This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft
File:                     wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft (raw, json)
Hash identifier:          sZi19Gq3ye1wtpTjnzI0V9q8rGYNtsMYrY4+EIcuZxQ=
Subject key identifier:   FA:89:F3:FF:46:A0:80:9E:C0:4A:F2:72:39:25:DE:2E:A8:F5:DE:4F
Authority key identifier: C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D
Certificate issuer:       /CN=A913DA3E/serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D
Certificate serial:       06F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft
Manifest number:          06EF
Signing time:             Sat 20 Dec 2025 21:17:42 +0000
Manifest this update:     Sat 20 Dec 2025 21:17:42 +0000
Manifest next update:     Sat 27 Dec 2025 21:17:42 +0000
Files and hashes:         1: wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl (hash: A8ci2TgPp1UMCZ41NH6YUyimCm7nUeyk1su32/K0kxk=)
                          2: 19AB8E92734611EB816DB064C4F9AE02.roa (hash: 7I2G/hN0Fa3HUj7sGDHCqmaUYDxqe3fLWkw77NWZoq4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl
                          rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DA3E, serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D
        Validity
            Not Before: Dec 20 21:17:42 2025 GMT
            Not After : Dec 27 21:17:42 2025 GMT
        Subject: CN=69471276-ce49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:28:aa:66:41:98:ac:33:af:a9:03:df:20:
                    0c:53:09:4b:e4:c9:b5:25:41:d8:1a:bb:80:08:83:
                    61:c0:b9:8f:34:70:a8:4e:bf:12:f4:9b:05:69:21:
                    7b:6c:c6:a0:cc:23:74:5f:a6:d5:7b:64:be:c0:7c:
                    8c:5d:d2:cb:65:ff:ab:17:83:20:d6:8f:e2:65:f9:
                    a9:1c:0b:39:e7:89:d0:22:62:88:7c:b8:b5:e2:8d:
                    6f:87:03:3e:45:f8:20:da:2f:26:2e:0a:65:1d:f5:
                    c6:41:11:fe:64:15:42:04:eb:7b:e8:99:d2:52:f4:
                    6a:b9:57:b3:c1:3b:e2:4e:7d:01:35:da:0b:a1:04:
                    97:2d:6b:54:54:e2:33:4c:61:1b:6f:ac:56:89:81:
                    bc:ab:d9:02:58:39:45:60:07:ec:be:17:79:fc:74:
                    4a:a5:5c:ed:81:b9:dc:b9:3e:b9:5e:29:54:b9:16:
                    5e:d0:ec:20:6a:4f:64:ce:5e:ce:79:8a:d6:74:35:
                    d2:b6:5f:8a:b1:76:73:8b:18:6d:de:a4:5b:3d:dd:
                    be:fe:68:7c:37:50:85:92:c1:25:94:cf:f0:3a:dc:
                    73:75:96:f7:8d:e0:1f:46:44:33:b1:34:d5:d3:89:
                    e4:e9:4c:67:b0:d5:85:91:27:88:ca:98:0b:c4:dc:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:89:F3:FF:46:A0:80:9E:C0:4A:F2:72:39:25:DE:2E:A8:F5:DE:4F
            X509v3 Authority Key Identifier:
                keyid:C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:39:46:ed:22:9b:a9:b1:65:cc:47:58:9e:a8:90:75:32:bf:
         64:cf:4f:6a:56:72:4e:6f:66:b7:18:47:aa:f6:8b:e4:5f:be:
         37:da:c0:c2:b6:6c:9d:21:1e:5e:88:92:d1:7e:5f:53:ab:2c:
         7e:08:f4:62:54:33:45:ec:a4:f9:8a:8a:1f:4c:6a:02:16:44:
         e3:1c:a4:9a:14:84:f6:8d:e5:ff:7e:fb:45:f6:23:f8:64:90:
         79:bd:33:52:3f:40:67:0f:7e:12:33:3e:b9:03:6f:a4:66:3f:
         25:f6:be:2b:bc:b8:75:ca:50:41:81:b8:9d:b7:a1:41:20:10:
         de:61:e1:4c:fb:01:05:a4:25:95:8b:37:47:28:07:d5:83:ac:
         2c:0f:f9:d8:25:14:1e:a0:73:cc:9d:02:8f:8a:e3:ba:d6:58:
         b5:38:b9:f7:b2:3b:61:bc:1a:96:be:6e:e3:42:bb:3c:12:55:
         07:ab:a1:84:7a:38:b3:3e:bc:21:ac:d5:4f:09:b1:89:53:06:
         10:d1:12:93:5c:e1:ae:92:1a:be:8b:3f:a7:4a:7e:d7:8a:3f:
         82:ce:e6:94:37:1e:bb:4d:aa:b0:01:f7:3d:7d:45:3a:0d:34:
         db:37:ec:93:00:97:bb:8d:e7:f5:7f:97:c6:94:c9:94:00:09:
         6a:8e:a8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:10:28 2025 by rpki-client