This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
File:                     cV0939fSp5kTexOT1KjPorHU02Q.mft (raw, json)
Hash identifier:          GdcXQihOMaJS424sRrNb2dsISJFxe7bItfgwBljNoB0=
Subject key identifier:   BC:F0:DF:E9:FE:54:09:55:50:26:74:5A:26:A5:81:BA:E8:38:68:43
Authority key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64
Certificate issuer:       /CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
Manifest number:          F5
Signing time:             Tue 23 Dec 2025 04:14:17 +0000
Manifest this update:     Tue 23 Dec 2025 04:14:17 +0000
Manifest next update:     Tue 30 Dec 2025 04:14:17 +0000
Files and hashes:         1: cV0939fSp5kTexOT1KjPorHU02Q.crl (hash: oH7ov4R4kEBUSpqAzjS2nWgY5Od8FUx7ccmIqwdsTpU=)
                          2: 8BAFDC4C691E11EF9AC4F168C4F9AE02.roa (hash: CaDrsHhMr2SW3agEhOrGpPTbVn2zv/JRiQ35B1c4T/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
        Validity
            Not Before: Dec 23 04:14:17 2025 GMT
            Not After : Dec 30 04:14:17 2025 GMT
        Subject: CN=694a1719-0316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:15:f1:ab:fc:2c:4c:d0:df:5d:99:9c:d9:
                    46:ee:00:7d:b6:5a:c4:54:27:93:f2:66:1d:e3:10:
                    9a:25:e8:27:8e:47:d1:28:4f:37:be:12:6f:4a:d3:
                    5c:94:9d:77:79:a6:23:5b:84:f9:1d:c3:4c:19:ac:
                    71:e5:13:8b:94:e1:b3:f3:2e:ab:f9:2c:a4:24:1d:
                    c3:d7:a3:cc:69:ce:7f:99:0d:6e:f1:6d:6e:0d:e9:
                    00:ca:00:c5:ac:b7:ba:16:93:d1:69:da:be:30:54:
                    e2:fb:bc:6f:b7:1b:60:3d:f9:92:42:7c:64:f9:91:
                    2f:c2:80:46:ef:52:f9:3a:21:15:79:17:0c:ab:07:
                    2b:18:23:75:cb:cc:71:36:5f:f8:89:1c:80:3d:5b:
                    71:70:57:39:72:d1:dc:55:ca:90:72:1a:5f:ba:6b:
                    14:a1:67:fb:32:39:a1:3b:7e:39:e9:e1:cb:49:12:
                    d5:fc:83:4c:ac:81:74:4d:c9:0b:55:3d:15:57:41:
                    c8:08:f5:f9:58:82:f6:d8:9e:06:b1:ab:84:a9:01:
                    4a:cf:98:98:88:1f:af:7e:df:dd:00:5c:28:0c:25:
                    65:d5:8c:12:ab:e8:c0:8c:c7:07:d9:0c:ca:46:d6:
                    56:60:ce:a9:f7:80:3e:80:b7:08:c6:8d:b5:8f:08:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F0:DF:E9:FE:54:09:55:50:26:74:5A:26:A5:81:BA:E8:38:68:43
            X509v3 Authority Key Identifier:
                keyid:71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b0:de:d6:6e:79:66:ab:73:a3:3a:9a:eb:27:eb:fe:cc:44:
         82:38:a3:58:d6:35:e0:38:df:ba:1b:3a:94:f0:91:97:d7:32:
         9e:05:98:73:a3:3e:b1:6b:cf:80:14:c3:a7:6f:55:68:2b:0e:
         0c:83:ce:3e:63:2f:f9:48:28:00:49:30:53:95:30:70:b2:5f:
         38:0e:67:c2:ac:2a:9b:25:bb:05:b6:e7:4f:fe:4f:ac:8f:3c:
         b5:38:f8:de:49:93:7b:73:27:d8:91:51:02:7b:33:ad:d0:b4:
         6e:81:6e:8b:a2:26:30:e3:f8:e3:b0:10:1c:30:6b:13:b4:87:
         0d:ba:7a:d7:b0:c7:83:39:d9:dc:76:fe:4c:ce:ed:55:fa:1e:
         d9:eb:0e:5f:91:30:dd:81:70:1d:f6:5e:d7:58:5c:2e:f2:43:
         3e:ca:96:4d:34:34:5a:f5:76:1f:3b:0b:a8:03:b6:54:d6:11:
         4d:a9:30:13:b9:68:62:e5:2b:e9:06:13:c5:c2:2f:21:08:bc:
         f7:0d:5e:19:d4:17:c3:0b:a3:a9:7c:6d:2b:f6:5b:d8:d8:e3:
         18:1c:26:e4:62:88:61:f2:ff:4c:71:fb:04:b1:65:19:56:3d:
         90:1f:f6:4c:df:70:f8:99:56:b7:40:7d:81:61:c0:16:a1:a6:
         a8:91:99:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:35:05 2025 by rpki-client