This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
File:                     q6uaWObZNbfys4ayc-NP3Dhg0pk.mft (raw, json)
Hash identifier:          hDaqNZroHyI8/Mpe6sjCA94a4R++bVf0q0rnz4lzrrI=
Subject key identifier:   C4:EC:0C:65:AE:6E:A4:94:74:B0:54:B4:E3:92:B1:14:20:F6:7A:03
Authority key identifier: AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99
Certificate issuer:       /CN=A915802F/serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
Manifest number:          023F
Signing time:             Tue 23 Dec 2025 00:53:48 +0000
Manifest this update:     Tue 23 Dec 2025 00:53:48 +0000
Manifest next update:     Tue 30 Dec 2025 00:53:48 +0000
Files and hashes:         1: q6uaWObZNbfys4ayc-NP3Dhg0pk.crl (hash: e/zBXRZJ7zLh/0crcIih+f5Eu1/NpLXaZkWvHHIamrg=)
                          2: 0CDB293E6E3F11ED9DF20483C4F9AE02.roa (hash: d+wu5/8SQF07OZNomUNLLvrSwSOmchI/wXzBDk7VXfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl
                          rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915802F, serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299
        Validity
            Not Before: Dec 23 00:53:48 2025 GMT
            Not After : Dec 30 00:53:48 2025 GMT
        Subject: CN=6949e81c-b755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:ec:82:28:73:29:12:04:0c:cb:1d:a0:0e:
                    94:08:a2:82:67:23:89:24:59:72:42:c9:ff:94:c2:
                    27:a4:ac:b0:3a:0e:04:40:93:8e:e1:79:49:37:1b:
                    0e:69:58:1d:93:7e:f9:f1:6b:00:7f:37:62:1d:43:
                    20:37:08:7a:82:4b:c1:88:c1:9c:f0:2c:3d:30:91:
                    b7:03:9e:13:2c:34:1a:6d:2a:0a:4c:61:f6:e5:40:
                    2b:ac:8f:18:50:e5:2d:84:5c:a6:4d:4e:3c:62:55:
                    c5:b3:ac:ce:76:f2:42:a8:ad:98:0b:e1:b7:eb:de:
                    92:ee:2d:b3:1f:19:82:7b:e7:c2:7c:35:a6:bf:58:
                    db:1e:a3:67:29:27:9e:c8:97:12:95:91:99:71:e9:
                    d0:22:9e:dd:dc:4a:6b:6a:c0:36:1e:64:4d:58:19:
                    40:58:d1:9c:9e:3b:5f:24:d7:61:74:3d:b7:90:c1:
                    8a:0d:17:cc:a9:6e:de:19:f4:81:55:b5:c8:e6:bf:
                    81:77:56:6a:d7:ee:a6:97:01:b7:81:db:5e:d3:09:
                    39:5c:aa:a1:c1:29:92:ef:56:cf:06:ce:ac:ff:c3:
                    71:40:1b:f9:a9:e0:12:ad:b1:02:27:54:4c:35:49:
                    55:c1:dd:9c:fe:de:e0:94:7d:e9:fa:39:3c:9c:03:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EC:0C:65:AE:6E:A4:94:74:B0:54:B4:E3:92:B1:14:20:F6:7A:03
            X509v3 Authority Key Identifier:
                keyid:AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:08:72:fa:9e:e8:cf:0c:be:5d:4a:b4:41:a9:41:37:63:73:
         c4:48:d6:45:05:6b:47:a8:8d:60:a4:f9:61:77:9c:6a:df:5f:
         09:70:14:d8:29:85:3a:d2:83:df:88:bc:a2:4b:9c:49:93:22:
         d3:af:36:e5:b8:b8:9b:5f:59:d6:14:bd:de:83:20:1c:02:7b:
         94:16:01:e7:d4:7c:2b:49:73:d8:0c:93:bf:4a:64:d8:72:4d:
         58:bc:a9:19:ce:84:9a:6e:47:e4:64:9c:d1:a5:29:3f:63:12:
         fd:8b:4a:56:c2:cd:07:bd:18:ec:b3:a6:4b:cf:1f:db:72:05:
         b8:23:a9:de:0b:7d:c3:66:30:f6:09:6e:ca:b6:1f:b1:0a:06:
         08:65:18:fa:36:90:12:19:b9:6a:21:2a:ab:03:af:3c:4f:3d:
         57:66:a9:59:9a:67:d9:62:d2:84:83:85:cd:bb:1f:fe:06:2f:
         5f:b1:81:bb:21:89:e6:0d:ef:c8:b2:1e:09:2c:64:d6:ca:7e:
         03:48:a8:f5:67:75:ef:b5:b0:3c:a4:07:b8:f1:29:ea:7a:87:
         ed:cf:4c:fe:f7:a3:d5:9a:45:0a:ad:48:ac:d3:aa:8a:e6:35:
         93:b6:ef:7c:a0:74:c6:84:e3:3f:e9:22:f8:99:52:43:d3:82:
         d9:83:c6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:32:46 2025 by rpki-client