This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
File:                     rMARlDOHfwx0KFe46lIPjaTtCVo.mft (raw, json)
Hash identifier:          Z6lGBBK8mLv26/SK5HIqfIicJDUwjOb30I7nULQmhZE=
Subject key identifier:   64:80:85:A2:B6:4D:C1:D2:60:1B:E4:FB:29:A4:D5:D7:F3:5D:78:5B
Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
Certificate issuer:       /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Certificate serial:       06C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
Manifest number:          06B7
Signing time:             Mon 22 Dec 2025 21:29:32 +0000
Manifest this update:     Mon 22 Dec 2025 21:29:32 +0000
Manifest next update:     Mon 29 Dec 2025 21:29:32 +0000
Files and hashes:         1: rMARlDOHfwx0KFe46lIPjaTtCVo.crl (hash: ZOHgBiniQMALwQ7PdFXKpMxWysJRo8fugDBpxiJX8/g=)
                          2: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (hash: 6Nwx6Bdy1j4/Wbla1onGos1GwfTZf0C7yW2rjUd5bAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
                          rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1728 (0x6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A5E7, serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
        Validity
            Not Before: Dec 22 21:29:32 2025 GMT
            Not After : Dec 29 21:29:32 2025 GMT
        Subject: CN=6949b83c-dbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:dd:07:7f:ef:f8:4d:b6:15:d4:4e:8e:fe:
                    f7:dc:8e:2b:e7:60:f7:cc:b3:b4:28:fa:a3:3f:66:
                    6a:bb:f1:61:91:ef:30:c4:be:ec:81:14:55:b2:24:
                    6c:fe:75:12:51:9d:a7:6f:8a:2d:1a:dc:0e:06:78:
                    59:30:d6:48:21:97:f6:bd:ef:2e:96:54:a7:a1:00:
                    2f:5c:54:5e:cf:ba:30:f2:bd:65:1d:62:0d:5d:72:
                    b1:7d:e9:05:aa:0d:f2:dd:12:18:4d:43:65:63:af:
                    33:f5:10:a9:d7:46:c5:f2:32:20:23:97:cc:e9:66:
                    40:14:fd:a0:77:e5:e6:48:ab:e7:16:43:71:eb:a8:
                    60:de:e7:ef:23:29:57:bc:77:ed:bb:e8:60:bb:13:
                    7d:fd:52:16:69:21:d0:6a:5f:f0:ee:3a:59:68:6b:
                    dd:24:01:27:cd:cc:50:98:0b:04:29:d3:17:bd:9b:
                    81:ce:34:92:43:d4:84:3a:31:6f:1e:ec:96:0c:58:
                    c5:96:07:fd:83:d3:09:0d:ff:d3:60:0f:76:2c:04:
                    0f:10:ce:18:7c:9c:b0:5d:d1:f2:27:18:4e:90:49:
                    be:02:53:d0:17:3a:92:fe:e1:b9:25:5f:70:82:81:
                    c0:a1:bf:e7:17:f7:2b:30:0a:fe:f2:aa:df:60:0f:
                    51:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:80:85:A2:B6:4D:C1:D2:60:1B:E4:FB:29:A4:D5:D7:F3:5D:78:5B
            X509v3 Authority Key Identifier:
                keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9c:28:e4:67:84:6f:fa:a6:c5:36:81:ac:f7:c3:51:cc:de:
         2e:5a:45:bd:cf:29:a3:e5:94:a4:c3:05:73:39:43:c6:8b:c8:
         ec:2d:3d:2e:a9:1f:31:20:61:02:f6:63:19:70:d1:13:a1:95:
         24:cf:77:39:a2:3a:9c:6e:77:0b:b0:76:41:67:88:8c:e0:9c:
         9a:61:2d:d1:26:b2:fa:6e:f6:00:48:42:85:57:f6:cb:62:b3:
         d3:dc:6f:43:21:db:4b:fd:21:a0:f2:a6:8f:d1:4f:87:50:b3:
         cc:92:81:2e:aa:df:45:4a:a0:af:da:38:1c:f7:19:3f:07:2c:
         a3:88:3b:3c:04:dd:92:d4:16:4b:67:81:1b:3a:fe:c0:36:c9:
         20:40:0c:7e:f2:cb:01:34:7a:2e:09:83:e6:17:85:14:ac:1b:
         f6:fc:6c:26:31:c7:b1:6a:17:b5:68:bd:81:5e:d1:58:17:d7:
         af:96:c7:13:1c:c2:d8:30:33:1e:94:03:9a:9b:f6:a2:b5:db:
         ab:8c:51:7c:ec:e5:20:10:78:b1:e1:14:f3:7d:c0:2c:e2:98:
         92:f4:d7:6d:11:8b:c5:c6:08:25:ae:69:bc:8b:9e:ff:f2:26:
         0c:e2:bd:3d:db:45:03:ff:3a:cd:75:3c:99:d8:09:b6:33:c8:
         84:c0:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:30:34 2025 by rpki-client