This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
File:                     pBhnIpZRYlTNTMrUSSUeGdG26V0.mft (raw, json)
Hash identifier:          YleEHFSzRD6Xx61UZzEYQisKoUPj5Oz8jMFfVR+ILMU=
Subject key identifier:   34:B1:82:EF:E8:3A:58:C1:A0:38:E3:85:25:5B:37:23:E5:6F:1B:C7
Authority key identifier: A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D
Certificate issuer:       /CN=A913FE3D/serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
Certificate serial:       05D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
Manifest number:          05CD
Signing time:             Mon 22 Dec 2025 22:11:55 +0000
Manifest this update:     Mon 22 Dec 2025 22:11:55 +0000
Manifest next update:     Mon 29 Dec 2025 22:11:55 +0000
Files and hashes:         1: pBhnIpZRYlTNTMrUSSUeGdG26V0.crl (hash: PebPAAH3CzoZzjubZa7Px7Tlo/TDmnIcbA6B2h93RD0=)
                          2: 679A6FA4E53A11EB8197AD70C4F9AE02.roa (hash: cpEsjV03pQHsVjR1FwtppeHQdTtgrIUVyZ08K7ajurs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl
                          rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FE3D, serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
        Validity
            Not Before: Dec 22 22:11:55 2025 GMT
            Not After : Dec 29 22:11:55 2025 GMT
        Subject: CN=6949c22b-ef6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:2a:88:09:a2:d8:45:fb:e8:39:41:3e:38:
                    dc:4b:c1:ea:47:93:d7:d3:c9:4d:d4:35:42:7a:2a:
                    a9:20:8a:b5:08:b5:a3:61:e6:24:8a:e0:c2:63:c1:
                    fa:ae:56:80:14:d7:d2:18:a1:30:73:d1:5e:bb:f5:
                    5d:0e:b8:fc:42:5b:2c:0e:1a:85:29:c5:ab:63:17:
                    e9:3a:e3:fa:22:62:d1:9f:4e:9d:25:2f:5e:d4:57:
                    ac:d6:67:55:b2:d6:07:6c:b2:c2:6d:7c:59:98:6c:
                    61:50:2c:3f:d2:a1:54:7b:97:84:aa:da:c7:35:5f:
                    07:f7:b1:46:56:05:ea:5d:87:7a:62:c9:db:29:11:
                    14:fc:7a:ef:01:32:94:9a:89:b6:79:ba:2d:24:f1:
                    93:19:d3:64:41:08:83:b2:b9:08:0d:9e:18:f9:64:
                    b9:dc:35:e9:65:92:72:70:1d:5d:5c:bc:3a:6c:f6:
                    69:5c:ba:57:b8:b3:f5:74:3b:30:df:6d:6b:54:32:
                    1d:78:f5:3d:19:b2:4a:d0:0b:1b:6b:6d:25:60:39:
                    98:c3:72:cf:d9:40:00:78:99:18:15:63:df:5e:73:
                    36:53:f9:02:88:9c:ab:b9:77:de:ca:19:24:60:d7:
                    2d:75:1a:fd:9f:ad:29:fb:64:4d:01:d9:37:1f:98:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B1:82:EF:E8:3A:58:C1:A0:38:E3:85:25:5B:37:23:E5:6F:1B:C7
            X509v3 Authority Key Identifier:
                keyid:A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:8d:33:39:6b:de:d4:33:a0:9c:19:d9:c6:4f:d4:01:5c:75:
         89:ca:89:c6:26:3a:f7:26:59:cf:14:21:1c:d9:6f:a1:51:f3:
         06:74:3b:14:1b:3f:5b:45:c8:93:3a:d9:c5:f5:1b:5a:26:a0:
         5e:8d:17:33:46:71:a6:68:3c:0f:2f:6f:7a:08:46:24:9f:6a:
         16:1d:f5:b7:08:df:ec:9d:16:01:59:39:71:16:06:38:e0:a6:
         4a:07:bf:83:c4:0b:18:0d:11:4a:44:33:60:76:f2:4a:1e:3f:
         cf:4b:29:5b:aa:07:fb:d4:30:27:f0:69:ab:2f:3e:8d:9c:ac:
         98:7b:52:c8:6c:54:8c:f4:2b:d0:ec:f2:13:bf:ed:63:8e:10:
         c6:cc:20:fb:f6:4e:0d:73:14:21:a6:98:52:58:ab:a6:02:25:
         4c:dc:41:14:fb:fd:49:67:6f:bd:54:00:8c:98:af:7c:91:dc:
         05:90:42:4c:4d:b8:01:a3:d0:2f:14:a9:60:b6:c0:d4:fe:2f:
         ee:ab:d0:0d:a7:0d:de:cb:b5:7a:18:54:08:b2:bf:19:64:59:
         d7:9e:35:de:3c:4d:d9:47:3a:ce:cc:8e:72:a5:7b:c9:5c:ea:
         7f:bf:db:25:c9:83:f7:a1:e7:f6:5a:8d:7f:3f:b7:8d:f2:d8:
         0a:4b:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:17:05 2025 by rpki-client