This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
File:                     84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft (raw, json)
Hash identifier:          CbJxKvTbeZsaPanpMpaDj5NjDc46zxweiBoeIwFqQnk=
Subject key identifier:   E9:9C:30:65:97:26:0E:A7:F9:86:04:50:90:D9:A9:43:82:16:9B:A8
Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A
Certificate issuer:       /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A
Certificate serial:       0572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
Manifest number:          0561
Signing time:             Thu 18 Dec 2025 22:45:46 +0000
Manifest this update:     Thu 18 Dec 2025 22:45:45 +0000
Manifest next update:     Thu 25 Dec 2025 22:45:45 +0000
Files and hashes:         1: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl (hash: JYIJasKq/L/jPm785G6M5mM+xeAfXQfvAilxk2iFiqM=)
                          2: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (hash: ksNFagOfVMmNunRnOoSWeJDWRZC4HhFsn1AY5q9lcGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl
                          rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394 (0x572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC55, serialNumber=F38589F8464AA5A91699F808649EC536831B004A
        Validity
            Not Before: Dec 18 22:45:45 2025 GMT
            Not After : Dec 25 22:45:45 2025 GMT
        Subject: CN=6944841a-8eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:ee:9c:56:9d:85:38:c4:7a:69:f1:e0:b2:
                    a4:29:3e:9a:74:75:a9:ac:87:04:ee:af:a0:1c:f7:
                    84:de:19:58:98:29:81:8c:75:d6:cf:a1:67:8a:b1:
                    f5:cd:72:ef:01:1c:00:7a:65:24:05:12:f9:5a:c1:
                    12:34:cd:c6:eb:91:d1:39:a8:b3:48:f2:6f:f3:47:
                    89:03:e8:4b:ef:ab:7e:8f:45:8a:2d:a1:13:f4:33:
                    08:aa:85:aa:b4:4a:2c:9a:fd:f6:d5:f4:af:93:c5:
                    a7:5e:a1:35:02:27:f1:69:23:81:90:a7:14:c0:a1:
                    76:57:7d:26:83:a9:11:4a:09:e2:65:0f:a0:ec:77:
                    b2:3d:6b:8d:39:79:7e:63:1c:5b:40:71:06:4c:a6:
                    90:8d:88:aa:23:4b:1c:ae:4a:8f:0c:1f:43:d5:9c:
                    04:25:9d:a4:20:3c:56:63:22:06:6d:5b:a1:7e:9e:
                    22:ec:5d:59:8f:4b:28:e6:d8:ac:1c:5f:ea:0b:52:
                    e6:bd:67:0b:03:34:9a:d9:41:52:0d:3e:29:2f:dd:
                    22:d3:2f:ba:3a:fd:58:7e:24:9e:0e:fe:60:c6:32:
                    f6:d0:00:3f:1e:55:63:6d:82:2f:5a:9e:21:4f:db:
                    e9:29:ce:b6:18:95:5a:95:49:75:aa:ab:b6:3e:20:
                    43:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9C:30:65:97:26:0E:A7:F9:86:04:50:90:D9:A9:43:82:16:9B:A8
            X509v3 Authority Key Identifier:
                keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5c:49:fc:e1:63:ac:63:61:ba:e7:f0:53:01:01:5c:bd:dd:
         5d:62:c3:79:93:71:3e:4c:ab:2f:8b:9d:ec:1a:13:ef:90:34:
         cc:05:9e:e3:11:4c:ac:38:79:92:8f:a6:c7:6e:52:21:00:0a:
         01:ff:1a:bc:9e:49:ea:0e:21:f3:c4:58:98:76:2c:64:f1:81:
         07:36:66:dd:09:85:7f:ef:18:f1:f3:95:95:1a:e9:78:0b:d0:
         57:a9:2f:10:9c:50:6a:f2:9c:e7:28:8c:95:29:be:f3:bc:94:
         67:2a:16:c0:2a:d8:77:22:a3:38:14:e9:ac:01:2f:8d:9d:48:
         ec:86:0d:3c:90:5e:be:1f:60:fd:84:98:9b:f8:37:9a:e5:23:
         28:85:3a:88:ff:f2:35:63:55:80:1a:29:18:93:4b:57:18:b1:
         4d:35:4c:9b:a9:dc:2f:6d:02:ac:30:c8:cb:ca:3c:86:9e:af:
         92:29:4e:a8:c3:6b:78:5e:6f:88:31:5d:92:1a:2e:c1:14:3c:
         91:52:bb:5d:d4:47:2b:df:85:f5:0e:d1:12:43:66:6d:20:18:
         37:eb:b9:99:df:b4:68:b9:62:e3:9a:f5:6e:a9:df:a2:0e:76:
         46:25:2e:d9:05:e6:ca:b1:0b:78:24:f5:d9:f8:64:07:8c:eb:
         c5:96:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:42:06 2025 by rpki-client