This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
File:                     d6E036eiOU7SRHU58T_kqNHgVsk.mft (raw, json)
Hash identifier:          q25SrHER+35EhOna0xsJY+ApwXzJLTLdePh0p2CSrfQ=
Subject key identifier:   49:14:66:53:33:DB:D2:2B:D7:B7:3D:2F:A0:AD:DE:A9:20:BF:83:82
Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9
Certificate issuer:       /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
Certificate serial:       0ABF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
Manifest number:          0AB9
Signing time:             Mon 22 Dec 2025 18:56:06 +0000
Manifest this update:     Mon 22 Dec 2025 18:56:05 +0000
Manifest next update:     Mon 29 Dec 2025 18:56:05 +0000
Files and hashes:         1: d6E036eiOU7SRHU58T_kqNHgVsk.crl (hash: l7UKzU3CW5tHh5r19pEqZYKPAmum2eehY4ga//wfdiU=)
                          2: 4B2AAC20660211EA83A76342C4F9AE02.roa (hash: VubdDr6jpnctpYE2M5QsaGv87QGAE8y0LNTwoL81fa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl
                          rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2751 (0xabf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A821, serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
        Validity
            Not Before: Dec 22 18:56:05 2025 GMT
            Not After : Dec 29 18:56:05 2025 GMT
        Subject: CN=69499445-70cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:26:a8:c7:94:fb:2b:32:d0:71:e6:26:e8:
                    6e:25:3e:8d:87:2f:d0:7d:68:0b:7d:e2:a1:f8:ab:
                    e1:cc:a9:4d:d5:b1:ef:8c:bb:96:cd:a3:aa:62:f2:
                    e6:34:c6:6b:f9:1a:03:96:39:2b:6a:e3:fd:a6:47:
                    0e:ce:bc:62:b1:d7:53:3e:cb:10:b9:1e:18:6e:3b:
                    91:32:6b:73:6f:f8:9c:a8:b8:3b:0d:01:e3:50:ea:
                    21:42:a1:57:e5:a2:62:0c:c2:49:ca:58:ac:76:38:
                    58:e3:77:19:59:09:e7:78:5d:d2:13:3b:17:cb:57:
                    d6:69:5c:62:88:71:b1:4b:0b:a4:ee:71:a6:8e:9e:
                    ac:96:a5:f5:01:16:fc:a3:0a:67:df:a1:43:ae:8a:
                    1d:76:3e:fc:e6:d6:89:55:17:08:3c:10:1d:16:00:
                    6b:ea:db:64:27:df:07:bd:bf:7d:81:b6:57:a3:79:
                    39:a3:41:9f:c7:eb:0a:e0:1b:79:ee:68:af:a6:29:
                    b3:9b:86:85:0d:d9:89:5a:5d:a0:13:92:77:d9:14:
                    50:ce:63:40:46:31:0a:5d:0a:fa:b9:64:b8:68:89:
                    c5:50:d2:f5:32:d3:0e:27:ac:ff:f7:da:8a:5b:8f:
                    df:1e:10:0c:18:c6:a8:0d:31:f6:dd:c1:0e:5b:9e:
                    58:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:14:66:53:33:DB:D2:2B:D7:B7:3D:2F:A0:AD:DE:A9:20:BF:83:82
            X509v3 Authority Key Identifier:
                keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:95:0f:43:ba:a9:51:28:cf:36:88:eb:61:13:4d:40:06:4d:
         08:5f:23:82:d2:2e:1e:cc:16:34:f3:81:7e:aa:dd:8e:c9:9b:
         2e:6d:1c:48:65:79:6f:87:1f:4f:9c:47:bf:13:9a:a7:59:91:
         e9:e5:9b:b3:9d:36:91:12:07:4c:24:e7:fa:ae:8a:73:54:e7:
         36:6d:91:c6:e7:14:10:e8:6e:ed:17:a7:e4:a5:9d:99:90:d8:
         bc:fb:a6:7f:cb:d4:a3:4d:a0:ed:4c:a1:af:ab:02:54:aa:b2:
         00:6b:d5:49:ca:a6:0e:a7:1f:93:ff:48:23:a3:dc:59:18:fd:
         e7:21:b4:15:54:1b:56:e6:f8:eb:68:ca:26:b0:ea:4a:68:e2:
         76:cf:1e:a2:e4:c1:07:3d:15:34:3a:1b:84:e5:7c:b0:50:ef:
         a6:fd:c3:3c:bf:34:68:f5:c2:3a:0e:6c:12:e9:f8:a5:8b:0c:
         50:c2:c4:91:56:3a:ec:07:ef:c8:c8:99:2a:d6:3d:ee:32:2e:
         9c:f2:b1:fa:93:59:9e:c7:78:f7:5c:63:9d:53:ae:23:6b:f7:
         b9:55:11:6a:44:88:39:86:02:c8:5a:a5:b1:76:5f:ad:18:a3:
         a9:cb:62:95:f2:41:f0:c5:b4:6e:de:c5:b8:44:9b:28:40:5b:
         1b:dc:03:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:34 2025 by rpki-client