This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
File:                     cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json)
Hash identifier:          9FTpQKh7aksre1g8NLCmg7Mqqg8kZ2kXmfXw/2wp9PA=
Subject key identifier:   58:0F:B2:7C:E9:73:CE:1A:C2:68:97:BA:84:C9:01:EB:6D:9A:D6:9B
Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
Certificate issuer:       /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
Certificate serial:       0388
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
Manifest number:          0381
Signing time:             Thu 01 Jan 2026 00:19:39 +0000
Manifest this update:     Thu 01 Jan 2026 00:19:39 +0000
Manifest next update:     Thu 08 Jan 2026 00:19:39 +0000
Files and hashes:         1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: JV98GbVM+59YEjdnBXqfBw/cDy+rJsYg1vH0Km/qbQg=)
                          2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: c3jeelxHwHjlA2xu0esS5Df34f58Lm6B+pMQ4982vis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl
                          rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 00:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904 (0x388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
        Validity
            Not Before: Jan  1 00:19:39 2026 GMT
            Not After : Jan  8 00:19:39 2026 GMT
        Subject: CN=6955bd9b-8683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:77:4e:55:22:de:e7:9e:87:bf:7f:17:7e:
                    34:f7:a5:8e:40:d4:b2:51:3c:69:bd:72:2c:1b:4d:
                    76:ee:ca:be:d5:dd:ec:1e:1f:26:3f:dc:92:a4:d0:
                    31:61:82:cd:fa:4b:bd:fe:6b:b9:d5:70:fb:e6:18:
                    dc:52:cd:ec:5b:7d:92:42:e1:be:de:8d:21:fc:93:
                    16:18:63:92:f5:88:8c:a3:78:96:11:4b:22:e7:7f:
                    00:59:e3:c9:95:f2:82:39:2f:b9:8a:74:01:f1:26:
                    9f:32:b4:e5:bc:40:1d:c4:81:6c:a4:38:81:65:e8:
                    8a:c3:ce:cb:d4:59:d1:71:cb:23:74:a9:1f:f5:e8:
                    a7:9a:3c:f8:ee:0f:7d:cf:55:c9:2b:3d:81:1d:9e:
                    3f:13:52:99:ef:28:bb:2d:03:59:06:16:e4:06:d0:
                    f5:d1:c6:c0:a0:7d:70:ce:df:f6:ce:ef:b7:61:e1:
                    30:a5:f6:f8:bc:f0:ed:3a:eb:ae:3d:81:0c:a7:82:
                    33:78:9e:ec:6e:d7:d5:42:a2:dd:27:22:b4:1e:aa:
                    2a:2f:4f:59:c8:59:1b:a0:4b:04:68:5b:c7:b0:b3:
                    0e:df:fd:75:d1:54:91:ae:1a:71:66:6c:bf:87:61:
                    13:c1:01:ec:3b:1d:88:93:92:a1:f8:8c:ae:64:dc:
                    ac:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0F:B2:7C:E9:73:CE:1A:C2:68:97:BA:84:C9:01:EB:6D:9A:D6:9B
            X509v3 Authority Key Identifier:
                keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:58:f7:5a:3b:17:3a:1f:d0:70:15:64:f0:e1:1e:fe:14:df:
         2d:08:a0:97:5f:c1:c9:b8:a3:47:f3:d9:85:57:ff:13:2e:99:
         0a:f9:2c:2f:b6:b7:f4:31:76:6d:e6:96:4f:f4:96:e8:fa:26:
         59:62:42:39:bd:a4:32:76:e7:d5:80:65:78:b0:19:e7:b6:5b:
         ed:4b:f5:3e:dc:f2:19:7e:a2:26:17:30:e8:60:81:e0:b2:42:
         99:0c:fa:88:29:44:4b:4a:b1:44:df:ce:6c:07:29:58:d9:db:
         4a:7f:0f:d2:a2:ff:7f:2f:70:d5:70:e5:9c:83:e9:3e:de:5a:
         bb:77:c0:d4:d1:13:ef:bf:53:4f:89:ff:89:8e:8b:8b:34:18:
         6e:76:72:cb:0b:c6:3d:1d:96:da:c2:ac:00:b6:08:6e:4a:fc:
         35:4b:b2:10:d0:1f:17:bd:47:f7:2b:7d:01:d1:c6:9a:ee:58:
         7d:ff:2e:c9:f1:14:6a:5c:ca:50:72:34:3a:14:53:41:1b:39:
         99:c0:d4:46:0f:bd:82:44:3e:7d:8c:2a:c5:b5:85:d1:e9:7f:
         b0:f3:5c:90:a9:13:8f:26:af:94:24:15:0e:44:20:94:cf:d0:
         49:61:7d:90:0b:a8:71:3f:14:33:ed:2f:1a:16:38:99:3a:f1:
         32:a0:dd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 07:28:21 2026 by rpki-client