This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
File:                     8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json)
Hash identifier:          99Jo3GjYXiI/Qo7S3ARVfENf1Xowo7WJmcehYlU7zpw=
Subject key identifier:   50:A7:DD:64:EB:10:26:5A:CF:F7:D2:CF:1E:45:D4:92:9B:2E:B8:89
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Certificate issuer:       /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial:       03A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
Manifest number:          03A4
Signing time:             Thu 18 Dec 2025 23:58:55 +0000
Manifest this update:     Thu 18 Dec 2025 23:58:55 +0000
Manifest next update:     Thu 25 Dec 2025 23:58:55 +0000
Files and hashes:         1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: Dqcl1Hkc8NdjhKrfxjBV6uMmlgq23GdAlSvMkcmcSPo=)
                          2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: S7JF/bNkGQBKzWyyMCIfasqHndqaViHJP5nFlj8AfpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
                          rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
        Validity
            Not Before: Dec 18 23:58:55 2025 GMT
            Not After : Dec 25 23:58:55 2025 GMT
        Subject: CN=6944953f-7ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:cb:06:ed:ea:be:2a:a6:0c:d3:13:92:06:
                    7c:50:69:eb:31:78:1d:43:2f:ab:de:5a:89:b5:8d:
                    9f:d7:88:a7:c1:40:f0:88:aa:d1:f5:fd:5d:d9:c3:
                    2d:f4:3a:d5:c3:10:95:a8:3b:af:21:d1:b3:03:c5:
                    05:46:a8:d0:ec:bf:52:c6:5f:de:e1:c4:f0:28:ec:
                    e1:25:4b:a5:3f:a4:d5:64:4c:4c:a9:07:67:5d:4e:
                    c7:f2:63:14:1b:8f:38:36:b3:09:7f:e4:5b:d6:a2:
                    06:9a:70:3a:40:04:4e:ca:22:ab:90:36:70:93:ea:
                    98:8e:6b:46:37:7d:37:43:de:56:1c:42:11:43:96:
                    33:aa:86:f5:c3:9d:ff:0a:d8:a7:69:9a:42:d7:68:
                    c5:e7:5e:36:ec:ac:af:d2:5d:86:fc:da:33:29:54:
                    83:ed:5e:dc:89:6e:b7:f7:bf:91:d4:f1:62:0d:1e:
                    53:c3:a1:c2:50:76:db:c2:d6:81:fe:09:75:ec:40:
                    57:35:1d:0a:33:d4:ee:56:00:25:e3:d0:71:d7:c3:
                    7a:50:a7:eb:63:14:33:cc:a6:a8:75:3c:2c:f7:2f:
                    3e:9a:83:8e:dd:70:75:0a:29:e1:f7:fa:66:ad:3f:
                    9d:2f:c8:ac:48:e0:c4:55:5d:b3:07:cf:2d:f9:2a:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A7:DD:64:EB:10:26:5A:CF:F7:D2:CF:1E:45:D4:92:9B:2E:B8:89
            X509v3 Authority Key Identifier:
                keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b0:b1:f5:27:df:9d:55:fe:d8:5d:6f:70:ef:c8:5e:af:d1:
         55:3a:09:94:a1:df:bb:fb:38:2d:58:d8:0c:bf:07:14:6f:0f:
         a1:74:6a:11:f7:7c:44:c4:72:db:6e:c0:aa:5c:69:ce:8f:f0:
         e4:15:8d:1f:81:62:f4:de:96:5d:5c:9a:c5:35:02:c3:aa:fa:
         4c:f5:04:9b:10:4a:4c:9d:8f:53:eb:fb:96:be:60:86:04:f2:
         71:bf:64:d3:e7:0b:b9:11:bf:86:ce:92:7d:27:7b:54:ec:06:
         fb:23:92:83:ed:cc:c7:08:07:c7:75:ff:48:b7:0e:f5:64:55:
         8e:fb:7a:a8:5c:f3:8a:44:d6:78:ec:c3:e1:4a:b1:86:24:ed:
         0a:24:46:2c:3f:8f:71:a4:9f:6b:de:cd:9a:7f:cf:19:ee:a5:
         71:aa:8c:51:ec:1b:1e:cc:8b:4c:27:49:6f:2d:ef:6a:91:e1:
         98:7d:8a:9c:6f:e3:23:ac:d4:0d:e4:0d:46:1d:7c:84:ea:10:
         1d:e1:af:96:5b:ad:a9:5a:17:3f:2b:d6:f6:e4:23:6f:62:d4:
         57:13:f5:78:1f:66:76:f3:f9:ae:86:3a:b6:39:f4:45:e0:e3:
         8b:03:79:11:b6:33:58:31:e2:a3:09:5d:75:15:23:87:93:a8:
         c5:04:14:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:31 2025 by rpki-client