This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
File:                     51IOJIn_YDiw2HmwRxcPnFGs984.mft (raw, json)
Hash identifier:          ZBmxgNTEjP/PBIX5Xh4nBOE5Dpg8KebUEaR8bl46l24=
Subject key identifier:   49:46:C7:D2:31:D3:52:75:E6:6C:A9:7C:83:29:8A:F1:47:DF:DD:5B
Authority key identifier: E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE
Certificate issuer:       /CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
Manifest number:          024D
Signing time:             Sat 27 Dec 2025 00:50:00 +0000
Manifest this update:     Sat 27 Dec 2025 00:50:00 +0000
Manifest next update:     Sat 03 Jan 2026 00:50:00 +0000
Files and hashes:         1: 51IOJIn_YDiw2HmwRxcPnFGs984.crl (hash: Wp4RANLhydTmLwQQrfZeGRcPtQ0JWop5W7SjXXK2TZ8=)
                          2: 27C38AF4C0C111EE84A55128C4F9AE02.roa (hash: wIZlMBid+1P+5GWXEfhaHDavI2pP5RgKD6YPhcbCvPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl
                          rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 00:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912127A, serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
        Validity
            Not Before: Dec 27 00:50:00 2025 GMT
            Not After : Jan  3 00:50:00 2026 GMT
        Subject: CN=694f2d38-92e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:8d:42:b0:31:90:fa:5c:2c:f5:da:9d:ff:
                    97:e3:1a:f8:11:9e:7b:aa:6d:94:3e:a3:c5:70:c6:
                    6b:81:7a:31:ac:74:de:13:9e:9a:5c:72:0f:ad:ed:
                    65:ad:46:1b:b3:49:00:53:09:00:a3:80:2d:e7:76:
                    f1:c9:ac:a3:5a:8c:53:32:da:bc:00:55:db:19:ef:
                    a9:33:d9:e2:c5:b4:d5:1a:95:72:5e:5b:65:e8:1e:
                    80:46:75:5a:8e:00:33:69:69:62:e1:ad:84:85:7a:
                    6c:8a:e1:96:c6:0b:d1:5b:f9:de:3f:e0:1e:32:69:
                    59:37:8e:7e:64:3a:c9:2d:7f:c3:ff:12:5f:25:1a:
                    1e:09:2d:78:c5:a1:ed:7c:14:6c:04:ba:6c:7d:71:
                    13:bc:6b:c4:4f:0d:a1:b4:4c:f7:eb:f6:7d:9f:62:
                    be:e2:96:37:a2:f6:86:3d:ff:2a:6c:99:06:d8:60:
                    38:5c:bd:f8:f8:d4:4e:15:07:d4:2b:9e:ad:f7:85:
                    8c:cd:6b:e6:46:2d:7b:cc:44:02:56:d0:40:2c:b8:
                    e9:45:11:ba:5f:60:38:11:c6:32:da:61:2a:c5:fc:
                    17:77:8f:90:30:55:76:38:e0:df:f6:7b:42:e3:ad:
                    d7:7a:9e:d9:1a:b1:aa:70:58:34:6f:09:08:e0:c0:
                    bd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:46:C7:D2:31:D3:52:75:E6:6C:A9:7C:83:29:8A:F1:47:DF:DD:5B
            X509v3 Authority Key Identifier:
                keyid:E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:83:7f:14:eb:99:4b:d5:1a:1a:0d:68:8d:1f:72:f2:0c:1a:
         10:1d:a0:a5:58:15:3e:74:e6:c8:86:2f:3f:47:4e:c4:84:dd:
         c8:ce:3e:ce:fb:74:8f:5f:04:79:82:af:d6:dc:0d:5e:30:fd:
         8a:19:ec:bb:e7:45:06:12:2e:b0:24:c3:45:e5:31:3a:e1:a8:
         02:bd:74:47:1d:65:b0:a1:6a:3d:94:75:ab:e4:32:d1:3b:86:
         0c:a0:14:34:23:5a:9d:f6:ff:28:22:88:39:7c:33:6c:f7:b4:
         be:14:72:37:e0:d5:42:ee:cf:3d:66:58:7d:3a:bb:62:d5:c9:
         17:cf:c3:c9:a2:4a:14:6a:2b:f9:35:12:95:63:fd:85:fb:c0:
         95:dd:92:ea:c8:84:9d:91:77:b9:c8:b0:f5:3a:81:3d:40:14:
         0e:bc:90:ce:9c:bb:5c:29:27:a2:87:26:9e:5c:aa:8d:ec:42:
         91:48:70:3e:31:c9:e7:7f:46:63:90:7c:bc:9c:38:c0:11:e3:
         73:74:ba:f3:1c:2e:e6:f6:ab:18:f4:91:17:d8:89:53:59:be:
         ca:02:13:96:18:c9:31:6f:31:b4:68:d7:0e:bb:5a:2e:1d:91:
         48:f8:d0:38:08:bd:bc:ff:37:2e:ba:f0:8f:85:0a:f6:54:9b:
         ff:e2:2b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 11:23:27 2025 by rpki-client