This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
File:                     rN673IrqemETaTGDOGOx454Bfic.mft (raw, json)
Hash identifier:          VWC4b/dZ186nXoF6Aa8BJDb586FNCAbZyAqqHfWuQNE=
Subject key identifier:   78:39:5A:C3:A5:6E:3B:A5:8B:E8:79:B1:77:F9:41:AC:E7:C1:69:66
Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27
Certificate issuer:       /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
Certificate serial:       0B6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
Manifest number:          0B62
Signing time:             Thu 18 Dec 2025 18:51:06 +0000
Manifest this update:     Thu 18 Dec 2025 18:51:05 +0000
Manifest next update:     Thu 25 Dec 2025 18:51:05 +0000
Files and hashes:         1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: 6uMZwmk9PpVQCnNuaAPmbmD7Xo05nO3JDDBH70cHk4A=)
                          2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: zKy/yyxo1KuNb1lr1bEjLMk/9ZIle0kY/A3BTe9o8dE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl
                          rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2927 (0xb6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FD55, serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
        Validity
            Not Before: Dec 18 18:51:05 2025 GMT
            Not After : Dec 25 18:51:05 2025 GMT
        Subject: CN=69444d1a-47e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:41:47:ae:4d:4b:74:55:02:3c:c9:86:ce:77:
                    15:ee:8e:30:a8:0e:7f:0a:00:76:b0:a6:0b:49:43:
                    91:45:02:99:fd:df:0d:b9:f7:33:76:d4:0a:27:b8:
                    96:a6:fd:e5:a6:8f:da:ec:a1:cb:ef:ee:d4:20:c9:
                    bf:99:3a:b1:31:ca:09:5d:d0:2f:a4:a9:55:d8:a2:
                    35:70:6f:1c:64:df:91:54:b8:3c:d6:64:93:87:02:
                    82:6f:8e:fa:87:ce:75:02:01:47:a5:b8:67:72:f4:
                    d0:74:fd:a2:40:04:db:ca:de:d7:73:b0:c8:c5:cf:
                    62:c1:c4:54:e3:f7:68:f9:3d:e0:29:e6:58:8f:83:
                    a4:74:6c:3c:f6:8a:5a:b3:2b:c0:d6:8a:91:11:58:
                    ae:92:1c:4d:ef:1a:aa:1a:f7:1c:28:5c:a3:9a:7f:
                    e5:02:13:05:a7:a9:25:c3:f2:f8:f9:42:d7:54:89:
                    c8:ae:10:38:1e:de:1b:64:37:c5:8f:67:b6:8d:b4:
                    3a:7c:57:c1:f8:3c:c0:99:61:49:27:3e:4d:17:68:
                    61:11:95:6e:ee:b5:38:dd:19:be:91:09:c0:9b:16:
                    81:b5:7c:65:d9:26:e2:52:b3:c0:ea:f2:93:20:52:
                    40:26:25:c1:f5:1c:f7:ed:c2:69:91:f5:c5:24:00:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:39:5A:C3:A5:6E:3B:A5:8B:E8:79:B1:77:F9:41:AC:E7:C1:69:66
            X509v3 Authority Key Identifier:
                keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:18:8e:66:b0:ac:4e:d7:e9:3e:cb:ea:f5:ab:6c:be:19:a3:
         47:fe:14:36:da:eb:a5:43:21:2a:96:b4:09:ed:21:7d:13:69:
         0f:1f:7e:ca:41:7b:a2:1e:c7:f2:f8:49:72:3b:ba:ae:98:03:
         1c:2b:b9:fb:ae:67:89:80:62:4d:83:30:6a:5d:ab:1a:7f:14:
         2d:46:95:03:70:86:83:0c:59:f2:6d:b1:fd:93:89:50:b5:2b:
         21:86:0a:bf:52:bc:df:d5:53:de:98:53:a3:3d:f4:14:ac:e4:
         de:a4:b5:b8:2c:fb:e1:05:1d:db:d2:45:e2:a8:41:87:ec:bd:
         9b:a9:bc:66:17:63:29:6f:9b:70:06:ba:cd:8b:cc:a9:d7:e8:
         38:8c:3d:e9:d1:38:de:6a:93:82:97:04:dd:07:7a:ee:a5:80:
         34:36:04:f0:3e:c5:fe:43:f0:e9:51:07:86:f7:bc:8d:de:d3:
         44:c4:b9:b3:f0:46:8b:cb:ec:86:c3:cf:ce:bd:60:eb:4c:20:
         37:8d:30:0e:1a:c0:84:e1:9d:14:2e:83:d3:29:4a:ca:34:49:
         13:ce:8b:6b:47:de:e9:70:80:7c:a3:5f:78:ad:49:64:a2:ef:
         8b:21:13:db:84:11:e2:4c:04:89:84:bc:4e:3f:5d:31:12:ff:
         54:88:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:58 2025 by rpki-client