This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File:                     2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier:          dwDJsU8Vj3OzRBhDQYeg6bjXPrHtzCjZIqIHR28LnFc=
Subject key identifier:   56:EA:7F:18:37:AB:03:F9:69:D9:DE:A2:B0:2B:A2:BB:CC:89:17:12
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number:          0194
Signing time:             Sun 21 Dec 2025 02:44:35 +0000
Manifest this update:     Sun 21 Dec 2025 02:44:34 +0000
Manifest next update:     Sun 28 Dec 2025 02:44:34 +0000
Files and hashes:         1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: XTjD0Eq9pv0QJqRlQItYxVFE0lQONnuk7sltFBaXIfo=)
                          2: E5502F78772411EE8659D21FC4F9AE02.roa (hash: QC3Es2zEONKxVGX898XgjJkGnVmiNLJUauLLvYvYOYw=)
                          3: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: XP3+VtULxNMC516dv5hcQ2JtVHA6oyJ/06WzO92KEp8=)
                          4: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: EiqR8ceEyotPW7mTenGqOUmU7tOEINSndqPS9QrRxbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: Dec 21 02:44:34 2025 GMT
            Not After : Dec 28 02:44:34 2025 GMT
        Subject: CN=69475f13-81ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:1b:1d:a4:d9:fb:a2:32:89:7f:39:39:79:
                    62:1e:97:15:5e:64:70:35:fa:c5:84:5a:0b:46:ee:
                    bd:5b:8b:77:db:be:e1:59:b2:66:c9:a4:ce:a8:53:
                    13:7e:84:76:3a:15:48:ac:05:63:43:30:6f:0c:0b:
                    e2:cd:57:ef:48:d4:c6:8a:a1:ba:11:19:73:7e:ee:
                    45:22:56:c8:34:a2:b3:f9:d1:3e:3f:3a:24:16:4c:
                    8b:bb:7b:56:57:b7:e2:9e:5c:ab:4b:3e:70:4b:f3:
                    4a:6e:84:cd:78:fc:c7:8e:db:6b:bd:15:ef:04:88:
                    be:99:99:79:89:0e:f6:33:1d:a3:ce:b7:15:c3:af:
                    8e:d8:c9:4f:66:70:a0:06:45:c8:c3:41:3e:d3:c4:
                    89:71:36:52:f5:cc:bd:8f:d8:49:30:65:f8:39:98:
                    3d:6a:c7:ec:98:b5:ac:24:d7:a8:a2:1d:89:bb:0b:
                    ec:3a:8e:36:85:f9:c9:75:a0:f7:66:77:de:87:02:
                    6e:96:2e:9e:94:36:a9:b9:ad:35:59:f5:f2:4b:d4:
                    8a:6c:5b:24:f1:ba:b4:0d:88:55:a9:bf:26:d0:5b:
                    bc:46:c3:69:9c:53:dc:d6:15:91:1e:01:63:80:31:
                    8d:87:53:82:f6:d2:d6:56:ae:ed:cf:3b:03:13:28:
                    75:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EA:7F:18:37:AB:03:F9:69:D9:DE:A2:B0:2B:A2:BB:CC:89:17:12
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:17:b7:25:9c:36:55:bc:d4:71:40:3f:18:e1:c6:17:b0:a9:
         fe:5b:23:fb:74:1a:38:de:34:6e:1b:ab:ab:c8:c2:e2:03:cf:
         b5:98:28:31:c0:9c:b5:84:1f:30:5f:65:4c:b0:7f:0b:fb:0a:
         dd:6b:d1:6f:28:3f:b5:11:09:b3:9a:5b:90:7f:d5:ee:84:f4:
         13:43:01:2f:50:c1:1d:38:07:9c:61:e0:da:75:cd:97:95:dc:
         a7:7d:46:5a:dd:00:d6:68:d0:e7:71:ae:98:b7:06:b0:e3:a2:
         6b:a1:54:b1:2c:8b:a0:55:f2:c2:b7:ec:eb:a9:c8:6f:5e:ac:
         4c:51:eb:03:ea:7a:a5:bc:d1:9b:41:3e:d9:53:ee:83:a8:ad:
         a8:a1:3f:62:fc:d2:aa:b6:e8:00:bb:08:37:94:7a:e3:c7:19:
         47:8c:ba:4e:4b:d0:0b:d5:81:d0:25:fb:ba:82:66:12:90:7e:
         43:d0:c7:2b:b8:4d:f5:e7:ba:f0:7c:ee:13:15:96:b9:2e:6b:
         2a:48:a7:ff:10:d1:1d:fa:c5:36:1a:01:2a:fa:a0:c7:d8:e5:
         95:41:71:ee:5a:f1:87:58:a8:4e:2c:84:85:db:b7:3d:b6:cc:
         f0:2a:a8:2f:1d:ad:df:a6:a7:fb:bf:99:8d:1b:b6:03:78:8b:
         e9:76:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:09:16 2025 by rpki-client