This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
File:                     xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json)
Hash identifier:          qYtXxgIDNQwx5FhHyy8mMQx19HxnOULUwWbGxzzqHxg=
Subject key identifier:   53:87:39:4D:F5:E6:F2:E3:42:B5:38:42:E1:8C:4A:D5:D8:3D:48:F9
Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D
Certificate issuer:       /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
Manifest number:          74
Signing time:             Sat 27 Dec 2025 05:39:48 +0000
Manifest this update:     Sat 27 Dec 2025 05:39:48 +0000
Manifest next update:     Sat 03 Jan 2026 05:39:48 +0000
Files and hashes:         1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: qVze1xT340361efJCbpYg96TSB93y6pnOTPFoJk5qfQ=)
                          2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: C2K9dK4do/Lq7H5EaXQP1EBA+uUbAkgLMeJKgVTTBgk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl
                          rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 05:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
        Validity
            Not Before: Dec 27 05:39:48 2025 GMT
            Not After : Jan  3 05:39:48 2026 GMT
        Subject: CN=694f7124-3296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:cf:90:d8:70:56:43:34:6d:09:7f:b0:90:
                    6a:49:6e:b6:ae:00:f9:79:0a:d5:d5:d9:fa:d1:42:
                    fe:b2:08:97:18:ad:bf:40:b2:94:80:09:4f:ea:3a:
                    59:a6:5d:a5:94:43:e2:b2:ab:df:21:7a:8c:23:88:
                    24:e3:87:82:c4:fc:82:fe:14:53:ac:4d:5e:dc:04:
                    81:6e:12:0a:26:67:91:bd:a4:4a:05:74:0c:e4:9e:
                    3f:35:8e:df:d6:eb:a2:dc:3a:a6:96:69:4d:c0:97:
                    f6:3e:ae:71:0f:de:55:89:76:eb:ec:ae:8a:32:59:
                    3c:3b:ba:c1:af:17:c1:4b:58:d7:8b:d1:ac:1a:1a:
                    5c:aa:5d:a8:dd:56:69:9d:f1:f9:ef:36:81:36:1f:
                    66:e7:97:fa:02:92:bf:0b:06:c9:f4:c4:c9:06:2e:
                    ef:4a:fe:41:e6:90:d7:4a:fa:a1:32:9e:bb:3d:6b:
                    45:aa:e9:21:3e:e9:45:c6:10:22:c4:5b:28:7a:ec:
                    d3:92:a3:9b:a9:86:c5:e2:da:77:02:65:a8:f7:4a:
                    8a:8a:07:a3:94:88:63:e6:f6:17:fa:b3:2d:4f:c9:
                    a7:64:e5:96:d2:95:19:dd:50:37:9d:eb:64:c9:4b:
                    9c:b5:e8:36:93:43:ca:31:75:9e:3c:55:5a:cb:50:
                    76:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:87:39:4D:F5:E6:F2:E3:42:B5:38:42:E1:8C:4A:D5:D8:3D:48:F9
            X509v3 Authority Key Identifier:
                keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f7:20:4e:5c:7b:73:71:88:bb:fc:29:ba:8d:ad:32:b5:d8:
         5a:54:18:14:04:2c:d2:ed:30:ef:8c:2e:1a:0b:05:d5:56:07:
         cb:c7:14:98:cd:1b:46:e5:5f:3c:10:61:3c:08:ed:fc:20:00:
         f7:79:19:10:4d:2b:19:93:6d:ad:45:00:69:1b:bc:9e:ed:3e:
         af:a4:8c:ee:b9:58:b2:cf:36:dc:1a:0a:67:1e:6b:e7:df:fb:
         3a:39:8c:c5:4c:63:06:ab:a2:d2:4c:03:a0:5c:0c:aa:21:f0:
         d3:2b:7d:7e:61:ac:dd:b5:bb:b0:53:04:8c:30:03:66:34:0f:
         18:d2:b4:3b:2a:ef:36:13:cb:74:0a:ba:a0:68:f3:0a:61:9e:
         fe:4b:d4:fc:b0:34:c0:f2:7a:3b:72:81:6d:1d:6b:04:0c:0d:
         d7:62:c4:ab:61:e9:b5:76:e5:ba:fa:12:e9:da:b3:66:47:56:
         8a:c4:a9:ff:fc:e3:86:2f:78:93:89:2c:77:6a:fe:f4:78:38:
         0f:75:df:b4:9e:0f:da:ff:13:0b:13:11:5f:32:fc:19:fb:c5:
         0d:92:cd:96:2e:ac:a3:6c:85:5b:25:68:f4:c6:62:9f:a7:f4:
         da:85:20:1d:a7:15:6f:4a:4e:a2:b3:67:c6:c7:43:2a:a4:43:
         b3:56:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 05:25:44 2025 by rpki-client