This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
File:                     tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft (raw, json)
Hash identifier:          lolLRAnvv+SrYqocB5Zim00YyvdW+vWeu9DumXxHHfg=
Subject key identifier:   0B:2A:1C:8A:13:BD:B6:43:EA:F0:A4:9F:B2:8C:AD:92:1F:37:2F:C4
Authority key identifier: B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04
Certificate issuer:       /CN=A918E85E/serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
Manifest number:          013F
Signing time:             Tue 23 Dec 2025 03:22:10 +0000
Manifest this update:     Tue 23 Dec 2025 03:22:09 +0000
Manifest next update:     Tue 30 Dec 2025 03:22:09 +0000
Files and hashes:         1: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl (hash: epwa4/XX8bn+tybh1FazaQ1ae9znXPN6gmwWw0H/zss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl
                          rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E85E, serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
        Validity
            Not Before: Dec 23 03:22:09 2025 GMT
            Not After : Dec 30 03:22:09 2025 GMT
        Subject: CN=694a0ae2-824a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:5c:cf:cb:f9:d0:73:f0:22:c4:3e:7b:25:
                    d2:3c:ac:fb:89:67:ec:68:b2:3b:ba:eb:81:5d:68:
                    fd:a1:75:39:9c:ed:86:a2:81:bd:73:e4:c8:05:32:
                    96:b3:4b:02:70:2c:d7:33:1d:05:3d:7e:bf:9d:d1:
                    5a:27:18:2b:59:51:bc:9c:ea:05:4d:30:c7:d5:e6:
                    e1:e0:2e:f2:79:72:fe:c7:4d:3f:5c:3b:8c:05:3e:
                    af:f8:16:b7:fa:60:34:7d:2f:be:1e:a7:1d:47:c2:
                    44:b4:66:f4:32:27:92:60:a2:1b:29:f5:9d:0e:bf:
                    93:f1:c6:6d:3c:34:53:7e:27:d2:32:5f:94:e2:25:
                    a6:36:cf:5b:8b:3e:2f:4a:3d:5a:c4:ae:81:60:89:
                    25:4b:28:fe:98:0a:b3:62:6e:3b:42:eb:a4:e5:35:
                    4b:a7:76:4f:a2:fc:23:b3:a2:97:ec:40:9e:8a:f8:
                    6b:c4:4f:a1:cc:5c:b7:72:ac:6e:95:9a:9b:cc:e7:
                    d5:b7:bc:a2:65:cf:24:7f:02:c8:8e:34:41:09:35:
                    31:f5:5e:aa:63:ee:da:44:74:6d:38:6c:a0:ac:04:
                    9a:e2:5d:fd:a6:b0:dc:d1:46:d4:e5:f6:e1:22:be:
                    d1:47:f1:b4:69:4b:c9:40:c8:3f:df:ea:b9:65:1c:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2A:1C:8A:13:BD:B6:43:EA:F0:A4:9F:B2:8C:AD:92:1F:37:2F:C4
            X509v3 Authority Key Identifier:
                keyid:B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fb:a7:41:8b:7f:36:92:66:64:bb:68:1a:71:63:57:12:c1:
         ac:d2:3a:93:83:e5:e3:85:6c:56:59:9d:24:07:c9:9c:e4:3b:
         04:2f:97:31:3a:02:8e:6f:ec:de:cb:58:83:35:4f:e6:a6:e5:
         ac:ad:8c:1b:c3:3d:0f:ed:bd:7a:45:ca:32:f4:44:71:c0:bf:
         b3:22:29:ee:93:7a:e0:06:01:bd:29:ce:48:56:b8:a7:c3:1b:
         64:cf:f2:03:1a:f6:9c:ca:0a:06:de:73:f2:9b:7b:07:2b:56:
         a6:1b:26:19:fc:07:57:42:65:f7:e8:33:33:e8:27:1e:5e:be:
         9b:a4:28:1b:a9:d7:5f:09:83:cc:3b:6e:53:c5:2e:56:34:10:
         22:c0:f6:f0:8f:88:72:b9:4c:95:13:f2:20:e1:2e:92:e4:4a:
         85:0e:d9:9e:38:e8:22:2e:ff:f7:15:58:c9:c8:11:e9:81:1b:
         a6:b1:13:7a:cb:e7:7d:07:23:54:b6:98:7c:3e:d3:cb:f5:94:
         bc:24:29:3b:2f:4c:64:6f:83:d0:7c:0c:be:4d:0d:dd:78:dc:
         aa:b7:d8:51:ed:22:be:2e:4f:ea:a4:7c:35:56:0b:64:ed:d3:
         1c:f0:fe:58:0c:5f:c2:90:87:a5:a4:1f:43:8a:86:be:29:69:
         ad:f9:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:12 2025 by rpki-client