This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File:                     aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier:          Cs5EZVoeTIs/Vukg3KrAE0I40L3qdCNy50yDtP6w9LQ=
Subject key identifier:   FF:1A:C9:43:F0:81:5D:B8:83:B9:20:37:6E:26:BA:74:AD:95:83:70
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer:       /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number:          B0
Signing time:             Tue 23 Dec 2025 05:09:52 +0000
Manifest this update:     Tue 23 Dec 2025 05:09:51 +0000
Manifest next update:     Tue 30 Dec 2025 05:09:51 +0000
Files and hashes:         1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: XAJLAHOIKAhVhldRwG2JL5guidSU6PNloLau9Ii+QHk=)
                          2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=)
                          3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
                          rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
        Validity
            Not Before: Dec 23 05:09:51 2025 GMT
            Not After : Dec 30 05:09:51 2025 GMT
        Subject: CN=694a2420-4889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:4c:5f:48:c4:47:7b:af:42:2b:2a:1f:80:
                    25:e0:99:95:6b:2b:a6:21:1b:d2:e1:85:5c:e7:86:
                    2e:a6:83:09:5e:0d:b8:8e:4f:8d:7c:58:c6:d7:1f:
                    27:ee:d4:2d:e5:2d:17:65:f3:c7:14:cd:a2:eb:7e:
                    16:26:b3:64:27:12:0f:7e:44:10:b3:c3:30:a2:db:
                    39:6c:6f:04:36:8a:98:55:e1:0f:c4:76:4f:e5:69:
                    cd:c6:4e:d5:1a:1e:3c:95:3b:be:dd:8a:34:7e:73:
                    37:a0:70:21:63:98:d2:fa:6d:14:28:88:cd:81:5f:
                    17:7a:e9:ca:37:32:b5:07:3c:d9:25:d8:72:e6:e2:
                    39:5e:a6:32:34:ad:c9:31:20:55:93:19:49:65:47:
                    9d:bc:87:e9:36:54:64:13:28:d6:b2:8f:44:15:a6:
                    12:50:ec:ac:51:79:2c:79:80:cf:67:b8:0c:96:98:
                    9c:ba:fe:f6:ba:65:b5:56:7d:02:0c:a3:aa:56:2a:
                    f5:e0:24:79:ec:40:c1:2c:7e:0f:4e:7c:ac:d6:7c:
                    1a:c4:a5:6b:4b:54:92:3e:d8:fe:fc:1b:2d:3c:9d:
                    e2:c4:a7:a9:aa:83:04:27:0c:92:14:3c:32:05:53:
                    4e:e4:64:b9:50:c0:fd:21:22:d8:bb:1f:c0:36:c8:
                    26:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1A:C9:43:F0:81:5D:B8:83:B9:20:37:6E:26:BA:74:AD:95:83:70
            X509v3 Authority Key Identifier:
                keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6c:7b:00:e5:c7:03:0c:11:7d:12:95:11:f6:65:e3:ea:24:
         9f:b4:05:fb:2b:1d:62:e7:16:82:91:ba:76:b0:ce:f9:f9:e2:
         c8:b6:67:3b:17:f8:fa:d1:27:cf:7e:7c:d9:73:a0:46:d1:d4:
         57:aa:87:d4:c1:ee:5c:d1:bf:06:a1:51:f2:67:57:1c:67:4b:
         1b:f9:c0:89:82:64:9e:ec:24:07:b3:5d:34:78:6b:5c:14:d1:
         2d:98:13:d3:8e:fa:22:31:2e:d8:0d:13:24:fc:5e:00:62:b2:
         db:2c:db:1e:a6:90:cd:14:15:48:d1:3f:83:d8:33:0a:a8:88:
         7b:7b:6b:39:70:de:03:9d:4a:83:27:24:c5:b9:08:5c:c4:21:
         cb:e5:f0:54:f4:cf:0e:4a:8f:c5:00:4a:a6:35:dc:0c:09:54:
         12:a4:82:08:94:39:a1:8d:2c:0f:fe:c1:45:3b:c4:e9:c7:30:
         03:a9:cf:0f:cc:17:1c:16:a4:2d:22:71:cb:47:74:37:4d:82:
         83:5c:67:a2:a5:33:ee:eb:82:f0:60:07:8e:ed:10:8a:8b:10:
         5e:2c:70:b8:55:89:1d:9c:be:30:39:cf:93:16:a5:4d:69:33:
         80:25:0c:a8:66:55:57:71:53:83:00:3b:a2:48:22:ca:4d:12:
         6c:42:f5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:16 2025 by rpki-client