This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
File:                     t88LJwp_2x1xeui5edHuD_iL1E8.mft (raw, json)
Hash identifier:          N81FGBSEN+rIhRkZ/wnwtBaWFYiJt80Dc5m6vopvDw8=
Subject key identifier:   34:30:0C:87:C4:E3:67:0B:DE:99:26:65:3A:48:83:EA:90:08:0C:80
Authority key identifier: B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
Certificate issuer:       /CN=A915B50D/serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
Manifest number:          EF
Signing time:             Thu 25 Dec 2025 04:24:45 +0000
Manifest this update:     Thu 25 Dec 2025 04:24:44 +0000
Manifest next update:     Thu 01 Jan 2026 04:24:44 +0000
Files and hashes:         1: t88LJwp_2x1xeui5edHuD_iL1E8.crl (hash: 2YyxRAcrfDo2IJpAy+8dDXQpNp9IkQ/VuaoeS0WBtbE=)
                          2: 85CDB6087C1211EF8E490677C4F9AE02.roa (hash: dg3/bJiVaiz5v44anOkDfbtlZGRX3EFlzFQApjSj5Nw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl
                          rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B50D, serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
        Validity
            Not Before: Dec 25 04:24:44 2025 GMT
            Not After : Jan  1 04:24:44 2026 GMT
        Subject: CN=694cbc8d-3be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:33:fa:32:47:27:bb:81:bf:7d:2e:5e:80:
                    58:15:54:d1:c7:e3:73:88:f6:d5:8f:60:99:54:0d:
                    1f:3c:c1:4f:72:40:f9:1f:a4:15:d0:70:5d:37:d6:
                    d8:a4:01:6e:26:7e:97:9e:9a:ed:02:09:df:de:90:
                    9c:71:36:79:a5:df:e7:01:e7:a2:9e:f2:0d:56:57:
                    e2:ab:ff:9d:6d:55:c5:e3:9c:38:bd:27:63:2e:08:
                    a6:27:d3:b7:08:4e:f4:7b:66:92:47:35:a1:0c:8f:
                    a5:74:00:40:37:a3:c7:e8:db:a8:dc:82:71:a2:b1:
                    b6:6a:23:93:7d:c4:40:38:37:a3:26:f9:56:73:e4:
                    52:e3:ec:69:a4:6b:5e:b0:28:e6:38:16:37:ec:02:
                    25:7c:c9:90:91:79:33:58:42:1d:bd:d4:7b:73:dc:
                    45:55:ad:5d:f7:90:2b:cd:5f:87:3d:ab:7e:26:82:
                    ae:61:be:24:60:3e:91:83:8a:11:d5:73:f0:76:e8:
                    97:0d:18:ae:d9:51:cd:76:98:e1:56:be:e0:23:ce:
                    ea:f3:76:f3:14:b7:38:71:46:3d:bc:ad:44:ea:18:
                    86:87:ef:05:ba:98:61:2f:32:82:b0:5c:8d:3b:c7:
                    30:03:8d:0d:11:b7:6f:e9:d7:df:cd:4e:9c:d6:52:
                    85:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:30:0C:87:C4:E3:67:0B:DE:99:26:65:3A:48:83:EA:90:08:0C:80
            X509v3 Authority Key Identifier:
                keyid:B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:76:35:77:ac:75:2d:ea:bd:7f:7f:bb:5f:90:e8:3c:60:45:
         ed:2e:ef:ec:d0:5d:a1:4a:c7:67:85:7d:4c:fa:41:d3:42:2f:
         fe:b9:a6:ef:21:ec:0f:87:33:b7:90:ca:8a:8c:a9:5d:02:f0:
         96:ec:f1:a0:c9:50:6e:fa:da:05:8b:23:38:9f:4e:70:85:15:
         df:d6:37:6c:e7:13:26:51:53:8d:b5:ef:23:aa:1b:93:21:60:
         25:62:82:d9:3e:a2:e7:8e:ad:fd:6e:d2:26:26:1e:e3:0a:4e:
         88:b0:45:c2:d0:0f:56:dd:d0:56:ed:4a:76:be:14:5d:57:96:
         38:18:35:6a:cf:f0:1a:6b:71:a6:fd:17:ac:c8:c1:6b:ed:9f:
         de:9c:95:5c:89:cf:85:ac:7f:0d:20:32:c0:20:49:a8:70:aa:
         60:31:c5:90:e3:84:72:26:33:02:d1:61:5a:69:5d:c6:c9:b2:
         51:43:2e:90:57:a9:79:40:8a:03:65:94:e1:15:36:52:09:f1:
         5a:d6:d9:ef:cc:a9:c0:81:30:b2:71:39:d5:36:c0:c5:54:b0:
         8b:56:c1:48:4f:c6:fa:16:74:81:75:47:a8:13:08:e1:d8:11:
         27:14:2f:2e:ed:79:cf:8e:27:89:79:f9:d7:88:42:bf:e8:03:
         42:99:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 05:31:27 2025 by rpki-client