This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
File:                     d31UDhYfpnH7JFijP_5L8z1qcBU.mft (raw, json)
Hash identifier:          0bCrmKC84wVd+F/dIOskQa0dy5pLEvuHTlnQEeGhJZw=
Subject key identifier:   90:46:FC:A4:B4:03:A0:DF:15:9B:5E:4E:4D:A4:4C:20:A8:4D:E1:9C
Authority key identifier: 77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15
Certificate issuer:       /CN=A913BA27/serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
Manifest number:          66
Signing time:             Fri 19 Dec 2025 06:01:11 +0000
Manifest this update:     Fri 19 Dec 2025 06:01:11 +0000
Manifest next update:     Fri 26 Dec 2025 06:01:11 +0000
Files and hashes:         1: d31UDhYfpnH7JFijP_5L8z1qcBU.crl (hash: UNJ7qO4WzNnYNuWvEnR/bh/Vv3XTTaG7yTEw0q3e93Q=)
                          2: 71B7688645AB11F0949A471EC4F9AE02.roa (hash: OOybTQy1tXbxj/OFzkMaOGN0e7LlqdktJQlDDwMZpUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl
                          rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BA27, serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015
        Validity
            Not Before: Dec 19 06:01:11 2025 GMT
            Not After : Dec 26 06:01:11 2025 GMT
        Subject: CN=6944ea27-6bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:c4:ed:2e:72:7a:1b:dc:65:66:82:75:68:
                    09:f1:c8:d7:81:7d:a5:4e:83:86:f9:61:82:95:11:
                    63:58:3d:db:f4:12:06:81:50:6d:0b:19:80:09:a2:
                    1b:11:4e:60:25:4a:90:8a:95:ad:fd:11:14:7d:23:
                    8c:95:5b:84:47:59:53:f9:39:70:86:c0:53:37:d2:
                    9c:c9:f6:bb:d8:7f:bd:df:0a:4f:64:74:5a:10:4a:
                    15:f9:d0:c6:83:80:fa:67:0c:34:a8:35:a2:e3:4c:
                    35:5c:bd:ea:69:8f:a2:89:3a:77:a8:ca:24:db:c1:
                    67:10:8f:d6:d7:33:56:92:2b:55:1c:26:1a:03:89:
                    5c:ec:20:2e:f7:0b:56:c5:08:2d:ed:be:58:66:e1:
                    09:87:09:1c:c7:46:73:9b:98:6d:38:b8:f5:4d:e8:
                    fb:c2:86:8b:7f:11:c0:44:ee:20:87:af:51:46:e2:
                    65:fa:6a:0a:d8:5b:75:69:65:a6:84:cc:eb:e6:8b:
                    b7:18:44:80:38:13:e5:de:4c:00:0c:23:15:cb:6d:
                    5f:5f:57:62:29:c9:5d:d9:f6:23:97:1f:5b:6c:02:
                    c6:8a:41:4f:8f:0b:a9:55:e1:16:f1:86:56:cd:ff:
                    8c:77:fe:b0:c2:33:aa:68:4c:e8:cd:2c:73:e4:4d:
                    9e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:46:FC:A4:B4:03:A0:DF:15:9B:5E:4E:4D:A4:4C:20:A8:4D:E1:9C
            X509v3 Authority Key Identifier:
                keyid:77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:76:4b:39:c9:81:f2:3c:d6:3c:33:8b:68:16:0d:77:eb:03:
         7d:82:fd:f3:3f:bc:65:55:16:3d:53:ad:e2:5e:39:ea:15:4a:
         01:2e:d4:76:c0:e1:89:9d:76:81:fe:27:64:c6:e0:ba:41:9a:
         b3:55:d3:94:73:39:3c:ee:11:7c:62:7c:8f:8f:35:b7:10:0f:
         26:7f:70:01:3b:31:71:aa:e5:b4:98:b3:77:09:9e:4d:f0:9b:
         a7:3a:da:dc:3f:52:93:1d:bb:9b:6f:a5:38:9f:59:96:2e:59:
         87:40:39:65:be:73:7f:23:c3:97:63:07:71:f7:ae:85:93:cc:
         40:9d:78:d4:89:53:c1:b8:90:63:59:81:f6:61:3c:0c:bf:b1:
         96:9a:9f:4a:8f:77:50:ab:1d:f6:22:9c:aa:f0:00:81:ba:b4:
         62:61:b7:63:2e:36:2a:69:08:d2:59:13:95:0a:8d:1f:43:09:
         df:98:2b:9a:9e:2b:ff:42:c0:9b:bc:f5:77:93:90:3c:0d:39:
         3c:a3:ed:56:4c:8c:aa:f9:2a:34:57:55:1a:04:8b:4a:79:0a:
         5e:73:9e:4d:a0:19:e7:4b:0b:79:49:13:cb:b7:f1:7d:76:07:
         06:6e:0f:d5:cd:71:da:3f:cc:e7:76:94:7a:12:33:fd:15:03:
         2c:8f:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:14:16 2025 by rpki-client