This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
File:                     8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json)
Hash identifier:          CdGnT0ab1BbCMMn1iGjZhwWgq0mE/08siyy3dvr7uQU=
Subject key identifier:   37:90:2F:87:2C:1D:D1:0B:34:69:FA:A2:10:37:3C:3D:87:56:D3:EF
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Certificate issuer:       /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial:       0302
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
Manifest number:          02F3
Signing time:             Tue 23 Dec 2025 00:16:44 +0000
Manifest this update:     Tue 23 Dec 2025 00:16:43 +0000
Manifest next update:     Tue 30 Dec 2025 00:16:43 +0000
Files and hashes:         1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: Zt7mXr2hpmUFxokbodayG1/Z/Kbpe2FhXXrVrYbmmJY=)
                          2: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: NeNLEWs48p2lioiKT2J3ps7UOEiJA4wkGqbLsVS/UVI=)
                          3: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: xFC28v5UWT7Q3EvTeNVvDz0nPDxJaAuJAejlh2w2fns=)
                          4: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: f/KJzPtE5DhAN8MxPkZ/p+zkW8uVVZhQWMpOA1Tk7TY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
                          rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770 (0x302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
        Validity
            Not Before: Dec 23 00:16:43 2025 GMT
            Not After : Dec 30 00:16:43 2025 GMT
        Subject: CN=6949df6c-e4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:bf:63:b3:95:79:15:3c:48:c6:e7:54:6c:
                    d7:6f:08:2e:6e:3d:9d:ed:2a:65:32:83:46:40:e0:
                    65:32:35:af:bd:21:a6:5d:62:ad:4c:33:66:a3:96:
                    14:cf:ec:23:17:10:c3:6f:81:bc:a9:b1:97:01:00:
                    e8:82:12:11:1a:69:18:84:5b:ff:76:a4:3b:05:82:
                    80:9e:c8:20:cf:d4:dd:b4:92:3f:03:92:f4:ed:26:
                    6a:9c:c6:28:4d:30:7b:70:2c:ea:f9:35:d8:05:89:
                    39:00:33:06:0a:86:18:1b:23:03:b3:cf:fc:b6:2e:
                    62:db:02:b2:b6:19:f1:4e:5e:a3:03:8d:68:12:b2:
                    34:64:ea:54:f0:8c:9e:8f:a7:cc:62:09:c2:7f:c8:
                    66:66:db:2a:34:a7:66:26:87:1d:0a:11:f6:44:23:
                    f2:07:76:03:f5:e8:23:84:a7:a9:cf:86:94:dd:7f:
                    94:a5:34:1b:74:09:7b:41:b8:e1:4e:8d:cd:45:9d:
                    fa:2a:31:a3:fd:55:90:4c:95:c5:ab:d4:ea:60:71:
                    e7:49:72:a4:5b:5c:ed:b5:be:71:3f:f9:54:fd:ff:
                    e2:54:93:c0:36:e9:ba:57:47:46:06:d7:f9:15:73:
                    a2:37:22:fd:d1:86:9c:67:53:e4:bb:7a:6b:ee:a2:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:90:2F:87:2C:1D:D1:0B:34:69:FA:A2:10:37:3C:3D:87:56:D3:EF
            X509v3 Authority Key Identifier:
                keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:2f:1c:b0:77:52:c0:17:93:4a:f5:15:ee:f2:3a:4d:04:43:
         05:d8:d1:23:3c:c7:d7:27:62:b4:c7:39:73:8f:ad:e4:03:dc:
         aa:8c:3c:0d:2d:7b:0d:9e:2a:fe:bf:fb:b0:71:40:ed:30:2c:
         f2:a9:18:05:f3:76:49:a7:85:e4:a9:82:69:89:36:d7:27:7c:
         cd:0e:6d:98:26:6a:c7:35:cc:8b:83:3f:dc:75:03:ad:d8:d5:
         64:7c:0d:bb:8e:a1:54:34:8a:8d:1e:cb:4f:38:0c:d4:43:74:
         06:c2:42:9b:4a:39:c5:81:ef:6e:1c:da:a6:3a:e3:85:37:e1:
         b6:91:9d:2c:86:1e:5b:68:e9:95:dc:2c:47:13:8c:89:08:01:
         2c:67:9a:5c:b5:49:4b:2a:4d:c9:75:e2:b0:f5:a8:dc:e0:47:
         ea:5a:c4:fe:d9:6e:b4:cc:ef:0e:a8:80:0a:66:bb:cc:95:f0:
         7b:4a:36:f4:83:95:d4:e0:12:ae:8f:fd:a7:a5:67:88:b4:ea:
         94:b0:de:40:b7:53:75:bb:20:43:4c:5e:ea:17:58:16:32:2f:
         a3:40:8c:28:b3:32:be:01:d1:d1:dd:8b:0b:ce:33:08:a6:61:
         b3:f7:d3:b1:a6:6e:db:2b:4e:40:b6:b3:cb:f2:ef:2d:f1:04:
         36:d0:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:14 2025 by rpki-client