This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
File:                     SIlwUGJk75bYHsEuar0lbbMP3Po.mft (raw, json)
Hash identifier:          f2xxrSwq5pwpQZSgb1Jj5rm4THYm6wWoSVtcaTpvvr0=
Subject key identifier:   18:E9:D3:B1:2D:51:85:5C:30:65:90:E1:8E:42:5F:DD:41:C5:28:49
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Certificate issuer:       /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
Manifest number:          01E4
Signing time:             Sun 07 Dec 2025 01:35:25 +0000
Manifest this update:     Sun 07 Dec 2025 01:35:25 +0000
Manifest next update:     Sun 14 Dec 2025 01:35:25 +0000
Files and hashes:         1: SIlwUGJk75bYHsEuar0lbbMP3Po.crl (hash: 4ARyPOkLq6kfSei7marP+UEpZF8vkXVJIYMfh9YhR7M=)
                          2: 627A2B5C6E8211EFA8F9497EC4F9AE02.roa (hash: GDYTVh4gyl7O9JzQyRBJqT3HYO/YJl9I+B0Gy9Lz2Cc=)
                          3: A460738A366311EEB376DC3AC4F9AE02.roa (hash: 0NoO1H2x4iLqPGTPjj6vdQCUi1d5uzF87/kugyQBVZA=)
                          4: A73AF738366311EEB376DC3AC4F9AE02.roa (hash: Q2j+bx3N3ZdUKPXJTepPxaW/OkIMk2izDVndHTAeFvA=)
                          5: 99A281E8BC3411EE878F6918C4F9AE02.roa (hash: x/8WQYFzZJjd6qiztbaiX3Fhr5RPTxAWezVDeewWTpg=)
                          6: A6254C72366311EEB376DC3AC4F9AE02.roa (hash: sbz94/ghA9Z8Yf2KftdiTiUietfmj4zdumVvStOwteg=)
                          7: A4E3DD6A366311EEB376DC3AC4F9AE02.roa (hash: F/8OplCzxxbsHxuvcFxtuR1UH/SV8pdy21RejCPpR20=)
                          8: A6A9297A366311EEB376DC3AC4F9AE02.roa (hash: Q/tfph6nEYImSVUPIwrVwxqRFftY0TuEkG+wERHRvDQ=)
                          9: A87D6400366311EEB376DC3AC4F9AE02.roa (hash: 1wC1Zjtr4j1pOe9r95SiDjCvJHvrP4BbdROmwODnYXg=)
                          10: A5A25326366311EEB376DC3AC4F9AE02.roa (hash: gx3HIUe1RGtDm6y22ZFweid6K0sud9BNrhfyZltCrH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
        Validity
            Not Before: Dec  7 01:35:25 2025 GMT
            Not After : Dec 14 01:35:25 2025 GMT
        Subject: CN=6934d9dd-2b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:98:56:2d:48:2e:61:ac:e3:d5:4f:3b:75:
                    07:de:1b:94:ac:dd:09:bf:2a:a6:be:4b:b8:21:ea:
                    37:59:ae:4d:a4:0c:89:3f:92:27:da:23:79:4a:9d:
                    a2:8a:2e:05:8e:f5:f2:2d:c5:1d:ab:d8:fa:3c:5f:
                    9b:c3:8c:c0:1a:02:2a:d9:49:fe:fd:f6:5e:66:c1:
                    3a:18:8c:71:75:20:b3:ab:87:7d:8f:5d:2a:6f:14:
                    6c:74:24:f7:df:f9:b4:d8:59:f2:85:fb:d1:ed:95:
                    d5:8d:ce:f7:1d:0a:2f:ac:45:39:ed:69:77:f0:de:
                    e1:44:8f:fc:05:86:02:c3:ed:0a:b7:49:22:24:40:
                    a5:71:61:14:a9:30:82:a9:b9:55:f1:f2:84:52:cf:
                    af:7c:95:ed:bb:46:39:02:12:70:e4:ed:ba:d0:a8:
                    04:f7:e2:e4:80:50:27:32:9d:0c:01:66:d6:e2:6f:
                    89:ed:87:e3:d2:c5:ff:ba:57:ac:7c:65:23:da:ca:
                    9a:d1:49:e5:e1:2f:16:74:4b:ed:20:5e:24:cf:b2:
                    10:0e:61:af:1c:b4:f4:a1:df:76:19:4e:0e:f8:2d:
                    ca:10:97:7f:ea:0f:4b:21:8b:7d:df:b5:6f:a0:e8:
                    42:95:9c:9e:f1:b0:67:73:e1:a9:2c:24:98:c2:79:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E9:D3:B1:2D:51:85:5C:30:65:90:E1:8E:42:5F:DD:41:C5:28:49
            X509v3 Authority Key Identifier:
                keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:0e:bc:3b:a8:02:a2:7f:60:0a:db:8f:5b:1d:62:16:41:ee:
         8a:8e:27:61:a9:55:b5:16:d3:a1:57:70:2f:f0:72:b9:29:99:
         eb:99:ac:2b:6e:00:30:33:f9:13:2f:73:7a:b1:c9:26:45:0f:
         49:96:8c:ef:63:59:d7:5a:27:67:21:26:b8:f0:83:fe:fb:05:
         ab:0e:67:6f:47:29:7a:af:f5:83:de:bc:c7:6a:0c:52:a8:8c:
         a7:ea:84:f1:22:fe:47:8e:c1:e3:5a:5f:e2:db:17:95:ff:c9:
         75:9d:66:d0:08:a9:13:69:fc:ca:66:4c:84:0c:33:0c:59:7a:
         88:01:bc:18:9c:1d:84:58:e4:f8:fd:25:b1:c0:72:51:64:08:
         92:b7:33:5d:c5:01:60:7a:2b:30:51:09:70:0b:4d:46:f1:3e:
         62:68:ba:e6:3d:4d:c2:a5:c4:c9:91:be:b3:a3:ab:ae:e2:05:
         8e:ea:6c:cc:28:69:b7:f0:c5:12:eb:e8:8e:27:ab:54:4c:37:
         dc:c1:d3:ed:7d:e9:7c:ce:79:1d:e7:a2:0f:bd:3a:d5:e0:a0:
         f4:cb:2a:b5:4c:b8:1a:dd:bf:97:d6:cf:d7:2d:10:0f:b8:95:
         83:c8:f4:43:49:c0:b4:bc:d5:03:4c:2e:0c:51:d0:4c:ee:9b:
         90:14:e1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:24:50 2025 by rpki-client