This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
File:                     aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json)
Hash identifier:          qVkUtveWKlOXMLjb3d///VBiGmqekjN26SYnI7lNWiw=
Subject key identifier:   8E:90:96:DA:85:51:2C:7A:EA:75:3F:9C:FF:E8:CA:85:A7:B4:EB:57
Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
Certificate issuer:       /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
Manifest number:          01AE
Signing time:             Fri 19 Dec 2025 02:21:07 +0000
Manifest this update:     Fri 19 Dec 2025 02:21:06 +0000
Manifest next update:     Fri 26 Dec 2025 02:21:06 +0000
Files and hashes:         1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: +WxQWBrxEUM/n+K7yko/QJTSDg8hadbalhN8QX1y1+A=)
                          2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: o8XeNpRnuUBlVWA6mPKxdSovFEQUWjBzrI7Rs+4BJAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
                          rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
        Validity
            Not Before: Dec 19 02:21:06 2025 GMT
            Not After : Dec 26 02:21:06 2025 GMT
        Subject: CN=6944b693-b4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:c7:a3:fe:df:2d:d8:0e:82:d0:80:5c:2f:
                    8d:96:86:a2:a0:e8:fa:7b:39:63:7d:8c:01:f9:33:
                    d8:88:67:32:1b:cd:87:c3:d3:f9:a0:75:10:c8:68:
                    c2:c5:57:0d:86:72:2d:dd:ec:07:06:1a:7f:db:5b:
                    77:44:ef:e3:3a:b6:32:ee:82:46:6e:1a:fc:b6:3b:
                    a2:45:39:cf:3d:17:2f:28:14:0b:1d:bb:19:bc:eb:
                    19:74:8a:11:a9:14:43:10:88:90:a2:3f:fe:62:96:
                    d1:f7:f6:fa:81:70:cf:11:d9:d1:eb:05:f8:9b:36:
                    ea:ff:bc:16:95:af:a2:4b:84:2d:19:ce:12:be:a1:
                    c1:4d:f6:80:bd:35:c0:ec:b5:68:2c:7d:51:52:a3:
                    a5:26:cf:10:4e:67:35:8d:f7:3f:35:f9:35:fe:75:
                    b5:85:6b:78:dc:a7:72:58:6d:e1:da:cf:04:d1:82:
                    e9:28:d6:e2:c0:16:74:52:3c:79:08:fe:76:8f:9e:
                    1e:08:e5:3e:a0:7b:ac:98:86:da:d1:e5:d0:34:0a:
                    52:77:3d:c2:6b:2d:ed:a6:cb:8c:9c:96:b0:59:8b:
                    d1:6e:00:17:39:77:b7:2f:4a:a7:4e:9f:4a:a6:71:
                    70:2f:2b:48:3a:83:66:c3:3b:b7:3a:04:82:01:0f:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:90:96:DA:85:51:2C:7A:EA:75:3F:9C:FF:E8:CA:85:A7:B4:EB:57
            X509v3 Authority Key Identifier:
                keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b6:07:da:58:a4:89:0c:b0:d7:37:5c:fd:4c:2d:4f:f1:bb:
         8c:74:70:d5:d0:40:1e:39:9d:1c:d2:6e:e0:5e:ee:47:61:08:
         60:56:7a:cb:5d:fd:49:94:ba:af:d3:94:44:83:4b:5b:39:1f:
         f4:9d:0b:70:ce:ed:96:14:b5:3a:cc:6d:bd:fb:02:5e:bd:48:
         11:cd:98:1d:fd:07:37:82:5d:03:8a:a3:8a:4d:a6:47:14:59:
         d4:69:80:aa:e2:4c:78:df:22:1d:74:67:19:b8:cd:d5:5c:7c:
         f7:61:ff:ed:df:9f:df:f9:22:db:9f:6d:0c:72:72:c7:61:43:
         83:7d:b4:51:dc:e1:c5:9e:4f:e6:88:77:9b:75:61:4b:5b:af:
         ec:52:1c:d7:f9:8b:12:ea:5f:ae:6d:8b:ce:4b:48:f6:82:8b:
         10:35:72:30:0a:60:d4:1f:bf:fc:65:e4:73:15:e7:73:0d:f1:
         51:e6:d0:08:0a:ba:f0:2e:81:9a:89:59:eb:82:8e:ce:dc:64:
         3a:9d:39:41:cb:2a:ce:3f:d5:21:d5:60:ab:98:24:1d:80:0d:
         0a:03:b6:92:ba:30:1f:a9:18:92:d4:ae:67:49:ee:67:00:91:
         8c:36:19:b8:12:15:d1:21:5a:68:01:f5:b4:03:c5:ee:8c:40:
         9e:cb:a4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:28 2025 by rpki-client