This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
File:                     xT8GoF_V8dkjXh-VMPLNPOMREOI.mft (raw, json)
Hash identifier:          gBGFAWqhCzbz+ItcU4gXLEGVmgvZHueE0vb79EJxfOk=
Subject key identifier:   79:64:06:0D:32:9D:3F:7E:0C:44:1A:65:C1:58:F6:EC:AE:54:3D:3E
Authority key identifier: C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2
Certificate issuer:       /CN=A918190B/serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
Manifest number:          0D
Signing time:             Tue 09 Dec 2025 05:47:33 +0000
Manifest this update:     Tue 09 Dec 2025 05:47:32 +0000
Manifest next update:     Tue 16 Dec 2025 05:47:32 +0000
Files and hashes:         1: xT8GoF_V8dkjXh-VMPLNPOMREOI.crl (hash: 2K8VEYeAe2vMwfW/417s6mtbP8WwMEKSCU/kGG+l4w8=)
                          2: 329CC664C5C611F0A1D9E964C4F9AE02.roa (hash: qZba1UodyDp1cfoTx0rV7/2LZUMA4jg2jpfttVNILHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl
                          rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 05:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918190B, serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
        Validity
            Not Before: Dec  9 05:47:32 2025 GMT
            Not After : Dec 16 05:47:32 2025 GMT
        Subject: CN=6937b7f4-5efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9b:c1:b0:b1:07:34:ec:5f:27:8f:d0:3b:5d:
                    42:89:5b:55:27:01:89:b5:e8:12:6e:77:45:09:b1:
                    2a:4a:d1:94:f8:5a:e1:32:a5:85:49:39:58:65:3b:
                    c2:cc:c8:90:47:2c:90:61:db:8f:5b:25:b9:e7:07:
                    d0:a7:ee:11:8e:67:8a:6b:84:50:fe:7c:61:51:90:
                    f0:4b:4d:49:00:c1:2c:68:69:f3:74:f5:81:f1:8d:
                    8f:5f:91:69:ed:35:b3:9f:3a:15:c9:29:f4:8f:a9:
                    f4:8c:a7:8f:3f:be:71:cd:23:7a:77:bf:b5:3a:b3:
                    b6:ef:69:1d:6e:dd:4f:ac:72:09:8f:37:44:61:ba:
                    18:89:38:0c:90:d7:36:c2:76:1a:7e:5a:44:66:f2:
                    60:34:01:53:ba:fc:0f:63:50:2d:79:ba:ae:6c:17:
                    4c:13:18:b9:02:67:ec:f5:31:f9:08:ea:98:8b:6a:
                    7e:b2:cb:b4:86:74:ae:10:86:46:7a:72:38:65:ae:
                    06:5c:dc:c6:65:06:22:60:de:ec:1e:11:d9:5f:4f:
                    8f:28:9b:ad:b1:05:9f:32:90:bd:1c:50:31:fe:f1:
                    4e:c2:6b:5a:53:91:cf:18:b4:e1:b7:05:ee:d0:71:
                    c6:2a:61:2d:d4:4b:81:e2:9d:f0:86:95:04:68:f0:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:64:06:0D:32:9D:3F:7E:0C:44:1A:65:C1:58:F6:EC:AE:54:3D:3E
            X509v3 Authority Key Identifier:
                keyid:C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:27:29:d6:77:12:fe:8c:79:88:ba:f2:c1:4c:b7:23:ab:
         72:67:fc:a2:e8:4c:66:a5:7d:52:b8:2d:83:7f:d7:7a:bc:a1:
         6d:7a:c2:6d:ac:f8:7d:a5:7f:f0:19:82:c0:44:22:e2:db:8a:
         00:97:c3:f1:37:1c:a9:ed:da:89:e2:57:e0:f4:a9:b3:d6:ac:
         46:a2:3d:ae:98:61:5a:69:a6:a4:2f:03:f8:fd:81:fd:25:2b:
         12:ce:a5:3c:e3:5e:3c:21:9c:54:4d:5a:58:3a:fb:b3:f5:9a:
         16:17:94:be:f0:08:48:9b:60:b9:35:96:a7:da:3f:fd:bd:c4:
         5a:00:f2:2a:b8:d7:d9:4c:99:8b:ce:f4:af:47:15:35:40:7d:
         24:e9:ab:29:d3:16:54:32:93:ad:47:a4:7a:ef:e1:bc:fa:75:
         c7:dc:b9:a9:97:88:4f:1f:a4:f0:07:b1:bd:ef:ab:45:b0:47:
         e7:7c:ae:d7:4f:21:82:96:60:26:7a:4a:f9:4a:2b:15:8f:ed:
         e8:6a:38:f0:e4:f3:46:4f:a0:07:61:7c:e7:b1:6f:01:e7:a3:
         63:5a:8d:54:23:a5:e1:08:c6:24:68:8b:eb:4c:79:74:84:2f:
         b0:99:41:94:3a:d9:bf:d6:1f:c0:f9:d9:8a:a1:ff:8d:f6:b0:
         59:fe:3e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:52:23 2025 by rpki-client