This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File:                     Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier:          UdjCj/qI0lTi0nxSwqJgrnopYDgpzqOCQQHuXwm+yaw=
Subject key identifier:   D5:0A:E7:08:6C:53:F0:FA:0A:50:F1:00:13:2B:F6:91:10:51:70:22
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer:       /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial:       1C5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number:          1C3A
Signing time:             Sun 14 Dec 2025 16:05:48 +0000
Manifest this update:     Sun 14 Dec 2025 16:05:47 +0000
Manifest next update:     Sun 21 Dec 2025 16:05:47 +0000
Files and hashes:         1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: cO7+LVeN3OBuwgDhuULliXXbKu951WNZQyH6YgjxAvs=)
                          2: A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (hash: Lvu6iSz0EDxGsSvl67CYssjZj8LfNsaL4+wrYELLSYM=)
                          3: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: /yvn8ijOa8FBDJ5ASQ/Lery7dqjE4HE5gFGgvkPmpE0=)
                          4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 06vkEMgrkkkWPxaN6n0p0hSzGNVGXFIfC5HD0mArdMk=)
                          5: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: l1Lp6717izpzzjuLJ/WIAZ1x52OL2D3LQu0E5xm6nH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
                          rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 16:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7261 (0x1c5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
        Validity
            Not Before: Dec 14 16:05:47 2025 GMT
            Not After : Dec 21 16:05:47 2025 GMT
        Subject: CN=693ee05b-624e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:9f:97:5a:f6:6c:b6:32:ad:5d:43:9e:6a:
                    a8:e4:36:54:41:d1:37:50:b1:0e:a6:f8:d5:30:3b:
                    8e:c2:aa:8a:f0:bc:41:6e:72:22:22:ae:1e:bc:39:
                    ac:39:98:15:d3:dd:e9:89:d2:e4:f9:d1:ed:9d:8a:
                    07:2c:92:2c:c2:0c:64:83:2c:29:a3:83:29:be:69:
                    d9:d3:2e:12:a2:ae:fb:ab:6e:f2:a6:a9:19:fd:5b:
                    40:dd:7f:20:04:a8:85:0f:e1:23:35:4e:ae:1e:a7:
                    ac:bf:a5:84:43:21:f4:1e:be:8c:85:49:8c:dd:dc:
                    13:ef:3e:3a:64:f8:45:62:e1:7f:70:43:6e:81:46:
                    96:ab:ff:5f:9a:7d:ca:f7:98:05:ca:64:46:8d:53:
                    14:3c:6c:ed:cb:19:77:80:dc:61:a7:46:6a:f9:2e:
                    47:f0:27:05:b0:41:69:c7:d1:61:69:2d:74:2d:e0:
                    e2:7c:3c:2b:c8:50:8b:ff:dc:19:34:0e:36:51:c2:
                    5c:fe:21:a2:46:15:89:bb:9c:70:a8:06:ec:ed:e6:
                    ef:99:9b:2a:cd:f8:41:c0:af:86:34:c3:7b:cd:bc:
                    b9:61:bd:d2:b8:69:7e:df:a5:c5:3a:90:e2:04:d0:
                    07:22:1e:7d:b6:2c:b0:96:e2:0e:2a:24:c4:fa:b8:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0A:E7:08:6C:53:F0:FA:0A:50:F1:00:13:2B:F6:91:10:51:70:22
            X509v3 Authority Key Identifier:
                keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:a5:8d:56:c0:dc:30:83:d9:b3:72:03:00:b7:4d:f5:41:38:
         e8:3a:cd:51:59:87:67:70:5b:31:0a:02:8a:76:4a:4c:75:55:
         fa:27:11:71:62:9d:44:5d:61:3c:9e:0c:15:ed:8d:45:38:89:
         ed:cf:57:31:2f:49:bb:39:dc:f6:d6:4f:74:a5:cf:75:ad:5e:
         8e:71:f1:5f:22:9e:71:a9:9a:5e:f8:10:aa:b0:30:10:9b:e3:
         28:d7:0e:6d:eb:7f:cd:46:9b:25:90:aa:39:1e:ef:87:fd:0a:
         2b:8e:69:39:4d:f4:ba:a3:da:8d:21:48:1c:87:6c:6e:61:89:
         70:e6:97:65:40:4f:29:7d:37:d5:18:dd:77:5b:90:3d:80:6f:
         3a:90:ed:c2:aa:fb:60:7f:67:f2:20:d4:45:69:c4:8b:40:45:
         ba:19:42:10:54:6c:51:20:f3:38:ea:99:18:16:04:52:29:d4:
         c7:18:d9:4a:4d:c7:10:84:6e:4a:5f:e9:70:a7:20:e4:e8:bc:
         28:23:bf:2f:ee:5a:71:92:52:9e:d2:65:03:25:f5:f8:03:2e:
         8a:31:1c:12:75:4f:97:77:06:18:1a:49:a4:b0:e5:15:d3:de:
         19:7e:62:32:b8:a2:66:53:12:c9:e3:f1:c3:2b:67:17:51:13:
         c8:0f:72:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 05:01:04 2025 by rpki-client