This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
File:                     rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json)
Hash identifier:          hpQKiWHMxSs0txhwjZGIYEbS9AWhBgGc/xGHZ4L5pww=
Subject key identifier:   BC:9A:E0:13:5B:78:FC:75:5F:C7:1C:99:D0:B7:67:61:F0:9F:0D:59
Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
Certificate issuer:       /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
Manifest number:          0259
Signing time:             Tue 23 Dec 2025 00:41:02 +0000
Manifest this update:     Tue 23 Dec 2025 00:41:02 +0000
Manifest next update:     Tue 30 Dec 2025 00:41:02 +0000
Files and hashes:         1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: CiQO208MuoPfJpYF8C6G1MOmqtYylsR8UpPynVNOJ7s=)
                          2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: ct9JRtk3Ka50ZvbEYcBL6mLhkKvm7y5g0JZUChw/aVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
                          rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
        Validity
            Not Before: Dec 23 00:41:02 2025 GMT
            Not After : Dec 30 00:41:02 2025 GMT
        Subject: CN=6949e51e-0f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:8d:e5:5c:8d:31:15:e8:80:bf:50:30:96:
                    a4:32:31:45:f7:44:1d:eb:31:16:7d:c5:24:3b:2a:
                    d9:3d:6c:42:d8:47:e7:74:8b:fe:b5:bf:eb:88:6b:
                    f1:fb:da:f8:57:97:80:63:05:e6:89:a8:57:ff:47:
                    de:ea:27:95:ba:37:6e:94:e6:5f:b7:4f:07:a9:7b:
                    6d:61:6c:95:f8:33:46:c0:7a:e3:22:db:a1:1b:50:
                    20:44:7c:bc:9f:d6:6c:0f:75:85:c9:7e:19:4b:ce:
                    79:74:6a:1f:ff:8e:f7:6f:39:e7:a1:83:60:cd:a0:
                    74:e2:e3:c3:ed:6f:43:76:6c:af:b7:24:77:3b:a7:
                    ca:c3:27:7c:2e:78:7e:c3:bf:d2:3d:93:37:5f:be:
                    d1:61:14:c4:a8:df:31:8a:94:da:03:59:84:6c:15:
                    7f:c7:dd:75:6a:2d:23:67:47:95:e4:9f:2a:88:47:
                    3a:5f:c2:1a:0f:a9:cb:27:d2:a6:6c:ec:d3:06:0f:
                    c2:67:02:52:21:35:3a:99:56:03:2c:ed:dd:29:d8:
                    77:16:81:b8:c7:bf:af:06:63:f6:01:a6:9e:89:06:
                    f2:6d:bd:77:69:e3:c9:c2:9d:78:a1:e0:39:4c:d5:
                    62:5c:03:64:af:b7:c9:59:a6:8e:89:30:9f:92:33:
                    a5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9A:E0:13:5B:78:FC:75:5F:C7:1C:99:D0:B7:67:61:F0:9F:0D:59
            X509v3 Authority Key Identifier:
                keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:cf:36:11:ea:72:c5:fb:29:59:7f:c6:e6:30:2d:82:26:fd:
         59:57:bc:60:72:6d:28:ae:68:32:89:ee:3c:e8:80:a6:e5:05:
         b9:22:91:75:5c:6e:03:d9:e4:33:d0:c3:2e:ee:b3:53:31:b8:
         8b:87:2f:21:94:52:f0:fa:c8:95:4c:49:df:da:0c:6e:48:56:
         79:3d:88:36:5e:fa:fc:d3:e1:d6:5c:c5:61:67:c6:44:8b:81:
         b6:08:99:43:80:48:2e:cc:5f:5e:b0:85:86:85:71:8e:94:36:
         8c:ba:44:0b:4b:b2:9e:64:bd:0f:03:de:05:36:c2:b1:0e:06:
         41:a6:9f:53:fb:95:61:f6:f4:7b:19:96:0b:8c:35:37:f2:65:
         14:1f:be:4f:07:1e:b4:fa:f1:97:9c:66:40:be:d3:2a:3c:8b:
         d7:a8:2d:35:7d:61:1c:d3:de:06:4a:8e:f4:99:74:5c:35:2a:
         59:a2:23:b0:ec:34:5e:8f:78:e4:a2:3c:82:59:b5:20:14:b5:
         2e:82:2c:d9:68:85:9e:97:c1:19:d6:bd:4e:d6:1f:ca:41:d1:
         f9:85:4d:b5:0b:e6:6a:39:a6:77:1b:bb:03:c1:a3:6e:ca:7a:
         64:f7:a1:cd:10:b0:89:54:30:56:f5:30:1a:46:3c:1f:5d:7c:
         93:8c:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:01:10 2025 by rpki-client