This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
File:                     dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json)
Hash identifier:          okZMCI8ycm/Bt5MyJiFVmcYQuArKAmq+eSmnoJE2g/M=
Subject key identifier:   C9:D4:9C:2B:03:EC:1A:7B:13:EB:12:A3:76:59:8E:9F:D8:FE:9F:B2
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Certificate issuer:       /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
Manifest number:          015A
Signing time:             Fri 19 Dec 2025 03:19:18 +0000
Manifest this update:     Fri 19 Dec 2025 03:19:17 +0000
Manifest next update:     Fri 26 Dec 2025 03:19:17 +0000
Files and hashes:         1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: H+f7ccaSlmyTiCFjCwKwapMj/FqvJe9beXPI2kR+A28=)
                          2: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: C5+FDRdQyQalYR2P8dEPuBXkPFwg+NEWC9TQl/hqp1Y=)
                          3: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: /tXzmPJpbFpT9Ng+OXe5R9OW1iH2k8GOdLq7rPEZELc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
                          rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
        Validity
            Not Before: Dec 19 03:19:17 2025 GMT
            Not After : Dec 26 03:19:17 2025 GMT
        Subject: CN=6944c436-6b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:21:eb:c6:63:76:50:98:ed:1d:6a:02:95:
                    c9:c2:c1:83:84:63:c0:25:18:22:0d:13:a3:e0:98:
                    70:61:00:a5:05:f7:26:7c:07:7c:b6:ff:3c:38:eb:
                    7d:f0:68:96:4a:b8:87:bb:c8:95:78:e2:d9:94:f3:
                    ab:5c:63:14:ec:40:16:d1:77:78:37:27:5b:fa:ef:
                    55:87:9b:e4:52:73:1a:74:cd:31:df:54:25:96:09:
                    7a:65:03:f8:5e:d0:f8:d4:2b:93:29:28:39:a8:46:
                    1d:b0:16:f1:6e:83:ca:51:d6:da:1c:2f:04:8b:bb:
                    6a:9f:aa:84:98:f1:87:aa:85:46:f4:3a:9c:aa:fc:
                    69:10:d9:8c:37:7b:d9:cd:2b:6a:ad:0f:00:e2:69:
                    e2:00:dc:96:6d:a7:8a:57:7e:df:b5:44:7a:74:f0:
                    e9:42:68:c7:50:91:7d:c2:ab:a9:46:23:b7:02:5d:
                    cb:66:1c:57:01:a8:54:99:5f:01:1a:65:12:70:7a:
                    7b:22:3d:c6:65:bc:d6:ce:3d:79:0f:9b:22:94:4f:
                    aa:9c:f3:f5:b4:5b:c0:e1:ba:12:4c:6b:98:69:a0:
                    6f:a4:aa:ba:b6:6a:90:87:10:73:64:cc:9e:7a:fb:
                    fc:98:5e:13:49:a6:74:67:6a:2e:12:e3:27:3f:1f:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D4:9C:2B:03:EC:1A:7B:13:EB:12:A3:76:59:8E:9F:D8:FE:9F:B2
            X509v3 Authority Key Identifier:
                keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:90:6e:b5:49:de:74:d8:c8:d7:01:f4:52:d4:36:ed:0f:f1:
         81:9f:5e:34:88:14:d9:3f:58:8e:9f:ed:ab:8e:86:2e:02:6f:
         d6:8b:d5:91:9e:a8:55:b4:a2:b9:de:8e:71:1c:4c:86:28:96:
         6a:54:45:58:bf:ef:b2:9b:c0:bc:5f:4e:a1:ef:8d:0d:c6:0c:
         c6:cf:23:a1:95:ad:76:8c:d4:7a:69:37:db:85:b9:59:38:8e:
         7c:53:75:e3:bc:11:d7:02:ba:33:a7:c5:2d:3c:aa:d5:8f:8a:
         97:ba:cf:cd:de:29:8f:d2:37:cf:2f:ba:ca:94:6a:18:3b:24:
         8d:cf:54:4c:4c:08:96:80:81:bb:e7:86:0c:7d:a7:ce:d0:51:
         96:21:b8:5f:ae:e7:bf:67:0e:0d:31:0e:de:97:4d:5a:ba:0b:
         ed:29:ba:b9:57:71:0a:8d:d6:07:d9:dc:ed:61:cf:f0:7d:95:
         0d:1e:b8:35:50:56:b1:79:e2:bb:ee:15:08:64:c9:0d:c8:67:
         4d:dd:f9:9b:6b:a8:92:98:c3:0f:8a:97:bd:d5:27:28:a7:ec:
         05:90:e9:6e:b2:ed:c8:1a:85:88:a2:07:81:50:d0:88:f9:c4:
         9d:df:b0:f5:c0:3c:fa:cc:b1:41:9e:87:00:de:13:8d:7a:f0:
         43:21:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:57:31 2025 by rpki-client