This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
File:                     dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json)
Hash identifier:          0yGFAsLBHkNsNkSR5DZyRzE5bkEJx6RGzL0nIRnb8pU=
Subject key identifier:   D5:C2:EC:45:F2:80:9C:C8:87:9B:45:B1:01:48:CE:5F:BF:0A:1B:CB
Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
Certificate issuer:       /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
Manifest number:          01BC
Signing time:             Fri 19 Dec 2025 02:13:22 +0000
Manifest this update:     Fri 19 Dec 2025 02:13:21 +0000
Manifest next update:     Fri 26 Dec 2025 02:13:21 +0000
Files and hashes:         1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: 8K+PuJsCKEPH2hYPhsgw1HikcCktxHC6ZyrJODZwvZg=)
                          2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: 6LgZz9VjDAr6MMe5pXsyjBo64OXT91fOAbUroJrtOs4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
                          rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
        Validity
            Not Before: Dec 19 02:13:21 2025 GMT
            Not After : Dec 26 02:13:21 2025 GMT
        Subject: CN=6944b4c2-4f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:9b:d4:3d:69:9a:cb:63:c6:47:d5:88:bb:
                    ca:b9:20:13:fb:0b:b7:8f:9e:8c:76:54:62:8c:34:
                    68:52:d2:b4:42:2b:45:99:71:fc:78:86:99:64:95:
                    11:cc:bc:8a:75:62:36:da:bd:b9:b2:de:02:46:3a:
                    9b:3b:2a:56:60:8c:2f:c0:f4:db:67:ce:be:ab:9d:
                    98:c6:fe:4a:59:47:94:07:c6:a4:9e:0c:a4:7b:5a:
                    30:85:2e:54:cc:81:7e:89:0b:61:7c:7f:a6:16:58:
                    33:c4:ed:01:55:5f:59:64:ec:68:cd:43:fc:c2:88:
                    19:a3:51:ec:c4:27:85:e6:ae:2b:69:ae:01:a2:cd:
                    76:8e:bb:e8:61:da:c7:33:47:d0:2f:3b:d0:d9:c2:
                    af:e9:ec:6b:cf:1c:bc:27:fb:c6:c7:40:47:f0:2c:
                    c0:01:cd:93:0f:d7:f3:cc:11:bf:ec:c4:5a:02:24:
                    59:11:7e:9e:98:b6:03:2e:e3:e9:0c:74:ab:61:b5:
                    bc:c7:1b:23:5b:91:94:da:9f:11:43:f1:1d:8f:f6:
                    5c:35:85:35:9e:41:ec:62:d4:03:76:c7:73:b5:44:
                    46:20:e0:45:6c:98:d7:a7:a8:a2:c0:e1:76:5a:77:
                    58:48:4a:4c:0d:85:63:99:24:ff:76:c8:bb:42:95:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C2:EC:45:F2:80:9C:C8:87:9B:45:B1:01:48:CE:5F:BF:0A:1B:CB
            X509v3 Authority Key Identifier:
                keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4d:d5:5a:5d:e8:05:d0:79:2a:f9:5f:79:cf:a4:b4:1d:91:
         2e:40:3a:e6:57:e4:cd:03:00:74:36:32:9a:ff:87:ef:87:06:
         83:c2:b1:97:46:a1:ba:68:6a:71:df:73:b2:7f:e0:88:78:84:
         10:fb:77:0e:44:4c:4e:1f:12:b2:ba:5a:a4:74:8d:e1:7d:02:
         96:23:06:ec:46:72:9b:19:41:06:25:c8:6b:88:c6:2a:35:eb:
         e5:86:f4:5a:dc:da:fb:19:91:18:d2:28:76:f5:90:c1:14:b3:
         89:4b:5b:e6:89:e9:3e:2f:c2:86:b3:8c:b4:5d:b1:05:8b:ff:
         59:93:83:55:85:ac:06:d8:f6:54:6c:14:4d:3a:fb:ef:43:a9:
         63:e6:ec:7a:a3:ca:65:63:fc:d9:7d:72:28:49:fd:4d:8f:d5:
         3d:a2:ef:e5:c2:8a:db:6d:d6:c4:b3:26:52:48:f7:7e:56:1f:
         00:93:e3:84:a5:8d:eb:cb:26:f6:e0:36:43:a2:f1:1f:61:cc:
         f8:45:7f:55:5b:45:8f:08:21:a5:cf:ec:77:a4:49:16:69:49:
         ac:0a:2b:43:d9:bc:73:22:58:cd:77:53:5c:19:ac:f6:35:b0:
         f8:49:ad:a3:0c:3b:13:d1:84:a9:5b:ad:d9:c1:63:d8:8d:a9:
         68:f2:91:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:38 2025 by rpki-client