This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
File:                     AtoTJ_UsQCOjghrIeFDJF9joNSc.mft (raw, json)
Hash identifier:          QCMeZpQ2ylbFng4uHY3QapaHZHXIg6katEKx2CfkDpE=
Subject key identifier:   74:B6:BF:74:44:14:B2:EF:7B:11:CF:E7:01:2C:E2:FE:F5:94:54:D7
Authority key identifier: 02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
Certificate issuer:       /CN=A918DB7E/serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
Manifest number:          F5
Signing time:             Wed 17 Dec 2025 04:47:15 +0000
Manifest this update:     Wed 17 Dec 2025 04:47:14 +0000
Manifest next update:     Wed 24 Dec 2025 04:47:14 +0000
Files and hashes:         1: AtoTJ_UsQCOjghrIeFDJF9joNSc.crl (hash: uUmxT9lZVsirAcGal0kB8DR3IYbPHkpbx6OJDTWiATQ=)
                          2: CE1E14AE64DC11EFBE5A023AC4F9AE02.roa (hash: 54Ea1mTVG8VfmRw/L9YxXLSKvOdr6tHDGBcwWayi7ek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl
                          rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 03:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DB7E, serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
        Validity
            Not Before: Dec 17 04:47:14 2025 GMT
            Not After : Dec 24 04:47:14 2025 GMT
        Subject: CN=694235d3-8f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:44:38:3f:38:27:da:70:9d:54:0b:5e:5e:
                    94:cf:7b:b5:ee:c7:02:d1:05:0e:4a:c6:c6:23:93:
                    7a:dd:c6:fd:2e:f2:3d:ce:69:f7:5c:c3:1c:7a:37:
                    b2:b3:97:88:54:bb:fc:cc:b7:0c:af:31:cc:d0:f1:
                    6d:d7:ee:40:b3:94:b0:cb:20:20:93:d6:0c:69:5b:
                    ca:ed:ce:f2:21:b8:35:8a:99:0b:33:17:47:e8:e1:
                    fe:d8:9d:e2:10:be:c7:e2:e5:02:f1:f8:b8:be:a3:
                    26:18:85:3c:ef:08:8a:f9:00:88:d6:18:7b:66:52:
                    60:ac:bc:e5:56:82:76:a6:0b:c8:55:85:94:6e:e8:
                    30:27:27:5c:02:45:66:a7:dc:a1:1c:64:06:4e:72:
                    ca:2e:97:eb:1c:b1:cc:23:1e:b8:91:07:a2:bb:48:
                    25:7b:7d:8f:34:bd:06:0d:a6:12:72:14:30:9f:63:
                    85:c5:d8:55:03:96:bd:c0:3f:28:6e:08:68:f0:db:
                    0e:47:ee:c8:24:82:34:68:14:9b:99:4a:5c:b1:7d:
                    25:40:2f:cc:7a:f1:3e:b1:5d:ef:84:05:38:ec:87:
                    9c:e6:92:4d:85:f2:19:81:2c:00:ff:72:83:0c:fb:
                    98:f8:83:bb:13:10:07:28:3e:64:d5:68:1d:eb:9d:
                    70:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B6:BF:74:44:14:B2:EF:7B:11:CF:E7:01:2C:E2:FE:F5:94:54:D7
            X509v3 Authority Key Identifier:
                keyid:02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:09:a5:af:7e:3a:14:14:18:49:e7:20:ec:84:e5:3b:3f:17:
         39:f4:e6:0f:00:78:d0:eb:2f:a2:0a:d5:e1:a2:d4:e3:d7:75:
         da:62:6d:ac:9e:a6:31:a2:22:22:06:5b:dd:65:a4:10:6a:05:
         e8:19:a6:9d:e3:cb:dd:1e:51:ba:a9:81:42:b9:21:b4:32:e5:
         1c:90:80:d8:80:0d:b3:20:1d:a9:21:3e:14:a1:4c:82:27:ef:
         5d:20:0e:40:4b:9e:89:d2:37:17:52:ee:f6:d2:9b:a9:56:88:
         8d:d2:05:af:2c:b2:d1:54:2e:cc:57:81:44:d9:89:2d:10:8b:
         f0:5e:8f:52:fa:d7:53:b6:91:59:34:de:8d:00:7c:45:59:b6:
         28:36:58:2b:d1:6f:a7:dc:aa:ae:c3:6d:2a:7a:e2:48:1c:8a:
         06:07:95:15:ce:bc:6b:7e:24:bc:26:95:43:81:a8:1a:73:cb:
         1a:6f:17:f8:76:c9:13:27:be:d3:47:e8:44:35:f1:5f:27:25:
         09:84:50:c6:cb:67:d2:70:7d:22:70:1b:a3:fd:6c:18:1c:5d:
         8c:eb:ed:ec:72:22:14:a5:41:73:66:d4:09:b4:6d:01:0f:ba:
         0d:40:2a:57:b3:e3:5d:72:f3:0a:fc:78:dc:20:97:5f:8d:77:
         28:6d:57:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 06:15:03 2025 by rpki-client