This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
File:                     pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json)
Hash identifier:          ynr65EXgYIQHddeoXq7GgfyZMGuf7rohFCBSE920Kdo=
Subject key identifier:   E1:73:39:8B:81:C4:32:6B:75:56:1D:21:B1:99:36:F0:EC:30:85:1D
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Certificate issuer:       /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
Manifest number:          01BC
Signing time:             Tue 23 Dec 2025 02:07:34 +0000
Manifest this update:     Tue 23 Dec 2025 02:07:33 +0000
Manifest next update:     Tue 30 Dec 2025 02:07:33 +0000
Files and hashes:         1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: /hq/WcoWgMu2wMeI4lbi2c4rbZ5Pb0doIAcGOj8+QQg=)
                          2: BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (hash: 2j8iHRJYXJmCGizWbVLt4sqtXFvaUv3FR/z4mF6gpbA=)
                          3: 966CB516179B11F080B9434CC4F9AE02.roa (hash: kuUZFxBY6WLWD5ahHlBCDWPPvTA6XXIjOYW0/VKo7rM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
                          rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
        Validity
            Not Before: Dec 23 02:07:33 2025 GMT
            Not After : Dec 30 02:07:33 2025 GMT
        Subject: CN=6949f966-b91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ed:f0:9b:3c:09:51:95:b7:8b:9a:01:d2:7c:
                    33:dc:e5:99:5b:72:27:3a:26:27:2f:cc:8e:2d:0b:
                    17:04:dc:00:00:a0:ac:ba:ae:b2:3e:67:60:91:e1:
                    f9:10:c0:dc:27:0c:6a:b0:94:d5:d6:e7:34:e0:a1:
                    62:aa:b7:97:36:cf:c4:5d:fb:98:50:04:ba:d7:ac:
                    13:58:ad:21:d9:3e:64:0c:99:22:63:6f:b0:64:9d:
                    0c:9f:23:34:e4:f5:cd:6e:32:c4:98:d5:59:9a:01:
                    11:45:0e:81:f5:d1:40:55:a4:3a:d6:be:e6:66:e0:
                    74:28:e6:5d:48:a0:90:e4:ff:65:79:c5:bd:76:0c:
                    58:5d:f2:a8:9e:53:ec:89:60:76:b7:cc:fc:8d:58:
                    83:19:65:57:91:5c:6c:83:98:37:23:57:01:b5:b0:
                    ca:9b:f3:6b:57:17:37:d7:00:dc:35:a7:b0:5a:c2:
                    da:d3:84:24:b1:81:07:d4:19:ff:91:88:f5:9a:1c:
                    15:4c:9c:0c:6a:86:59:74:9b:a2:44:96:4c:f0:74:
                    ef:e6:38:5f:f4:52:b2:57:c2:3a:a7:59:64:c4:5e:
                    e5:c7:d6:75:3d:7b:ef:ce:a7:5f:d1:cd:0c:33:73:
                    6b:30:3c:b4:49:1d:74:26:22:60:28:41:f1:0d:b7:
                    82:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:73:39:8B:81:C4:32:6B:75:56:1D:21:B1:99:36:F0:EC:30:85:1D
            X509v3 Authority Key Identifier:
                keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:37:ea:3d:e0:0e:60:88:34:37:63:77:b7:84:01:69:1b:8e:
         b7:65:0d:07:a9:b8:3a:9b:af:ee:fb:3a:2a:8e:1c:22:b2:74:
         33:be:4f:b6:eb:c3:80:61:f6:81:08:bf:2e:2f:43:5a:3f:7a:
         4e:5c:75:30:2c:19:4b:58:87:bd:c4:69:be:78:07:c3:7c:7b:
         b9:39:d5:a9:ec:8a:2b:45:d1:e5:6b:d7:f0:b2:7b:b2:fe:5d:
         7c:da:09:44:8d:de:f2:0f:7d:3c:9c:1a:6c:05:b7:9e:55:8c:
         3f:5f:d5:71:a7:91:fa:45:be:6a:a3:42:c1:22:14:21:eb:5b:
         1e:48:bf:a2:ad:0d:85:82:69:1b:de:23:04:6c:f0:9e:d6:01:
         61:1f:7c:c1:a0:2b:22:d2:9c:af:80:8e:ee:29:28:8a:85:a0:
         e0:3b:1d:82:11:0d:0c:14:7b:8e:98:98:6a:bf:44:06:91:57:
         59:90:2d:03:da:15:74:15:b2:14:e5:12:5e:06:2c:b2:49:1b:
         88:84:bc:86:20:75:0a:5a:4f:f8:82:d7:8d:22:9e:eb:72:e1:
         ec:91:18:5b:b6:a9:5c:36:31:97:c8:1e:cf:7e:c3:d1:7a:fa:
         f6:6c:e9:9e:cb:d4:1d:d3:52:94:3f:a4:bc:3d:81:eb:e1:bd:
         a0:c8:9f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 02:14:49 2025 by rpki-client