This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File:                     B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier:          siIftBDjdfMKUUqLMzpSxfl7XBEQcLIeWX6dxn5mp1o=
Subject key identifier:   05:46:7F:98:8A:4B:98:59:82:73:19:7A:B0:71:A9:FF:54:52:E5:64
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer:       /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial:       705AEB95744A332F9AC4F60F6A1979B7F430203E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number:          06B8
Signing time:             Tue 23 Dec 2025 00:26:25 +0000
Manifest this update:     Tue 23 Dec 2025 00:21:25 +0000
Manifest next update:     Wed 24 Dec 2025 04:11:25 +0000
Files and hashes:         1: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: iwxixaxpgxbdfhn+v3MuTrdcpIwwRvUj+WDFLzC1FjU=)
                          2: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
                          3: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
                          4: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
                          5: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: aiTwY7exOIWYXIKbSyXz+xb7jVL186qs815q9Rt7CIg=)
                          6: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: Y8US0Ocdq6iuACcuu6blfuO/mWF61f4U7kbk1PWrIBw=)
                          7: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
                          8: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 04:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5a:eb:95:74:4a:33:2f:9a:c4:f6:0f:6a:19:79:b7:f4:30:20:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
        Validity
            Not Before: Dec 23 00:21:25 2025 GMT
            Not After : Dec 24 04:11:25 2025 GMT
        Subject: CN=05467F988A4B98598273197AB071A9FF5452E564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:35:8c:a7:38:37:43:35:a0:f2:53:d4:34:
                    4c:8b:e5:8e:81:91:ae:c6:f5:12:e2:c2:c9:9d:67:
                    4d:29:68:42:c7:28:5e:a4:c3:f5:1b:21:4c:df:65:
                    73:a8:a6:3f:50:0b:80:47:5e:7c:6e:ee:c7:31:dd:
                    f2:71:ff:15:5d:84:e2:5d:5f:b9:18:e3:bd:af:4a:
                    f1:15:6a:9d:b8:c6:37:6f:b2:c7:84:c5:8f:18:d6:
                    28:bb:a5:0e:89:c9:35:7d:e7:66:ec:04:a0:d4:af:
                    55:b9:0a:48:c6:d2:84:56:1e:41:f1:69:3a:00:9b:
                    c4:54:d3:75:3c:8e:cf:87:6d:f6:90:f1:c2:2f:b7:
                    ee:1d:47:92:0a:78:9b:a9:f6:0b:de:cb:78:5b:ff:
                    c0:80:6b:0f:97:c0:ac:0c:9a:2a:24:8c:fc:2a:0a:
                    ea:01:20:90:b1:e2:0e:c3:e1:9a:11:b2:f7:a0:b3:
                    f2:5e:9f:d4:6f:f2:e7:af:75:ed:ae:23:39:41:f3:
                    3b:5d:5c:20:be:51:be:8d:c5:f9:ac:9f:19:a2:10:
                    03:70:5e:0e:ea:71:e3:22:c9:da:60:02:24:15:91:
                    f4:f8:88:9c:99:b7:02:44:93:cc:f8:b8:42:3b:02:
                    53:f1:4b:9a:d6:60:3f:0c:2a:20:ad:e0:66:b4:0e:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:46:7F:98:8A:4B:98:59:82:73:19:7A:B0:71:A9:FF:54:52:E5:64
            X509v3 Authority Key Identifier:
                keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ac:2a:93:3c:f3:58:39:9c:70:38:ad:7c:d7:c7:74:aa:6a:
         61:a3:b1:cc:6d:29:31:d9:b7:b4:b3:21:38:af:42:87:a1:52:
         8f:62:dd:a5:22:9f:d8:39:d0:04:3e:9e:53:93:02:73:21:dd:
         2f:6b:4a:63:a8:a9:98:93:c4:55:b8:b0:1b:ff:1a:17:42:af:
         9b:00:45:fb:96:ec:49:44:3f:2d:b9:eb:2f:7c:fe:f0:7b:41:
         5b:de:4a:09:fd:a9:d7:f7:6e:2f:29:44:83:47:83:08:71:ac:
         67:c8:51:10:45:14:0e:72:4e:c7:8b:d1:3b:f6:91:53:59:82:
         11:db:67:22:d6:7f:50:08:5a:f8:05:77:79:5a:5c:5c:79:19:
         18:13:dd:84:c9:eb:b7:ad:33:ec:5a:81:ad:84:79:d9:64:a5:
         7c:f5:05:24:33:63:e8:5f:4f:85:35:3d:6d:f4:89:88:66:1a:
         7a:6a:91:98:de:96:cc:37:5b:d9:be:23:94:60:2a:a9:33:cb:
         d3:a3:8a:18:a4:22:be:f5:22:07:1d:25:84:54:04:2a:c7:62:
         1e:6d:f8:7d:60:8b:f6:f3:1e:05:9b:d7:5d:39:03:07:c9:01:
         ae:9d:ff:e4:15:c7:78:28:76:2a:a3:9f:c7:7c:5a:14:3c:c3:
         61:23:51:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:40:59 2025 by rpki-client