This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
File:                     M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json)
Hash identifier:          lrWZXkY2mFwpHKejbbu3+3EKb70tpLOJc10D5EDFztE=
Subject key identifier:   FB:82:06:BE:10:A7:BE:6F:B0:04:65:5E:6A:15:B3:2D:1D:84:D2:5E
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Certificate issuer:       /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial:       047C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
Manifest number:          0464
Signing time:             Mon 22 Dec 2025 23:15:08 +0000
Manifest this update:     Mon 22 Dec 2025 23:15:08 +0000
Manifest next update:     Mon 29 Dec 2025 23:15:08 +0000
Files and hashes:         1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: QU9R0LLyZ8pSXzj7KDxu28UJpVsweHPe8ubuiKBdOTM=)
                          2: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: YqwmzbTbjnpJlQJ9+wOnubrOXT3PgUZiurP57f5+HVQ=)
                          3: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: zLlFP29fbev002DflF+TA3Qjdh6cZ72DZUDF3K/hrT8=)
                          4: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M67wvRNu5yJc0PmvdrXe9QBiktT/1OOEAW8u7AyC62Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
                          rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148 (0x47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
        Validity
            Not Before: Dec 22 23:15:08 2025 GMT
            Not After : Dec 29 23:15:08 2025 GMT
        Subject: CN=6949d0fc-3f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:45:f0:1a:20:ea:4a:ba:62:25:e9:1b:24:67:
                    3a:b9:8b:cf:d9:43:df:e7:25:b7:56:27:bb:5b:6c:
                    99:da:9f:83:af:0b:55:7f:6a:79:48:1e:2f:73:59:
                    ce:79:69:37:d5:48:38:23:74:7a:ac:ea:11:61:9e:
                    b6:9e:79:41:e0:88:f2:e7:85:f5:aa:93:87:fc:35:
                    d7:0d:9b:47:12:ef:aa:26:31:bc:db:22:05:b2:72:
                    dd:d4:d1:1e:0c:28:fe:2f:18:a0:78:58:b8:fa:36:
                    d2:90:29:53:fe:3f:01:85:f8:b7:83:cd:2a:2f:7a:
                    51:e9:31:bb:c3:dd:dd:39:15:79:7b:b6:0f:3c:4e:
                    a2:eb:86:c7:83:c4:24:60:e2:f4:4c:30:ef:49:9c:
                    8d:32:b1:ae:2a:ca:14:0a:59:3f:70:87:f6:b0:84:
                    a3:ee:b4:27:cb:d8:01:2d:0f:8f:f2:d7:eb:e4:74:
                    5b:c7:aa:3e:5a:84:67:c3:5f:d1:f4:c0:eb:50:c6:
                    10:f9:69:0c:b5:e6:03:1f:75:26:3b:e4:9a:40:2d:
                    b0:3e:09:4c:15:51:31:99:20:bc:01:03:87:44:76:
                    2b:00:d4:ab:b8:23:64:a6:14:1c:10:dc:0a:6d:36:
                    2e:45:ec:0d:28:f7:2c:2d:36:ff:cc:bb:9b:cf:5a:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:82:06:BE:10:A7:BE:6F:B0:04:65:5E:6A:15:B3:2D:1D:84:D2:5E
            X509v3 Authority Key Identifier:
                keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:25:ee:f5:5e:f1:c8:09:f1:af:7f:74:fe:9d:0a:23:fe:c1:
         4c:be:ef:b0:40:b8:da:10:30:8c:e2:88:c8:db:59:88:56:c5:
         2b:96:32:b4:3f:59:3a:9f:85:71:4e:a4:88:03:b8:2e:ae:1b:
         7a:70:56:72:0b:5a:7f:f6:11:5b:3b:ca:64:71:65:9e:e4:b4:
         ab:a9:35:34:cd:cd:03:f6:b6:3d:b9:c3:e8:29:c1:35:82:3a:
         c1:c3:aa:17:b0:e1:9b:61:cc:97:02:f2:c0:03:d8:86:ca:db:
         a2:34:70:25:ae:93:59:fc:dc:f5:60:bc:2e:26:a7:ca:53:55:
         e7:9f:c3:93:ef:b5:cc:5c:e9:6f:9f:db:61:fe:bd:29:1e:09:
         11:24:75:fe:e0:7e:62:2e:c5:18:fd:f9:4b:6b:03:24:e4:73:
         df:06:db:3d:a7:80:94:5a:15:5b:b5:ee:c1:a2:3c:9b:ab:88:
         5d:22:bf:17:89:4e:f8:be:67:36:1d:ad:ca:3a:58:b5:f6:40:
         65:3e:e7:8c:27:a9:47:d2:28:dc:e5:75:4f:e7:ae:c9:f6:75:
         12:a4:bf:f8:2d:8e:77:07:cf:d1:d6:e2:d3:45:8d:cb:e5:74:
         87:5a:3c:cd:2f:47:a9:24:a4:46:04:ae:4c:82:f5:4f:12:0c:
         d3:ba:4f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:59:58 2025 by rpki-client