This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
File:                     p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json)
Hash identifier:          KF0au/l+bCn7gR8x3uQ+4xCVF5GCCeKTw3N6LbtfIGI=
Subject key identifier:   06:44:13:7B:92:CF:EB:A1:04:54:BC:22:E8:24:6E:5F:D3:A7:A3:20
Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
Certificate issuer:       /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Certificate serial:       0362
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
Manifest number:          034D
Signing time:             Fri 19 Dec 2025 00:17:52 +0000
Manifest this update:     Fri 19 Dec 2025 00:17:52 +0000
Manifest next update:     Fri 26 Dec 2025 00:17:52 +0000
Files and hashes:         1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: /gujNNdYNwK4NBxQFfpUJ6vFV+SaJAcvy+OZZ9qh0JA=)
                          2: 3824E928764711F0980D9877C4F9AE02.roa (hash: Vlt8E5RCfri6tIVkewPLLzIXYySBs5xXKD+pS8VKrVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl
                          rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
        Validity
            Not Before: Dec 19 00:17:52 2025 GMT
            Not After : Dec 26 00:17:52 2025 GMT
        Subject: CN=694499b0-7766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:02:3c:44:e8:88:43:a8:65:67:9f:7e:29:b8:
                    0c:82:a0:b8:f4:c7:7e:61:a3:bc:7b:38:4b:a3:a2:
                    16:87:d0:d8:2b:ac:ca:44:a3:41:df:a6:7d:46:bd:
                    ca:19:71:ed:c9:62:5b:03:ab:f0:80:0d:38:a5:61:
                    44:10:a3:32:06:77:02:b3:7e:d0:28:20:b7:69:fd:
                    59:4d:d1:25:75:a8:8b:08:de:05:c1:2f:f1:9a:e0:
                    09:4c:38:68:ff:80:0e:ef:e2:bc:27:bb:46:99:c6:
                    a2:e7:4c:57:37:5e:e2:ba:8f:27:f6:25:9e:56:3b:
                    7c:0c:6a:c5:e1:95:a2:02:27:6e:3c:29:c2:36:63:
                    17:fb:f8:9c:1b:b1:a3:88:f4:80:ea:98:ee:63:cf:
                    2d:d9:e4:48:4f:e9:55:ca:5c:89:e7:eb:4b:fc:e7:
                    55:b1:24:22:58:7c:ec:8e:25:76:5b:ba:24:db:13:
                    bb:09:b6:b1:6b:f8:28:ae:41:0f:2b:9a:5a:a4:97:
                    36:d6:e8:4c:08:98:f9:d6:a7:9a:f0:c7:f2:c8:bf:
                    63:79:c2:9f:61:08:7b:04:32:4a:e8:7d:c4:fa:19:
                    ff:5b:66:59:63:24:de:19:c6:ee:34:c0:a7:e5:2f:
                    83:1c:29:a2:13:3c:7e:35:bb:d2:a8:eb:c7:77:5a:
                    cd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:44:13:7B:92:CF:EB:A1:04:54:BC:22:E8:24:6E:5F:D3:A7:A3:20
            X509v3 Authority Key Identifier:
                keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:75:e5:81:e7:66:e5:17:58:ab:24:e0:bd:c9:f9:18:2f:85:
         49:1d:a4:0d:4c:8d:e5:46:c5:16:e6:b6:68:b8:95:20:b5:0b:
         25:28:29:81:7f:9b:f6:25:70:d7:e2:a9:5a:d5:c9:f9:37:36:
         ad:64:3e:58:bf:e1:57:2d:16:5e:b4:de:f3:1b:d5:80:9b:33:
         dd:ac:d0:b5:5b:ad:06:a9:94:04:19:69:40:ae:e1:64:d6:89:
         0a:b3:e5:4b:98:56:8e:2a:39:94:f8:1a:76:3e:81:f6:e1:87:
         fa:06:a5:c1:64:75:17:7f:49:c3:35:f7:2a:5e:b8:5e:68:d0:
         e1:a2:45:57:a7:5c:35:c9:23:9b:b0:e8:6b:ce:fe:db:e8:61:
         5d:80:6b:a9:47:5b:8b:a3:c0:c7:20:fb:16:48:a5:62:24:ae:
         65:d1:91:f0:8d:eb:9a:c5:a2:0c:24:73:a6:a4:ba:7c:c2:3e:
         28:f8:dd:35:58:b6:3e:ac:01:17:1e:ac:13:4b:eb:49:8e:cc:
         57:58:c3:88:05:86:2f:ad:64:77:f6:21:43:48:89:f7:c5:52:
         d0:1c:8e:63:1e:9e:71:cd:e6:b0:60:5c:44:cf:26:80:21:69:
         ca:47:73:5f:ee:b3:c0:52:f7:ff:9d:6d:5e:c3:f9:e9:89:e0:
         85:2e:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:35 2025 by rpki-client