This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
File:                     SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json)
Hash identifier:          gz5MHnamuwAwEWGmV/lEaXcMsVveH+DK7Tg2YG4OSEo=
Subject key identifier:   71:B1:77:94:3B:3A:E2:FC:31:5C:3A:6B:B7:6A:0B:51:E3:ED:72:F7
Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
Certificate issuer:       /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Certificate serial:       0690
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
Manifest number:          0690
Signing time:             Tue 02 Dec 2025 21:30:14 +0000
Manifest this update:     Tue 02 Dec 2025 21:30:14 +0000
Manifest next update:     Tue 09 Dec 2025 21:30:14 +0000
Files and hashes:         1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: BP/0Wmi8jjtVQWwoGwc8NKsd1Z/BEGmOOTx6qMQYkJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
                          rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 21:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680 (0x690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
        Validity
            Not Before: Dec  2 21:30:14 2025 GMT
            Not After : Dec  9 21:30:14 2025 GMT
        Subject: CN=692f5a66-601d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:cf:13:4b:e2:83:9f:97:b6:5b:49:90:ed:
                    e9:bd:cc:e6:f5:a7:91:5d:6f:b9:da:26:8f:7a:6a:
                    80:e9:95:cf:5c:d8:cd:1d:0c:ca:a5:62:f3:89:8c:
                    1e:ac:5a:75:fb:3c:a2:85:3f:d1:43:f8:d9:ca:9a:
                    b2:36:c5:81:00:37:c4:5a:27:ec:0a:fa:bd:ef:c9:
                    3e:a0:7b:d4:24:fe:f4:d3:43:45:6a:6a:4a:1d:c3:
                    2b:28:5f:8d:7b:06:c2:08:54:62:2b:e0:8a:ee:2b:
                    7d:db:9c:37:a6:2e:c5:37:6a:82:97:60:c5:52:f3:
                    9a:0e:55:9e:26:07:b7:d8:ee:c4:94:5b:24:4b:e8:
                    dd:54:4f:f7:43:55:4c:54:5b:ff:bd:53:9d:21:33:
                    85:b0:18:39:0e:db:7f:4a:de:d0:ff:88:64:8f:e8:
                    a1:8f:6d:d3:dd:c5:fc:1b:59:78:eb:b7:c6:75:62:
                    a9:88:56:f8:5d:82:cf:54:c6:a7:af:ba:0a:03:5c:
                    db:d1:de:36:a5:a4:44:ff:6c:c1:d0:92:e9:4f:b9:
                    95:b2:19:95:15:e8:e0:78:c1:d9:30:27:61:09:dd:
                    73:ef:7b:1d:16:f2:7b:24:80:9f:80:92:98:c3:ec:
                    33:ce:6a:26:aa:b3:7c:5b:74:3a:e5:36:df:71:9d:
                    5c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B1:77:94:3B:3A:E2:FC:31:5C:3A:6B:B7:6A:0B:51:E3:ED:72:F7
            X509v3 Authority Key Identifier:
                keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:86:1e:b4:32:c0:ba:34:a0:63:e1:c9:e8:47:4c:c5:61:
         b9:b7:a1:ed:e1:08:b6:c4:69:a4:fb:e4:20:e8:6f:e9:77:e5:
         35:cb:c7:0d:19:86:7d:a4:c5:1d:84:a8:3a:54:a1:cf:ce:d4:
         3a:a6:f1:bc:a8:89:ae:c4:b1:8a:ae:06:05:34:af:98:81:7f:
         34:a7:67:47:0f:7c:02:2d:bd:3f:bd:62:bf:7d:7b:41:9c:4b:
         8f:d3:1c:ff:be:bb:f5:ca:a0:5a:7b:8b:23:be:13:11:a4:c7:
         8b:c8:f0:96:34:09:8a:79:cf:44:2f:93:07:65:d0:38:9a:b8:
         79:93:96:79:35:71:00:98:ea:86:e7:b7:61:1f:fb:0b:fa:f0:
         95:20:11:e4:77:1c:bd:4a:4d:7c:47:fc:a8:f4:fc:63:24:cc:
         23:b1:11:6a:12:42:14:ca:b0:e2:5b:22:13:d2:2b:32:3d:56:
         a9:dd:ba:92:c3:4a:dd:25:84:bd:be:2a:19:63:ea:86:a4:a1:
         ae:fc:92:5a:74:ed:49:3d:4c:67:53:f5:65:2c:b9:9e:19:51:
         cf:08:de:54:e7:80:e3:51:8d:c5:65:a9:20:06:a4:07:e8:62:
         06:9b:e4:3f:ec:2b:d1:58:20:c3:6c:84:91:04:cf:e2:31:f7:
         ae:43:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:46:51 2025 by rpki-client