This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
File:                     pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json)
Hash identifier:          Qwde0KVGy8DU/B86HkbAD8YpD9sNXHWwCq3NgvtS++A=
Subject key identifier:   F5:7B:D0:7C:99:72:DC:DB:06:A7:0B:D8:5D:D1:BA:C1:D9:CA:98:D0
Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8
Certificate issuer:       /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8
Certificate serial:       0501
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
Manifest number:          04F9
Signing time:             Thu 18 Dec 2025 23:02:33 +0000
Manifest this update:     Thu 18 Dec 2025 23:02:32 +0000
Manifest next update:     Thu 25 Dec 2025 23:02:32 +0000
Files and hashes:         1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: tMZ7wrAW+L+xpUQWyIkwuO+uKt0yDmfemzTGly9hVsw=)
                          2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: Ev++x624cT4RveaW6MjuuztzlLqpsfCU1GHY6FW0OBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl
                          rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8
        Validity
            Not Before: Dec 18 23:02:32 2025 GMT
            Not After : Dec 25 23:02:32 2025 GMT
        Subject: CN=69448809-ef42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:c3:bc:39:0c:bf:0f:8c:43:67:0e:06:98:
                    22:29:f7:fb:a3:69:9a:be:94:d9:f6:75:48:2c:1c:
                    f9:f3:f3:99:c5:d6:2c:27:25:c4:92:9c:e9:4b:df:
                    9e:e0:e6:71:db:25:18:47:e4:c3:cd:77:78:bc:86:
                    ff:57:01:4a:9d:28:1a:26:ce:f6:14:c0:3b:e7:fc:
                    01:35:54:e2:78:dd:18:68:4c:76:0a:ac:cc:47:16:
                    20:cd:da:df:2b:8a:bb:26:f1:ed:f4:0c:44:d6:ba:
                    ea:08:bd:22:fb:67:1b:2b:10:be:4b:26:c3:cb:fb:
                    28:db:5b:5c:e7:2e:83:94:d8:b9:e5:d5:94:f7:30:
                    04:3d:fd:9f:ec:d1:68:9d:aa:46:ea:fa:3e:8a:be:
                    5b:e4:2b:15:34:e2:ad:ee:23:8d:bc:fa:a2:18:a0:
                    12:cc:7e:03:d9:f4:ba:0d:4f:db:7a:80:34:5d:26:
                    af:61:9a:e8:1c:7f:be:a6:31:e0:58:b4:71:6a:49:
                    54:ed:22:7b:06:1c:f8:9e:b8:b5:13:10:f1:cf:c5:
                    18:bd:f1:f0:16:f4:95:14:a6:07:b0:ac:fa:0d:18:
                    fa:e8:ee:7d:21:31:75:5b:26:d1:d7:12:8a:89:b2:
                    c2:55:59:34:4f:a2:7b:8d:60:73:99:3d:60:db:ea:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7B:D0:7C:99:72:DC:DB:06:A7:0B:D8:5D:D1:BA:C1:D9:CA:98:D0
            X509v3 Authority Key Identifier:
                keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:2b:54:54:61:14:16:89:00:14:39:50:c3:a7:2f:a5:c2:4b:
         19:ca:89:6f:f0:59:a7:3c:4c:23:29:5c:95:8c:7d:5b:12:5d:
         f9:0f:0a:eb:4d:a1:5c:aa:49:b8:14:3e:e5:d4:88:b7:61:74:
         21:3d:c1:04:fa:ac:46:d7:36:df:8f:41:b7:f3:3f:09:d1:f8:
         8d:53:26:7e:2f:c0:47:0c:50:c0:6d:5b:fc:c7:7b:f2:8c:09:
         ee:03:fe:95:48:84:d0:93:c3:02:0e:8d:0a:00:88:b9:87:bd:
         ef:4b:b0:03:a9:9e:a7:04:fb:09:e2:0a:6a:c2:6f:dc:93:0e:
         dd:f1:78:95:9d:01:ef:ee:62:06:0d:02:97:d3:f3:0f:62:ff:
         24:5e:bf:46:b9:b0:ea:b1:27:7a:f2:42:87:8f:49:53:86:25:
         38:1e:b4:b5:04:9c:55:ef:5b:5b:59:f8:6d:95:fa:b6:c5:d6:
         2e:19:67:5e:c4:70:cb:f3:0c:3e:28:e5:bd:fb:94:4f:b9:fa:
         35:14:c1:55:c9:22:87:0c:ca:27:18:4b:ed:5d:11:4b:78:b1:
         f3:1c:4f:81:a1:6e:08:fc:61:99:93:8b:d9:6c:aa:51:6b:82:
         3a:1f:27:04:c2:50:66:fa:07:49:17:ce:81:62:4e:13:2d:33:
         d8:47:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:25 2025 by rpki-client