This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File:                     aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier:          j0IsDr0e1twhy2PIWPYiCpd3SCyWL/s33gSFI6XqfaM=
Subject key identifier:   9E:9A:FD:13:4A:88:4D:01:18:CE:F6:9E:7C:29:F0:71:93:9A:EC:11
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer:       /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial:       351B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number:          34FC
Signing time:             Mon 22 Dec 2025 15:10:14 +0000
Manifest this update:     Mon 22 Dec 2025 15:10:14 +0000
Manifest next update:     Mon 29 Dec 2025 15:10:14 +0000
Files and hashes:         1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: Ecoc/bZdPwHF8B7YU47yn2NKprzD6dLm20zyuPaU1E8=)
                          2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: lhbAPGcQQjVfLeBPPvSfLGakAoAsie+moEAIzx57Z0Y=)
                          3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: 1AXC4CdSqCeZreg7Kdx8zTNNLCij2RY2Acpk7gs3UmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
                          rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 15:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13595 (0x351b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
        Validity
            Not Before: Dec 22 15:10:14 2025 GMT
            Not After : Dec 29 15:10:14 2025 GMT
        Subject: CN=69495f56-0fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f3:d0:e6:0d:80:5d:3a:b4:25:0d:e4:13:70:
                    42:ed:cc:dd:1e:eb:07:a6:bd:b9:8d:12:1b:7c:b4:
                    2b:c0:8c:94:05:71:d7:d3:2e:2d:0a:93:73:b6:cb:
                    dc:8c:cf:b4:fb:fa:93:d5:fb:0f:2a:91:be:10:e0:
                    00:fa:b1:95:8f:7a:ee:ec:14:9a:97:47:5e:f3:5e:
                    af:68:88:b8:63:42:a7:e1:1f:4f:ae:6e:73:da:00:
                    84:ec:c2:2e:95:a0:2d:e1:11:e6:bd:5d:fa:36:d8:
                    00:e0:22:e2:bb:b6:4f:36:c7:85:3b:c4:18:dd:97:
                    f7:c6:f4:d9:86:20:20:ab:63:17:1f:d1:50:1c:31:
                    ed:67:11:77:88:e2:14:51:9e:c4:f1:69:aa:86:0f:
                    67:62:6b:2f:5a:19:76:11:59:7c:46:53:14:10:eb:
                    5c:0c:af:b6:fc:3e:b9:d4:2e:27:30:6d:cc:48:d1:
                    d3:b1:86:d9:89:bc:0d:89:65:c2:e4:f9:ed:3c:5f:
                    ed:f4:90:67:30:a7:23:07:b6:6c:b0:cc:11:43:a9:
                    32:6b:33:71:13:49:42:8c:dc:7c:a9:7a:57:e3:9d:
                    f2:4f:65:06:43:a6:31:7a:2f:1d:46:ce:93:83:e1:
                    18:da:c0:62:0d:81:bb:ca:0b:dc:25:53:72:99:70:
                    ec:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9A:FD:13:4A:88:4D:01:18:CE:F6:9E:7C:29:F0:71:93:9A:EC:11
            X509v3 Authority Key Identifier:
                keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:60:8a:04:91:9c:11:4d:66:b9:2c:e6:e7:d8:97:4e:3e:ba:
         0e:6e:e8:41:b7:2e:a7:e2:2a:d3:2e:45:31:4e:f5:56:ba:00:
         55:53:1e:df:6d:32:a1:a3:96:e2:f2:68:17:aa:41:d1:cd:51:
         15:f4:d8:fa:2d:3f:7d:a6:b4:21:fe:d6:65:9c:5a:eb:94:65:
         26:42:9d:6f:b7:e5:d1:49:21:35:30:dd:cb:38:76:48:d9:5e:
         af:c3:c2:4d:4b:26:02:47:37:97:f3:29:3d:af:a9:2a:75:a3:
         48:38:a5:64:a8:a3:10:ff:23:53:25:a6:f3:3f:3e:74:f5:35:
         c8:98:b8:1c:db:0d:84:c9:ab:a0:d1:86:83:82:f3:4e:58:c5:
         f7:9a:a7:b2:41:f8:00:3b:77:cc:90:3c:71:ba:5d:fe:17:b6:
         b2:72:83:a4:c5:3d:1c:8e:e3:e5:6a:28:4d:75:d2:93:8f:5f:
         f7:39:7f:35:a2:ab:ee:12:3a:9c:b0:98:16:a4:8b:d6:8f:6f:
         52:bf:f1:22:92:71:3c:24:18:24:64:7d:96:9b:bb:64:6a:3e:
         af:cc:4c:9c:37:96:c3:0f:a0:7a:e7:6b:cb:11:5d:2a:20:11:
         9f:12:74:d5:9b:0b:31:28:39:18:8a:07:5f:79:de:40:72:e9:
         ea:c4:39:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:21 2025 by rpki-client