This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File:                     rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier:          W1PmlDf5hyLFzvDua0B3Q7FpgUlzbdoKTiba2cQmRP8=
Subject key identifier:   C3:42:23:41:65:A2:D7:6A:3E:00:81:93:4E:C6:46:F6:AC:C1:95:C6
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number:          01CF
Signing time:             Sun 21 Dec 2025 02:06:33 +0000
Manifest this update:     Sun 21 Dec 2025 02:06:33 +0000
Manifest next update:     Sun 28 Dec 2025 02:06:33 +0000
Files and hashes:         1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: JTBlf6wC34I5J9ovvsfpQdspffxkV3mlRoY9tvtvsuM=)
                          2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: p81EH8N+mq+tuXFMTqadpbhtGnx8x8sovmy9swXxzCM=)
                          3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: GGQZQXITbCi35kDi1cszvpoNDF4GQHNFV1AYsPL4NFA=)
                          4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Dec 21 02:06:33 2025 GMT
            Not After : Dec 28 02:06:33 2025 GMT
        Subject: CN=69475629-0da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:47:bf:c4:83:3f:8c:13:31:46:80:49:fc:
                    2f:c2:d5:e4:dd:72:d5:db:20:13:34:d2:05:7f:f9:
                    c1:2f:8e:f6:6c:40:73:40:e6:7d:6e:08:08:9e:23:
                    ef:3f:cf:58:f8:19:fe:69:ce:02:76:55:f2:80:46:
                    fd:07:01:c1:ea:52:2c:18:ee:8e:6d:97:7f:f7:6f:
                    78:a5:fb:9a:36:45:4a:46:54:1d:fd:40:f8:86:29:
                    9c:fe:38:e3:76:5d:76:a4:37:20:ca:2b:fe:88:79:
                    5d:5b:4e:c6:2b:e8:0c:ee:be:38:40:a2:a9:dc:74:
                    3f:03:b3:f5:3b:6b:c3:67:ee:08:57:07:c6:cd:80:
                    13:22:98:48:d9:04:2b:6e:47:7a:06:c5:c7:35:37:
                    fa:0e:51:7b:aa:b6:ef:5b:8b:b8:5f:38:c5:b2:97:
                    e7:42:02:00:7d:cc:d3:bf:a4:ea:ff:cd:e5:83:87:
                    bf:14:5b:4e:1b:2b:04:9c:8e:bf:de:d2:2b:59:99:
                    02:65:9e:50:a3:0c:9a:72:6b:d0:2d:b2:0e:b1:88:
                    e0:31:7d:a9:40:40:5a:e1:25:66:eb:56:65:bc:86:
                    c6:4d:02:6a:60:0d:50:0b:5f:0b:f5:c2:6f:47:25:
                    9c:35:d6:18:0a:3b:52:a9:c8:87:65:47:34:d7:c1:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:42:23:41:65:A2:D7:6A:3E:00:81:93:4E:C6:46:F6:AC:C1:95:C6
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:59:57:b4:a3:bb:a4:f1:a6:87:ef:ca:d4:16:76:d1:bf:88:
         d1:f4:b6:50:9e:52:29:09:47:35:43:f3:36:98:c3:fd:15:9b:
         5c:ba:1d:db:06:cb:6c:5f:3d:e3:34:35:79:0f:a4:bf:e5:7e:
         77:96:2b:ec:54:a2:85:36:5e:46:a8:24:5a:d5:c8:ae:23:f8:
         9a:1c:d4:96:12:12:dd:c4:b5:f2:a7:e7:41:f6:14:05:c4:64:
         20:99:65:ec:7d:77:ac:0e:23:a5:c5:7e:82:8d:5a:f1:7a:17:
         23:f0:e0:2b:1c:1a:f4:a1:62:aa:76:c3:c9:0a:d7:53:6f:79:
         59:11:e7:da:1b:fa:50:22:c7:78:41:e7:0c:a7:35:25:bd:41:
         53:e0:3f:fd:1f:b9:49:be:f1:b0:37:46:87:a5:9e:49:71:29:
         81:36:21:d3:26:06:67:92:ae:b1:92:66:1c:d3:b4:7f:94:c1:
         d2:8e:a0:58:51:2b:e0:8a:6c:7b:e4:13:06:33:dd:36:25:82:
         69:ea:17:b3:d7:bb:74:9a:12:f6:9f:e4:39:0c:3e:30:63:e1:
         43:d5:36:17:24:c7:b9:c5:7f:fa:2e:99:4e:ea:b7:bf:f3:1b:
         52:ff:3e:78:89:7b:1e:37:ac:e3:19:c5:73:2e:cd:57:50:16:
         ae:fb:0c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:09:25 2025 by rpki-client