This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
File:                     8p8VNXR1uHRvrXiTag_NhSbi1hM.mft (raw, json)
Hash identifier:          Qxmo5x/28IjoS6NmSOEq/4Da7N2Ab2kPYJJas82HuY8=
Subject key identifier:   AD:A2:F0:AD:EB:58:1D:E6:AC:6A:AF:48:DB:06:BC:16:61:45:72:E5
Authority key identifier: F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13
Certificate issuer:       /CN=A911DB66/serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
Manifest number:          A4
Signing time:             Sun 21 Dec 2025 05:20:56 +0000
Manifest this update:     Sun 21 Dec 2025 05:20:55 +0000
Manifest next update:     Sun 28 Dec 2025 05:20:55 +0000
Files and hashes:         1: 8p8VNXR1uHRvrXiTag_NhSbi1hM.crl (hash: R4YFBf5Ws1/CSzWl7/jUoYHaNOsJr74PkG9nxjJp/kc=)
                          2: 879CFF8EE09E11EFAB364253C4F9AE02.roa (hash: kCo0wcr5hL64P6FXIbDjXCO02F9fPfzca6P+P/sgaPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl
                          rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 05:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DB66, serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613
        Validity
            Not Before: Dec 21 05:20:55 2025 GMT
            Not After : Dec 28 05:20:55 2025 GMT
        Subject: CN=694783b7-f5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:67:d9:52:52:74:c2:81:f3:2c:53:f7:bc:
                    b9:ed:bf:bd:c2:00:68:a4:b1:9c:63:9b:f9:e4:e3:
                    be:59:06:7a:8d:84:81:ed:38:a8:03:ca:e9:ce:6b:
                    48:c8:81:c3:ba:53:c2:01:14:1a:30:a5:2e:4a:da:
                    93:59:4b:1b:a1:4f:6f:91:d9:2e:3f:9d:9e:45:4e:
                    c0:43:45:8d:3d:e2:d5:0f:10:c1:07:26:e3:c8:91:
                    3f:84:ef:6d:05:15:07:e3:72:08:11:60:af:5c:c2:
                    80:0f:3d:53:c0:93:da:78:4c:07:e4:3d:26:eb:e5:
                    8f:a7:e9:79:37:63:e5:a0:81:92:40:64:eb:bc:cc:
                    cd:02:2e:c4:4c:0e:b5:c0:7a:15:8e:00:c8:8b:f8:
                    5b:d7:ed:fa:b4:34:fe:d0:34:e8:82:b7:fb:20:e0:
                    51:ff:56:fe:32:71:ea:48:c6:ea:00:d0:52:a3:2e:
                    3b:83:8a:74:ba:73:de:12:e2:4b:65:7a:3e:3a:e2:
                    aa:a5:86:56:59:3a:fa:8d:82:2e:2f:86:56:05:22:
                    97:c9:87:94:9c:24:27:bd:fc:e1:a1:0f:6b:01:90:
                    79:0e:32:3c:31:c6:b9:2c:43:e3:f2:7e:13:2d:68:
                    1d:ce:99:37:16:45:c1:49:1c:2c:c0:d3:df:2d:22:
                    67:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A2:F0:AD:EB:58:1D:E6:AC:6A:AF:48:DB:06:BC:16:61:45:72:E5
            X509v3 Authority Key Identifier:
                keyid:F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:f1:78:42:b6:15:91:10:70:63:0a:05:95:88:07:4a:de:
         8c:eb:67:8b:0c:79:65:31:49:c5:5d:1a:09:fc:31:76:47:cf:
         5d:88:40:48:25:36:1e:5d:44:c9:ce:e2:58:b2:d2:6f:7a:a4:
         53:d7:30:60:be:4b:b1:a9:a6:38:97:59:f5:02:66:a3:a5:93:
         fa:b7:23:58:4a:63:9b:94:1c:27:f9:6d:41:c4:fa:b4:64:74:
         e3:52:6a:c4:4c:85:dc:95:cd:1b:a7:4a:85:30:3c:f8:aa:11:
         1d:e7:9d:df:8d:b5:83:23:f7:85:9e:1d:59:53:43:66:bd:10:
         d3:88:2e:b6:5f:d5:2c:bf:d2:74:b4:e3:8c:0f:ef:a8:20:6e:
         50:dd:69:6e:8d:ed:23:ab:66:4f:9c:99:b5:66:b8:bf:a5:e9:
         49:cb:50:b1:04:96:89:e2:7f:bd:76:82:c1:ff:95:d6:a3:c4:
         6b:a4:5c:83:30:cf:45:ca:6a:7e:7e:88:54:a2:16:c6:c3:5d:
         f1:27:80:c7:65:7c:6e:b8:dd:36:b4:8c:c1:a1:7c:cc:04:03:
         0e:60:bb:06:0d:f7:6b:9f:10:36:b9:e0:cc:ab:f6:91:3a:04:
         14:ac:37:2b:64:6f:f8:d3:71:7b:f2:f8:0a:85:69:47:42:da:
         b0:c3:59:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:43:50 2025 by rpki-client