This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
File:                     aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json)
Hash identifier:          EnWC3GT7r2f4wxOM1o7FZ3sf4Z9PZBcPSC8tNqNgMWc=
Subject key identifier:   8E:DA:31:C6:4C:9B:DB:EE:BF:7D:2C:2B:5E:BF:8A:06:EB:93:81:7F
Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
Certificate issuer:       /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Certificate serial:       0809
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
Manifest number:          0802
Signing time:             Mon 22 Dec 2025 20:21:59 +0000
Manifest this update:     Mon 22 Dec 2025 20:21:58 +0000
Manifest next update:     Mon 29 Dec 2025 20:21:58 +0000
Files and hashes:         1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: BFiP1yb9P52WJA3V0cELqFEE36HDo6CtA6Z0IohwOW8=)
                          2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: OzhrEAQM423OnNsjFX/pRulyswUafC9dzCD/mgitV0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
                          rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
        Validity
            Not Before: Dec 22 20:21:58 2025 GMT
            Not After : Dec 29 20:21:58 2025 GMT
        Subject: CN=6949a867-6b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:48:d8:69:75:29:66:b5:85:c8:86:86:78:
                    35:dc:56:d8:a7:ff:b5:d2:89:7c:22:58:9b:ba:43:
                    da:15:21:be:68:69:b4:90:0a:a2:b4:8d:e4:bb:ca:
                    18:06:fb:cc:67:97:0c:dd:7f:2c:b5:c5:77:ad:70:
                    62:fe:b7:42:95:f3:c2:f3:ff:e6:34:e3:36:90:56:
                    dd:ff:2a:4e:96:f7:90:51:d2:85:aa:f4:18:d6:ac:
                    e4:0e:25:ba:41:d6:69:f3:cb:99:ce:be:94:40:10:
                    e8:cd:90:51:9f:12:4c:47:59:dd:82:14:1e:b8:23:
                    66:90:2c:60:d1:66:68:e9:0b:1c:75:97:d9:ca:82:
                    d7:09:ed:35:6b:e7:87:44:1d:9b:d2:1e:30:aa:54:
                    4a:d0:3e:a6:c6:d1:fe:3b:23:b9:d4:8a:93:28:2c:
                    53:d7:fd:66:d1:49:6e:84:99:95:03:5f:79:c6:e7:
                    62:c7:7f:63:3d:fe:b1:fd:5b:3e:77:8f:8d:bf:84:
                    5d:2c:3e:4b:d3:0f:a5:97:26:42:ef:e8:8d:15:82:
                    9b:2a:d8:95:e4:87:f4:91:d0:2e:1d:0c:b1:8e:b9:
                    2e:a4:44:93:c4:3c:ea:b5:79:7e:f7:e5:71:e3:3c:
                    a7:0f:35:2b:9e:66:87:b2:e3:32:61:4d:9a:fe:cd:
                    09:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DA:31:C6:4C:9B:DB:EE:BF:7D:2C:2B:5E:BF:8A:06:EB:93:81:7F
            X509v3 Authority Key Identifier:
                keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f8:23:d4:14:6a:cf:b5:77:8c:ed:b6:5f:19:33:77:ac:c1:
         3b:83:33:54:97:5f:46:71:3f:27:aa:1c:64:54:74:23:47:4f:
         c3:13:64:81:d8:5b:1f:72:4c:f9:4a:fa:60:9b:40:51:93:5e:
         b7:c0:5c:1c:95:a1:f2:df:0a:a5:42:30:1d:d2:e4:df:13:8d:
         30:1f:e3:e3:ee:04:3c:33:78:45:fc:45:c5:83:7b:e7:c4:39:
         e5:6d:2c:1a:8c:c8:72:45:16:c4:06:d2:60:88:7d:3e:7e:df:
         bd:0d:13:20:c6:16:3d:8d:2e:5e:7d:7f:62:2e:23:2f:ba:05:
         3c:be:61:00:f4:0b:e2:ce:2b:9d:5d:ff:bb:55:01:07:2b:96:
         0d:44:0c:60:d7:05:3c:cf:67:66:5e:11:4a:d8:3d:6b:e2:93:
         bc:31:93:62:8a:57:a4:8b:70:0a:3a:a7:0d:8f:a8:b5:6d:a6:
         f7:95:0b:8e:fd:bd:c1:34:2e:72:d0:bb:e3:a1:69:12:f9:a9:
         9b:3f:41:e7:50:4a:a7:6f:f9:58:98:97:a4:46:be:26:84:2f:
         2a:50:07:c8:4c:86:83:34:7f:36:f9:67:78:5d:a6:d8:83:98:
         14:54:a7:1e:f6:94:da:16:ae:d1:36:31:09:c1:64:16:0e:2f:
         df:52:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:31 2025 by rpki-client