This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
File:                     k8C6F5rKocB50zxmk_RGcBBPzZg.mft (raw, json)
Hash identifier:          sRKeacwbxxLn+KUTtmfw/jR9oLGAzJNT4i6JoDysf3U=
Subject key identifier:   D8:85:F5:C0:9A:11:4E:AF:05:5F:B1:E4:31:14:80:C1:63:15:86:00
Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98
Certificate issuer:       /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
Certificate serial:       0251
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
Manifest number:          024C
Signing time:             Fri 19 Dec 2025 00:59:25 +0000
Manifest this update:     Fri 19 Dec 2025 00:59:24 +0000
Manifest next update:     Fri 26 Dec 2025 00:59:24 +0000
Files and hashes:         1: k8C6F5rKocB50zxmk_RGcBBPzZg.crl (hash: M1vuwwbWBSQLXCKlgfzoO8cYCWS+cbZNy7jZeEX8yiA=)
                          2: 6F57F77659AF11EDB5683587C4F9AE02.roa (hash: mvL+Nx41RdHY+v59BWP5LMWkyChMsslC0cZzMH9xusc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl
                          rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111788, serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
        Validity
            Not Before: Dec 19 00:59:24 2025 GMT
            Not After : Dec 26 00:59:24 2025 GMT
        Subject: CN=6944a36d-8155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:62:f7:16:45:7c:a9:d3:2e:7d:f4:04:9c:
                    91:46:2e:d8:b1:4e:5b:c0:d9:c4:2c:95:7a:6e:85:
                    74:b7:65:eb:2a:12:72:0d:56:95:ea:4d:4e:16:01:
                    f6:6d:78:2d:b7:c6:da:2f:fe:88:bf:21:4c:dc:49:
                    7f:86:3c:ac:9e:0c:91:2e:e0:7a:e0:46:53:07:c6:
                    30:57:f5:fe:00:a7:97:43:95:d5:8d:4d:08:16:04:
                    c2:dc:8e:ff:af:3b:70:fc:0a:fc:42:ad:af:d3:7e:
                    eb:5e:3d:1f:39:5b:cd:89:7e:0c:53:6d:f6:bd:3d:
                    ec:8b:d9:93:86:d6:87:5d:ef:e3:71:58:75:43:2b:
                    56:44:a6:d5:75:4c:d6:b9:f5:51:c9:6d:fd:97:32:
                    28:cf:38:da:49:78:59:f4:57:45:c8:82:c9:22:e3:
                    13:7c:8a:4c:69:f3:98:3a:3f:56:bf:3d:83:49:d9:
                    47:5e:2d:ef:93:01:56:0e:82:a1:d2:99:aa:dd:b4:
                    77:a3:b9:42:ea:2e:2b:36:33:05:48:a3:19:d4:be:
                    cd:e2:4a:63:fb:25:b9:57:74:0e:f7:f0:ab:5f:fb:
                    8d:20:d5:10:ec:ff:45:e9:65:da:74:ce:3c:9f:06:
                    7a:f7:e3:d4:ab:76:90:5e:fb:86:47:ad:f3:b7:9d:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:85:F5:C0:9A:11:4E:AF:05:5F:B1:E4:31:14:80:C1:63:15:86:00
            X509v3 Authority Key Identifier:
                keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:14:e5:2d:fc:42:8e:f4:93:cb:4c:2f:2c:a6:57:13:31:ed:
         f8:18:b4:71:45:4e:52:b6:d0:74:63:1c:ba:f6:d2:e7:88:57:
         df:66:0a:92:3f:4b:6f:c3:1d:29:e7:38:d4:51:6d:34:fb:54:
         d5:b6:8c:d3:17:86:e1:a9:85:bd:8f:b6:9d:68:37:c5:16:db:
         0d:68:6a:78:3f:0e:f0:45:49:d7:1f:bc:94:aa:52:7b:44:18:
         73:b5:d2:8c:6d:a9:ff:83:65:ed:3e:56:6e:6e:a4:45:c1:d9:
         40:b4:d7:3e:5d:f5:3e:e6:86:4d:c4:bc:a0:82:61:2e:1d:f3:
         0a:ff:7c:4f:60:a9:83:31:07:dc:b3:b9:0e:f9:b1:4a:6d:96:
         46:45:d4:0d:a5:25:f0:7e:cb:88:6f:a7:7d:95:1d:4d:58:aa:
         fd:4b:45:e4:f6:19:ab:6b:22:41:c6:d3:e4:39:86:03:e4:2f:
         ad:82:b5:49:38:49:9f:48:db:0d:f9:3c:83:8b:76:9f:d9:b8:
         a4:8f:b9:f4:e0:07:32:99:b5:80:d8:ac:96:f0:36:a8:11:9d:
         b6:f2:56:21:f5:91:27:24:75:7a:26:43:98:12:83:f9:16:7b:
         02:66:d8:8f:5e:70:dc:76:93:5f:f5:24:d7:df:97:39:a3:01:
         45:46:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:36 2025 by rpki-client