This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
File:                     vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft (raw, json)
Hash identifier:          NdR3fRF4eZZ6M/OLSovFE+EPWbdpo96K8v4kScbZI2Q=
Subject key identifier:   8B:F3:29:7C:AB:7C:D4:37:D3:B6:74:A2:96:21:D9:97:D5:E3:B1:C8
Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
Certificate issuer:       /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Certificate serial:       0CCA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
Manifest number:          0CB2
Signing time:             Wed 24 Dec 2025 18:02:10 +0000
Manifest this update:     Wed 24 Dec 2025 18:02:09 +0000
Manifest next update:     Wed 31 Dec 2025 18:02:09 +0000
Files and hashes:         1: vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl (hash: SKI24x0FyGQiWCshHspQVMJvUPLJGEOL40wxD84ibeY=)
                          2: 7035C2E6CF7111F0A638EC6BC4F9AE02.roa (hash: t33RheNvT6AZs0YGzltpL3HsFmPDCdK8QLo3GUeUtsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl
                          rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3274 (0xcca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184569, serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
        Validity
            Not Before: Dec 24 18:02:09 2025 GMT
            Not After : Dec 31 18:02:09 2025 GMT
        Subject: CN=694c2aa2-d806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:97:e5:63:85:32:d4:c3:c6:65:92:2a:0d:
                    1d:2f:1e:a8:34:35:3c:31:62:69:10:99:9f:d0:a4:
                    ea:76:0b:15:a3:59:b4:7a:74:92:93:ae:64:8c:f3:
                    fe:4e:67:23:6d:53:97:13:bc:13:75:8f:e4:b3:63:
                    6e:ee:b7:93:de:2b:da:d6:4d:71:92:fa:6a:88:4e:
                    72:7a:6f:b9:86:4c:38:3c:d5:70:0d:69:05:8d:28:
                    28:27:28:1b:5f:de:78:1f:30:73:b9:15:29:cc:18:
                    ff:33:9a:cd:e9:4e:4f:05:20:f4:f3:e1:0f:9a:4d:
                    e7:fb:f9:b4:63:c1:7b:59:61:37:b2:1b:88:1d:54:
                    59:7a:4d:be:fa:e7:68:a3:4a:f6:49:20:0d:6e:5c:
                    43:7f:f3:0c:a0:d4:eb:95:3e:2f:ba:e3:d2:0f:c0:
                    35:c1:e6:53:1c:c2:c1:cd:74:f0:56:51:d9:4f:31:
                    d0:6b:bd:a2:44:70:23:d8:8d:c5:b4:c7:77:07:19:
                    89:c6:da:5d:8b:81:2d:29:23:78:62:90:6c:73:48:
                    92:c5:cf:d9:e1:8c:c0:a6:4e:c1:84:f8:d8:7d:27:
                    9b:b6:be:9b:13:95:fa:b6:84:7c:99:98:72:04:5b:
                    cf:cb:b1:4e:06:e4:74:9b:09:bc:4b:32:e1:fa:63:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F3:29:7C:AB:7C:D4:37:D3:B6:74:A2:96:21:D9:97:D5:E3:B1:C8
            X509v3 Authority Key Identifier:
                keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:89:c0:9c:97:76:fa:65:1d:69:d8:f8:52:49:50:26:90:dc:
         9a:ac:1a:04:89:74:b1:76:16:dc:0f:42:f0:e3:af:f9:38:b9:
         75:fc:83:67:31:92:3a:f4:2a:b5:cb:43:8b:14:11:09:94:c1:
         8c:cd:36:03:31:7a:ad:c2:ba:cb:59:82:e9:a3:76:b3:97:b8:
         03:0c:be:0c:00:6f:ad:ee:86:46:07:ab:56:bf:68:e4:44:8a:
         01:c7:7d:a4:55:61:52:24:b2:59:b7:72:64:64:09:43:42:3a:
         e9:af:fd:bd:85:d5:92:20:d2:ac:ed:24:1b:83:37:79:0b:08:
         88:24:cb:29:f6:6c:fa:35:3f:d1:8e:9e:17:0a:47:69:a1:cb:
         17:0e:25:a3:8d:0c:4f:75:55:6c:de:fc:6c:25:35:04:4a:d8:
         c2:35:bf:87:f8:04:01:98:00:42:de:29:11:63:60:05:b1:14:
         a1:70:1d:df:d3:d8:33:00:e1:1e:41:02:f3:7e:55:93:f5:ff:
         1a:fe:2c:8f:56:e4:bb:aa:83:81:6b:e2:23:4c:66:f9:a8:3a:
         a1:0c:80:20:85:ce:1e:e6:ab:d9:03:69:05:14:2e:4e:39:f7:
         d7:aa:c8:02:3c:7d:78:b6:d6:ce:5a:f8:83:c3:b5:05:2d:18:
         eb:e8:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:31:11 2025 by rpki-client