09:ce:bc:d2:3d:
                    2c:5f:5e:c6:85:95:e7:67:f8:a2:0b:f8:32:20:77:
                    a6:71:01:77:62:0f:2c:0e:69:fc:86:77:b0:df:70:
                    00:55:bf:5d:4b:ed:f1:f9:52:88:f8:24:78:c9:04:
                    fe:25:10:8e:3e:ef:91:70:38:f0:5f:2e:a3:80:8c:
                    cd:ed:e5:83:51:92:52:f4:be:64:55:4c:21:38:1c:
                    03:66:de:36:04:81:58:7d:33:98:b8:c6:e8:24:6a:
                    20:ba:82:0a:76:d1:06:2a:61:a9:12:3e:f5:22:0a:
                    17:a0:51:bd:8e:f8:29:7b:55:8c:b4:b4:5b:7a:61:
                    de:19:97:80:12:b5:53:b8:1e:8f:1e:ed:b8:e6:27:
                    76:05:9f:d8:6c:aa:47:4f:c0:23:48:41:f4:82:1a:
                    83:ca:18:ad:a2:43:c2:69:85:57:9d:bf:23:60:bc:
                    56:38:fc:0a:4d:d1:0d:47:87:61:18:4c:47:a0:cb:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:38:5E:62:C4:CE:F7:BF:52:5B:04:DE:F5:07:A6:B9:E9:23:6D:82
            X509v3 Authority Key Identifier:
                keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ef:c0:3b:a7:c4:08:38:b2:22:c5:f2:c3:af:d2:98:81:67:
         a2:fe:53:3a:35:7b:cd:dd:e6:d2:65:d6:3f:66:2b:2b:dc:0f:
         15:bd:cf:e2:46:8f:63:29:f6:4f:e6:a3:cb:d3:49:92:81:9d:
         43:4c:b4:db:bd:6a:a8:e9:f5:10:da:37:df:9e:f9:71:51:5d:
         cc:da:08:e1:ba:86:ae:2a:43:e7:8c:51:4f:fb:0e:38:86:87:
         07:01:e9:bd:c6:a0:55:3b:e0:88:2a:12:4c:cb:96:e1:bb:b6:
         a0:fd:1a:e0:c5:6c:71:82:9e:d8:9c:12:b6:79:1d:55:ea:f0:
         d4:7d:e7:5e:78:20:eb:88:19:69:7d:e6:75:b6:de:99:c5:3a:
         0e:73:a2:da:2d:cd:8c:89:df:45:69:76:23:a1:a4:15:fc:a0:
         57:40:bd:3d:d9:17:6d:1b:59:77:b2:8a:c6:b0:62:1b:ee:cc:
         e4:ed:52:b9:7b:16:ba:cf:5c:e5:41:91:42:8b:49:cd:99:ff:
         71:10:4b:ad:a0:a1:93:51:7a:b7:9f:ca:56:b7:f7:83:7b:fc:
         f1:2d:cb:c9:35:46:e1:37:74:14:aa:ae:09:2d:30:55:ec:76:
         fe:e0:01:60:3f:88:06:64:36:71:88:3d:5f:52:bd:cc:83:01:
         63:74:00:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:40 2025 by rpki-client