This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
File:                     DmJr6z1CBZMzO_tMhYMHqJnqfco.mft (raw, json)
Hash identifier:          jhYpsDiy+QWyaB1DDIUQSA05t60Ncwn4WhzvOwN/J1E=
Subject key identifier:   E2:DD:65:1B:15:64:0C:15:1E:A3:FA:A1:66:69:C5:60:F6:3A:3A:C7
Authority key identifier: 0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA
Certificate issuer:       /CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
Manifest number:          0157
Signing time:             Sun 21 Dec 2025 03:19:03 +0000
Manifest this update:     Sun 21 Dec 2025 03:19:03 +0000
Manifest next update:     Sun 28 Dec 2025 03:19:03 +0000
Files and hashes:         1: DmJr6z1CBZMzO_tMhYMHqJnqfco.crl (hash: wM9pjO/Av4afPWFeRDh/dH475hRvz4J2sywMmMWGEF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl
                          rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 03:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912981B, serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA
        Validity
            Not Before: Dec 21 03:19:03 2025 GMT
            Not After : Dec 28 03:19:03 2025 GMT
        Subject: CN=69476727-c9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:dd:25:a7:c0:44:23:92:52:2b:a7:07:43:
                    40:81:64:1a:96:e4:b2:bd:0a:15:54:2e:53:5f:17:
                    9d:76:76:87:70:ca:2f:fa:d6:d4:5d:36:98:1a:2b:
                    58:14:7e:01:a4:16:93:4b:73:37:a9:09:03:4c:c6:
                    cf:4d:d6:1e:d2:7d:a9:40:25:ef:55:e1:b4:8c:60:
                    a8:f5:0c:53:8d:65:f8:93:2a:11:e0:25:5e:ed:90:
                    6a:9a:e4:61:55:6c:fa:4b:3b:7f:80:30:14:d1:93:
                    07:be:8f:97:09:78:bf:50:d4:7c:03:74:31:ec:df:
                    9f:6a:45:3a:7b:34:50:e1:b6:53:87:d4:b6:cc:12:
                    8f:e1:86:fe:4d:00:8f:26:2b:5f:38:5a:dd:cb:d8:
                    d1:d8:d4:40:52:3a:ac:4c:24:40:f1:75:36:db:d1:
                    e9:47:e7:db:97:b9:24:7d:b2:36:61:27:68:91:2d:
                    c2:70:9c:af:cf:13:ae:8c:26:06:b6:5d:4e:ad:7a:
                    aa:1e:68:d7:8d:d2:44:ff:bb:77:08:2f:a6:c4:18:
                    a2:d8:7f:28:31:13:80:cc:c2:e7:87:04:c0:f2:98:
                    44:38:96:74:50:8b:fe:f6:fa:0c:c7:57:3c:61:b9:
                    25:ff:86:4e:30:4f:73:a7:a0:bd:9b:54:6c:b0:71:
                    1a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DD:65:1B:15:64:0C:15:1E:A3:FA:A1:66:69:C5:60:F6:3A:3A:C7
            X509v3 Authority Key Identifier:
                keyid:0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:36:bb:cb:68:54:bf:44:99:b0:6b:99:22:ad:c5:8f:72:fc:
         f1:81:cd:e8:e1:b3:25:56:d5:71:c6:9a:bb:53:45:7d:33:11:
         0e:30:d7:1d:ef:e7:3b:72:ce:86:4c:b6:96:eb:69:a6:4b:ea:
         d6:da:2c:00:46:8d:5b:a8:2a:ba:6d:24:61:dc:1b:b3:79:e7:
         8a:0d:24:e0:4d:42:62:ec:da:9c:d3:5b:fd:bd:01:49:34:86:
         45:1c:10:7c:4d:06:d6:cb:ad:94:56:1c:8a:6a:e2:7d:b9:99:
         4e:26:b5:59:dc:84:3c:86:bb:ef:90:d4:5e:bc:2a:df:7f:77:
         ee:2e:05:6a:a6:ce:40:1b:7e:c7:a5:06:5e:dd:dd:35:fb:b4:
         64:1f:c3:c0:74:d5:2a:59:cf:fa:01:9d:d3:4b:e6:fa:65:f4:
         fc:4f:30:e5:1a:e9:ee:28:ca:56:a0:2e:97:f6:99:ba:12:06:
         ee:85:39:5d:74:d0:c5:31:1a:59:46:2b:b5:6c:eb:72:57:f7:
         3c:7f:c2:32:23:74:c6:4f:ee:fa:7c:03:35:f2:db:13:8a:46:
         13:d6:9f:94:a6:46:ea:f7:ba:ad:90:09:fc:40:e3:df:02:34:
         2f:7e:72:29:7e:0a:bd:36:8c:b6:e4:ab:d3:d1:0f:db:18:e7:
         35:6a:f0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:53:17 2025 by rpki-client