This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
File:                     t_uD0cnC98OLcAJxRkrCM2Ti59c.mft (raw, json)
Hash identifier:          cqRO+iico7pgCZ7n1v5LcF9OUG4DO7VsB9qwxISFfXc=
Subject key identifier:   89:04:05:23:2B:13:1E:30:44:C2:A8:2B:22:6A:17:B8:30:CD:49:5D
Authority key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
Certificate issuer:       /CN=A915E38A/serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
Manifest number:          10
Signing time:             Wed 03 Dec 2025 06:08:37 +0000
Manifest this update:     Wed 03 Dec 2025 06:08:36 +0000
Manifest next update:     Wed 10 Dec 2025 06:08:36 +0000
Files and hashes:         1: t_uD0cnC98OLcAJxRkrCM2Ti59c.crl (hash: c4LwhXLSz9//WRrYUiXOCNs1fwNrM31dK4PYVaB72BM=)
                          2: 4AD34C1AC05A11F0B864644DC4F9AE02.roa (hash: hF8DeZYpmqlhlmu2g+0RpyAdwYJmeUUmrRx6H3p2TpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
                          rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
        Validity
            Not Before: Dec  3 06:08:36 2025 GMT
            Not After : Dec 10 06:08:36 2025 GMT
        Subject: CN=692fd3e5-e73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:20:1e:bf:d1:92:93:7f:8c:2a:2f:4d:f8:5a:
                    45:a3:ec:a1:fb:9e:45:29:43:70:3e:26:fa:ba:78:
                    b5:d4:47:cb:7e:cc:63:c3:f9:e3:da:33:89:43:c3:
                    05:5c:fd:9c:0c:8f:25:78:99:c5:2e:5d:fc:35:6c:
                    17:e4:22:f3:d0:ff:4b:9f:ef:f6:55:12:e4:48:79:
                    5d:22:e0:1d:e6:df:35:cc:c7:fc:15:51:05:aa:b0:
                    15:17:f1:9d:7e:22:57:a2:b8:5a:83:85:87:d5:09:
                    99:91:47:ed:22:69:1a:e3:7e:6f:50:e7:2e:9b:67:
                    45:2d:91:7c:b5:3a:3f:8b:25:32:71:a7:7d:0f:26:
                    b7:12:dd:4d:e3:89:4c:09:11:99:8d:37:d2:1d:7c:
                    a0:eb:14:44:53:1d:9e:cf:92:f1:ba:fd:5f:cd:f9:
                    3d:47:a4:64:ba:ce:93:96:19:06:a4:7d:f5:3b:c2:
                    62:68:d6:fc:86:e7:a3:21:14:51:43:a5:82:9e:e4:
                    f1:94:b9:98:57:fe:ee:ee:b4:a9:15:12:bb:b4:52:
                    c4:64:14:c4:18:ab:6c:b3:15:7d:55:b6:72:7c:be:
                    02:0e:23:b0:5f:04:63:3b:21:04:94:ed:dd:b3:90:
                    00:42:cf:1d:f6:0c:78:15:14:7f:ff:bb:ec:38:a7:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:04:05:23:2B:13:1E:30:44:C2:A8:2B:22:6A:17:B8:30:CD:49:5D
            X509v3 Authority Key Identifier:
                keyid:B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:dc:63:0b:f2:89:55:99:23:5b:3d:cf:7d:32:e3:eb:c7:57:
         bd:2e:17:6f:cb:9a:4e:4c:d2:47:5f:86:a1:7f:4f:54:13:6e:
         1a:59:33:e1:c5:10:49:53:fb:e9:6e:01:31:ce:b8:d0:d9:22:
         c1:da:d2:99:bb:6e:79:8f:ff:e1:cf:e0:03:52:27:d1:6a:c7:
         31:fc:26:12:2d:84:1d:56:09:61:e0:6c:0b:80:2e:4c:19:71:
         ea:19:b7:bd:d9:72:c0:73:69:ee:3a:56:b0:09:68:ae:bf:c5:
         3a:15:fc:9d:d6:28:2d:7d:3a:9f:f9:78:ff:5d:cd:51:d5:2f:
         56:75:e7:7b:56:85:9a:b3:e6:6f:39:df:92:e5:86:27:b4:ac:
         df:75:e4:ed:b5:82:e8:16:fa:71:6b:cb:94:34:ef:66:18:c8:
         a5:82:f4:16:15:21:7e:cc:18:81:8d:36:db:12:12:06:62:91:
         1c:22:ff:c6:91:17:8f:68:0d:e1:db:95:a0:ee:b7:17:17:1e:
         81:6a:f5:3b:0b:f7:96:b2:52:05:8c:35:07:6b:b1:31:cc:6a:
         34:ae:39:2f:53:3f:a7:02:c3:95:0e:9f:0c:c9:e3:45:ae:0a:
         cc:38:52:b0:c8:50:45:e4:4a:44:25:65:dc:a9:b2:46:0b:a9:
         d1:c5:bc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:05:13 2025 by rpki-client