This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
File:                     ID0eLahSvltkOpm-9WTXdL3cx_Q.mft (raw, json)
Hash identifier:          AyHaGJVQAVa5CocLNbeqwdJjKIV9OyzktYkw2BqNceo=
Subject key identifier:   A0:A5:E5:25:9A:54:FD:95:9E:25:58:7D:7C:04:D3:CA:DC:08:E4:D0
Authority key identifier: 20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4
Certificate issuer:       /CN=A917E832/serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
Certificate serial:       0B31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
Manifest number:          0B2A
Signing time:             Mon 22 Dec 2025 18:45:27 +0000
Manifest this update:     Mon 22 Dec 2025 18:45:26 +0000
Manifest next update:     Mon 29 Dec 2025 18:45:26 +0000
Files and hashes:         1: ID0eLahSvltkOpm-9WTXdL3cx_Q.crl (hash: FcN9JCJj4yn5cy5NXoKyqBHMAspi8nEBLI34aZDRSsA=)
                          2: E869880C500511EA98307A59C4F9AE02.roa (hash: vj3M9GWIecNQbzYctkTLvK5haUmE73bb2B+bBqSBJ9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl
                          rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2865 (0xb31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E832, serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
        Validity
            Not Before: Dec 22 18:45:26 2025 GMT
            Not After : Dec 29 18:45:26 2025 GMT
        Subject: CN=694991c7-d518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:2a:15:5f:cc:59:07:1c:cb:48:81:c5:58:
                    ba:47:3a:50:bd:0e:a0:9f:06:c1:69:54:59:82:79:
                    1d:4f:14:3f:c7:d2:54:09:2c:83:1d:55:d4:a6:ff:
                    26:dd:41:a7:95:1c:a7:6f:58:fb:0d:1f:fd:3d:42:
                    b0:cb:e3:91:1d:ba:13:48:40:ff:d6:12:b8:b4:33:
                    9c:69:0c:c7:e6:71:08:c3:5f:9b:af:28:1f:41:f7:
                    57:55:23:8f:69:c1:3f:56:20:2c:ed:6f:de:ae:15:
                    19:17:25:d5:e3:9f:67:22:3e:72:25:84:4d:a6:9d:
                    b3:dd:24:95:03:4a:40:6f:23:c5:42:29:44:5d:61:
                    e5:be:73:2d:a8:93:10:04:92:a8:3a:2b:cd:cc:e3:
                    d7:93:ad:b7:a1:10:98:9e:b2:ba:9e:c0:a6:4d:10:
                    4a:e1:c5:52:86:4c:23:01:9b:e5:69:b8:94:7d:48:
                    ea:3d:37:96:00:5e:ea:3f:2a:d6:09:14:a2:af:0b:
                    59:92:cb:2b:6a:9d:93:07:8a:ff:ff:dc:2a:ac:95:
                    19:aa:82:85:a3:b2:e0:03:90:f1:3f:27:95:cb:7d:
                    00:ac:52:77:cb:d0:c3:00:d0:c1:da:97:60:8f:9e:
                    b4:31:db:17:5e:89:7f:8d:40:6e:73:aa:d3:62:f4:
                    f1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A5:E5:25:9A:54:FD:95:9E:25:58:7D:7C:04:D3:CA:DC:08:E4:D0
            X509v3 Authority Key Identifier:
                keyid:20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6e:ed:96:ca:a9:8c:49:d7:30:bb:39:ea:19:9f:ac:a3:28:
         39:63:0e:58:91:45:53:ae:0c:fe:45:45:7c:25:1c:c7:00:c0:
         7e:c2:d0:ff:5d:7a:14:69:8e:c8:d4:01:aa:e5:dc:7f:55:85:
         ab:95:97:37:ed:0d:ee:c9:95:7d:42:7d:a5:71:07:86:f6:76:
         b6:19:25:42:91:a1:4c:a2:98:18:5a:24:7d:1d:f9:6a:e6:7c:
         b8:99:37:37:f7:6d:d5:c5:75:6f:d5:6a:ed:96:98:7f:fb:ce:
         11:eb:f7:f0:a3:43:4a:0c:0c:22:84:c2:ee:ea:26:42:78:0d:
         cc:4c:99:33:78:9d:28:a7:7a:b8:49:e5:01:5b:30:20:2e:e5:
         c5:af:b6:ed:43:3c:26:58:75:48:d8:f8:d0:08:15:0b:8a:49:
         d8:01:ec:da:00:7a:94:1e:82:19:46:f7:f9:ee:2b:bb:79:5d:
         92:3f:6f:cd:4a:12:f8:8f:14:3c:55:e2:01:ac:fb:a8:63:fa:
         b1:f8:3a:b8:31:2b:1b:19:00:a8:d7:22:91:4a:b7:79:2b:4a:
         97:99:9a:2f:7b:c4:78:6e:bd:bd:58:9f:97:92:1d:51:05:69:
         78:45:59:77:f3:9a:c5:f1:46:59:ab:dd:d0:b8:81:36:74:17:
         12:be:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:28 2025 by rpki-client