This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
File:                     2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json)
Hash identifier:          vIdQlINN8PhdaG5d6EMN0juCHluxMwHcLlkLMFqBJZU=
Subject key identifier:   2E:8F:CE:C7:CF:AF:E8:F8:7E:6E:C3:85:85:7D:B7:DF:E2:A5:A1:EB
Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE
Certificate issuer:       /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
Certificate serial:       0405
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
Manifest number:          0400
Signing time:             Fri 12 Dec 2025 23:33:36 +0000
Manifest this update:     Fri 12 Dec 2025 23:33:36 +0000
Manifest next update:     Fri 19 Dec 2025 23:33:36 +0000
Files and hashes:         1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: SkCgsPo0i2zWlxJW/Rs98/LSjZf4SewrfW5jo/Q4KhE=)
                          2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: 9cJ1X9p3KnoCJj9I/bBoQDkUW3YOKoAh40o4a5fDcJ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl
                          rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 23:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029 (0x405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
        Validity
            Not Before: Dec 12 23:33:36 2025 GMT
            Not After : Dec 19 23:33:36 2025 GMT
        Subject: CN=693ca650-7ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:e3:41:23:c3:70:12:2f:19:36:8a:ea:60:
                    7f:18:be:69:d6:2c:03:ff:ad:aa:39:5c:b0:bc:e3:
                    5d:4b:cb:ee:73:5d:c7:0a:5e:d6:59:9c:b8:ba:c5:
                    7d:6c:9f:d5:ff:ea:87:4e:80:da:f9:fd:2d:5a:31:
                    68:e9:7b:f6:48:e1:90:77:32:8c:ff:39:3d:74:b8:
                    ec:7b:6d:2e:3d:67:b3:05:62:b9:ce:b3:d0:71:3d:
                    ed:16:72:26:ee:3a:d4:bc:77:13:e7:3a:bb:0f:c1:
                    4d:ba:25:24:3c:11:5f:e6:32:27:76:e6:89:8a:87:
                    1a:84:ec:9e:2e:4c:92:da:0c:6b:b2:f2:4d:42:fa:
                    25:a8:7d:f6:f5:30:b2:a4:26:83:55:75:34:5f:af:
                    01:8b:54:6c:69:c9:6d:9a:e8:68:18:27:12:aa:dd:
                    2c:e7:98:57:24:db:4c:a2:0d:67:80:a4:d5:48:15:
                    45:17:b5:b2:e4:13:97:ab:55:87:fa:8d:68:e2:68:
                    55:70:a1:89:db:1f:72:3c:cc:54:b3:db:6f:8b:b5:
                    af:bd:2b:a0:08:8d:8b:dc:4e:5a:79:e1:33:c1:35:
                    28:ae:5b:10:44:b6:ef:06:50:63:b7:dd:75:b9:ad:
                    c8:0b:d1:44:4a:55:cb:93:e4:2c:be:d9:1f:f9:d4:
                    0e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8F:CE:C7:CF:AF:E8:F8:7E:6E:C3:85:85:7D:B7:DF:E2:A5:A1:EB
            X509v3 Authority Key Identifier:
                keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:04:0a:ad:73:0a:00:e6:de:d8:59:48:d3:c6:78:7e:9b:c2:
         0b:bb:0d:dc:1f:60:a3:08:c8:09:c5:49:6b:4b:6f:e0:2d:63:
         e8:8f:7e:c0:f7:63:5e:5a:2d:4f:85:c1:ce:f3:18:1e:af:26:
         d2:1b:9e:96:24:0b:00:d1:ba:ad:2a:8c:3d:e0:0a:a0:d6:16:
         4a:a2:f5:4f:eb:c2:b5:4c:fd:e7:30:d7:34:15:1c:e5:ae:0b:
         6d:c5:32:19:40:f2:53:4d:86:34:83:5a:2b:59:6d:7f:b5:c0:
         d1:2e:4b:31:84:3a:dc:fd:14:f0:8c:bd:e2:80:e9:2a:cb:57:
         29:47:fc:6e:9d:ef:fb:f1:0f:6a:61:8f:38:f3:3c:07:e2:ef:
         0d:86:61:83:8d:44:93:88:2e:ed:6f:a4:9a:ae:bf:57:f1:c6:
         73:5d:c6:85:21:75:4b:c7:76:73:91:7a:9c:cd:88:5d:fe:bf:
         5f:dc:59:b6:30:1c:80:ff:65:e8:c9:6c:f6:3e:83:f0:d8:bc:
         33:8c:6f:ef:87:b5:57:96:98:09:73:21:d7:05:48:b6:67:ef:
         60:63:6b:59:c6:70:33:5b:a2:cb:0e:35:66:2d:45:70:4d:f9:
         ad:33:ef:71:90:fa:95:e4:5f:b6:c7:11:21:e1:d4:c1:f1:26:
         b4:f9:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:57:56 2025 by rpki-client