This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
File:                     s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json)
Hash identifier:          aCHm9o52imJRXv5AxjTcBtR4VqYgvXOQs4Ar6AoIliY=
Subject key identifier:   57:B5:7A:2A:95:24:4F:31:19:1F:B5:9F:09:DC:8E:D2:0B:A2:E1:0C
Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
Certificate issuer:       /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
Manifest number:          0207
Signing time:             Tue 23 Dec 2025 01:22:19 +0000
Manifest this update:     Tue 23 Dec 2025 01:22:19 +0000
Manifest next update:     Tue 30 Dec 2025 01:22:19 +0000
Files and hashes:         1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: fJdumYVFHeGngqWrharZbwHHR/EAh5LwEdb7uPFPOYw=)
                          2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
                          rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
        Validity
            Not Before: Dec 23 01:22:19 2025 GMT
            Not After : Dec 30 01:22:19 2025 GMT
        Subject: CN=6949eecb-1d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:52:c6:b5:a0:1f:dd:94:ab:f7:a4:ba:aa:
                    1c:5a:53:26:56:24:66:5b:87:6e:90:6c:2c:54:c8:
                    92:9f:0c:1b:9a:40:10:b1:07:bc:f2:33:80:5e:fb:
                    53:45:9e:e4:84:a3:22:34:d5:e6:1a:fd:54:dd:84:
                    86:c5:c0:f9:d9:c0:90:9e:cb:f6:6a:4c:34:f1:33:
                    32:c3:62:16:58:7d:45:ca:f6:f5:81:5a:ee:19:d0:
                    83:21:31:30:85:f7:fe:fb:45:e2:3e:70:d0:21:59:
                    1e:1d:68:3a:93:61:df:28:ea:0e:e2:ab:1b:9a:8b:
                    23:9c:2b:44:39:8f:19:d9:26:6d:4c:af:e5:2b:95:
                    0a:b0:e0:c0:25:04:43:74:6f:9c:aa:85:44:ba:1c:
                    0e:6b:00:22:aa:7e:e5:44:9c:81:c8:32:0f:b0:68:
                    18:e7:68:ef:7d:3e:a1:f2:01:12:52:87:c6:ac:e6:
                    a3:01:96:df:4d:46:fb:08:98:02:1a:ab:e7:b8:85:
                    a9:85:dd:f4:ca:2f:4e:04:90:4d:4b:b7:94:e1:fd:
                    32:68:13:01:d3:1c:eb:e2:74:6f:2b:28:70:ea:b0:
                    97:d0:ed:0c:86:c2:5c:92:af:2d:ee:df:2f:2c:35:
                    c1:e8:61:30:f1:2a:98:03:61:9f:86:f8:4d:07:58:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B5:7A:2A:95:24:4F:31:19:1F:B5:9F:09:DC:8E:D2:0B:A2:E1:0C
            X509v3 Authority Key Identifier:
                keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:40:38:71:93:60:f2:d9:5a:81:e7:de:9c:8d:d9:8d:7e:
         4f:58:64:7a:b6:25:d2:de:7b:28:86:56:c3:eb:e3:1a:d4:e3:
         c5:7b:fd:82:c6:68:00:0d:f6:f0:d6:92:2c:0e:2c:81:b2:b9:
         d0:90:80:8d:82:5c:7c:17:4a:8c:0f:89:86:21:1b:eb:c8:be:
         9f:0b:65:3b:42:ab:87:21:9c:06:19:ed:0a:c1:4c:9f:43:50:
         e8:a0:48:02:62:0c:54:34:70:f6:07:31:08:0c:49:8d:d9:2b:
         ca:f2:fa:29:ba:f6:00:35:47:ca:c2:31:0a:83:8e:12:fb:8d:
         7b:e6:55:35:d2:ac:9c:b9:4c:95:01:f6:80:42:73:f9:f3:c3:
         5a:2d:06:80:22:1e:0d:fd:a9:ea:82:bf:25:b8:f3:c5:55:c3:
         ee:da:68:61:fa:18:a3:39:05:2d:e9:b3:c5:9b:2c:7a:4a:00:
         3a:60:aa:c8:3e:0c:d6:bf:8c:de:55:64:94:ff:22:b1:22:ec:
         07:8a:5c:2d:15:8a:d7:96:46:f0:48:be:f2:e2:c9:85:f6:19:
         a2:f7:c6:65:d6:eb:f5:ee:d9:b7:36:2f:a3:94:15:6a:2e:cd:
         45:61:2c:a0:99:2f:e2:8c:ce:6f:f6:7c:10:1f:15:16:d1:57:
         13:d6:9a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:46 2025 by rpki-client