This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File:                     D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier:          5oLZ2sfCd3bcGvn52gawSGhzO/s2E7XdbNtbvFVIC+w=
Subject key identifier:   41:99:38:6A:B5:F9:E2:D3:96:90:4D:26:DB:DE:1C:D1:C2:D8:CC:06
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number:          01CF
Signing time:             Tue 23 Dec 2025 02:11:51 +0000
Manifest this update:     Tue 23 Dec 2025 02:11:51 +0000
Manifest next update:     Tue 30 Dec 2025 02:11:51 +0000
Files and hashes:         1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: Z8t0HN5nc/RIbV0nE7qg3nV2RYxG8Hc5gtKLmHN1KlE=)
                          2: 12B20E54D72811F09A5B6B4F5FD3641D.roa (hash: ZUdbJ6OKuuHZsQSkDbegNWkKad8x7uyo9KKuxVE5YMg=)
                          3: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: iRxA1ggG5Gg6gMWZuZ8L1lPJN3fft+M4sC43triwT/s=)
                          4: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: tbP1wHLZXWdBy80smo7nwsfBeTkYD2DmwbznFImHmJs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Dec 23 02:11:51 2025 GMT
            Not After : Dec 30 02:11:51 2025 GMT
        Subject: CN=6949fa67-68fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3c:94:44:80:d3:4f:a4:6f:43:c9:6c:9f:2c:
                    e1:3a:ea:a1:3e:01:b4:eb:de:dd:27:80:ee:71:e5:
                    ed:51:7d:30:e1:42:ce:b8:14:83:eb:a3:e4:eb:e9:
                    e9:db:9a:da:15:b9:c4:39:62:f2:cb:aa:c4:7a:43:
                    d3:e0:65:2d:9c:80:7d:14:34:6f:b7:2a:85:e1:7f:
                    5b:7d:a3:ab:8b:d4:52:80:3e:75:19:70:ab:d7:eb:
                    33:e2:a6:fb:d8:6a:ec:d0:a2:01:a8:0b:16:27:4c:
                    a7:30:70:87:1e:9c:9b:93:4a:a4:9c:4d:9b:5c:81:
                    87:c8:e8:d3:f8:78:a6:70:af:9c:08:fd:93:e8:fa:
                    eb:0e:38:40:3e:61:b8:ec:50:2c:7a:26:0b:62:76:
                    8c:0a:68:54:0d:16:15:8e:f4:8f:02:db:18:ae:98:
                    cb:17:20:8a:2d:2d:f0:a2:0f:29:bd:d6:2a:b1:7f:
                    90:3d:80:66:58:23:72:45:bc:2c:2f:8d:db:16:85:
                    4c:47:b5:a4:5b:5f:f9:e5:f4:5a:d6:6e:40:a5:1c:
                    36:44:05:0d:2d:aa:e7:dc:2b:f6:4c:8f:b2:5f:45:
                    86:25:9b:0e:5e:a0:16:30:29:ce:33:09:a3:87:0c:
                    d9:c3:07:21:08:cd:16:1f:e2:e6:ed:e9:00:19:c4:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:99:38:6A:B5:F9:E2:D3:96:90:4D:26:DB:DE:1C:D1:C2:D8:CC:06
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6e:2f:9f:64:5c:78:98:4c:13:23:ad:79:a1:88:bc:ec:0a:
         a8:e4:26:70:7d:8c:e8:83:65:69:6e:a1:2a:9b:8d:c8:bd:68:
         5c:48:48:dc:61:0f:58:54:cc:22:16:0f:8b:4c:14:6b:28:15:
         8b:e8:43:84:55:7e:c0:e7:ec:b7:28:07:7c:63:6b:ec:bf:a8:
         ca:b1:bf:1e:59:be:ed:1f:b4:1e:fb:87:ad:e0:d7:87:a8:c6:
         2d:d3:35:f2:2b:e3:55:42:0b:06:51:06:08:7d:68:e1:b7:2f:
         3a:d2:b4:8f:ec:ff:e6:4c:b8:e6:12:91:e6:29:a7:c9:b9:cd:
         7b:46:02:5f:7a:43:0f:28:a0:f8:a7:78:63:42:cb:f2:fc:39:
         cf:41:72:5f:65:78:61:26:a8:d3:aa:7b:b2:02:6f:76:ef:7d:
         f7:7f:90:56:48:af:00:6e:d9:85:15:c8:f8:d9:84:52:f7:4c:
         06:16:d4:de:f3:8f:e3:ae:a4:b6:26:a1:c5:aa:2d:ae:ce:75:
         8d:07:a5:94:42:98:14:fd:33:0d:ee:16:42:91:36:94:da:b4:
         c3:b7:86:ca:95:5c:92:96:f2:e4:ef:c5:87:2d:01:92:76:dc:
         86:ba:d0:19:d8:81:78:21:95:95:07:0e:0e:7b:5f:bf:4d:90:
         47:46:c9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:42:51 2025 by rpki-client