This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
File:                     18TeE2hvQ1WFNoORXlQd7XU66zo.mft (raw, json)
Hash identifier:          G7EQ0EGORh7lyr4Y0+Wby8U94AlFTpueU9uElrrXnoU=
Subject key identifier:   A8:BC:48:57:11:03:6A:8C:C3:50:4C:DA:07:51:DD:F9:19:C2:4B:EE
Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
Certificate issuer:       /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
Manifest number:          0142
Signing time:             Tue 23 Dec 2025 03:32:43 +0000
Manifest this update:     Tue 23 Dec 2025 03:32:42 +0000
Manifest next update:     Tue 30 Dec 2025 03:32:42 +0000
Files and hashes:         1: 18TeE2hvQ1WFNoORXlQd7XU66zo.crl (hash: wc0+4I0hHtVcFe/rS9kG+YY3soUt0U/ZOrmrQ4Tumus=)
                          2: 55FE0314581811F09A0AB17CC4F9AE02.roa (hash: lINB4ZwW6CYB53sylS1MrGaiI2L/l8sq0JnVeRgKpuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl
                          rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C776, serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
        Validity
            Not Before: Dec 23 03:32:42 2025 GMT
            Not After : Dec 30 03:32:42 2025 GMT
        Subject: CN=694a0d5b-dccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:3b:7c:53:55:24:c4:e1:d8:11:4d:50:04:
                    ab:23:43:96:7a:07:f3:60:ae:0d:80:48:d1:2d:14:
                    a8:fc:a0:12:a9:d7:c8:e7:dd:94:4f:07:a4:9d:e6:
                    74:41:df:0e:98:74:3a:be:fc:3a:8b:8e:d2:17:5b:
                    b6:fe:89:75:3e:e2:0c:45:f6:38:7a:fb:c9:af:89:
                    9c:86:d9:31:a0:11:d4:2f:38:61:69:8f:2a:cb:2b:
                    b8:47:20:be:f9:f6:11:ba:b3:b9:c8:d8:41:9f:42:
                    ed:b3:1d:17:6e:36:7a:98:63:00:31:4d:0d:4a:8f:
                    f9:3f:1b:26:35:08:9a:b7:25:a5:ff:ff:9c:aa:b0:
                    87:ab:b6:a9:7b:a5:2f:fa:c7:64:ab:96:a5:f8:07:
                    98:17:cb:14:33:a4:90:cd:3a:c1:9a:da:ef:26:cd:
                    93:3d:06:84:c8:c0:68:84:8b:c5:0b:58:19:e9:09:
                    f1:d6:15:14:38:2e:c2:fc:96:0e:b7:79:42:d1:b5:
                    83:c5:20:40:7a:e6:68:d8:4b:2a:8a:ac:89:0c:c3:
                    de:a5:98:44:f7:8b:89:7f:85:55:8e:db:34:6e:d1:
                    6e:f1:8e:a3:5b:69:89:9a:cf:25:80:59:01:fe:51:
                    f7:2b:d9:03:e8:9b:13:f8:1d:29:a1:1b:cc:c0:43:
                    7c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BC:48:57:11:03:6A:8C:C3:50:4C:DA:07:51:DD:F9:19:C2:4B:EE
            X509v3 Authority Key Identifier:
                keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f0:8b:24:b9:66:34:8c:cf:27:14:06:b8:7c:82:d8:55:99:
         d0:4f:a7:5c:29:42:7c:ca:40:80:f7:89:61:3b:01:3e:c2:e7:
         37:23:7a:df:88:e1:3f:2c:89:ef:d2:fb:af:77:28:30:d5:c0:
         40:0c:6a:47:0f:d3:12:bb:47:e3:cf:47:af:f6:85:02:bc:8e:
         8a:3b:b4:88:d7:dc:16:df:5b:f8:41:99:26:e4:bf:e5:e7:8b:
         d1:8c:3b:ca:88:0e:4d:b2:dc:15:15:12:51:1a:44:b9:18:cb:
         8e:1e:e5:de:1e:19:55:26:d6:b8:81:e6:ac:9d:ef:51:da:d9:
         51:f7:9f:86:8c:85:e4:0c:da:ab:9d:30:29:ab:f8:84:b5:43:
         90:fe:02:a2:48:f1:b1:61:37:b3:49:4e:ee:87:87:e5:a5:4e:
         fa:46:99:0c:de:0a:f8:81:b2:05:5d:6a:58:89:d5:1a:d7:45:
         df:7f:f3:84:13:e4:a4:a2:f8:5a:af:0d:b6:15:6b:e3:f6:97:
         bb:f9:4d:e5:87:d2:ca:8a:c8:c9:f1:ee:f3:aa:64:91:ad:fe:
         17:ae:bc:7c:46:ac:92:9b:5d:cc:6c:37:67:e1:11:75:f9:7c:
         42:2c:0d:90:03:aa:21:34:12:f8:11:86:83:e3:24:da:42:56:
         91:ad:e2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:35 2025 by rpki-client