This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
File:                     788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json)
Hash identifier:          9PF1wueIEOuxbxv1t+PtRh3RFw32w8N+2bBwLc/SAkg=
Subject key identifier:   55:D7:5B:23:C3:14:D8:A0:8E:59:D1:DF:ED:F4:21:49:78:26:EA:90
Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Certificate issuer:       /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Certificate serial:       0885
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
Manifest number:          087A
Signing time:             Thu 18 Dec 2025 20:07:39 +0000
Manifest this update:     Thu 18 Dec 2025 20:07:39 +0000
Manifest next update:     Thu 25 Dec 2025 20:07:39 +0000
Files and hashes:         1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: kokvtQDtvva3UsXblxC0QMt4YtZBb/y9N9dZgoUS8KQ=)
                          2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: bmGPH4RhQZKxlLUmaYqMU+RwVlTsBX8WAQ+VbAJVD+E=)
                          3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: +U5B9OE0qMYRoG1rt8ratJnPLrr7cjy6lf0aOQepvOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
                          rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
        Validity
            Not Before: Dec 18 20:07:39 2025 GMT
            Not After : Dec 25 20:07:39 2025 GMT
        Subject: CN=69445f0b-c54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:87:10:03:2f:02:27:38:bf:83:09:3d:e8:
                    e6:91:fc:9f:63:18:a7:26:70:b5:05:b1:bb:28:f7:
                    2d:ce:67:09:d9:ed:5e:d9:74:6e:9a:fb:f9:c1:2d:
                    f4:7d:58:4f:2f:7c:9b:79:0c:a2:2e:40:01:54:22:
                    be:e9:e2:27:7a:84:40:4b:0d:3e:c1:25:90:e7:e0:
                    eb:e2:93:e4:85:e5:17:70:58:01:11:9f:13:c3:ce:
                    83:51:c9:82:72:1a:3b:9f:8c:ff:3a:a1:65:0e:fe:
                    d7:a7:dc:ed:a9:b9:18:90:36:b5:bf:da:2e:5f:99:
                    04:ec:13:2e:d3:26:bd:48:cd:8d:e2:f2:85:f6:42:
                    45:9e:da:d0:0e:28:e3:a0:63:ce:bc:ed:8e:d6:ff:
                    2d:a1:8b:77:a0:5d:40:cf:68:c8:a5:af:a8:c0:cc:
                    df:cf:6e:09:d6:f3:c2:0a:39:67:04:17:3e:10:49:
                    ad:bc:f5:62:bf:63:79:bc:eb:a8:e9:cc:8f:09:ef:
                    e9:b8:df:e3:2b:28:5e:37:bf:e6:a0:66:33:ec:83:
                    ce:db:08:32:d6:12:28:67:0e:ba:78:0b:b8:07:5d:
                    e0:96:b0:5a:ab:2f:16:27:28:8a:8d:27:7e:a9:b8:
                    9a:4b:69:84:ac:16:5f:3a:1b:23:94:66:81:c6:4c:
                    a3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D7:5B:23:C3:14:D8:A0:8E:59:D1:DF:ED:F4:21:49:78:26:EA:90
            X509v3 Authority Key Identifier:
                keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:1e:3b:51:d4:e7:46:a1:5d:7b:ae:30:ca:95:88:6c:63:48:
         28:9a:99:ba:e2:3c:ff:6c:16:25:6b:a4:d0:a2:7b:0c:cb:cd:
         a6:27:df:89:e5:39:0a:fc:a3:5a:b8:3f:2f:07:a9:b2:23:60:
         1e:0f:8c:91:9f:41:f3:1c:43:6e:70:03:ad:19:9e:ae:2f:9f:
         2b:47:84:23:16:10:3b:37:f2:26:3f:ad:2e:94:a3:d6:fe:63:
         7c:1f:89:98:66:cf:f9:f4:bf:31:b9:c9:14:30:9e:a5:79:b7:
         2a:80:36:69:d8:6c:76:85:7f:12:2f:95:6f:11:e0:d7:ca:e9:
         3c:93:7d:91:69:0f:ce:ee:4e:81:94:7f:59:4e:d7:ee:67:e5:
         61:1d:d2:48:6d:ea:1a:97:d6:99:29:08:fd:e6:4c:17:0e:b8:
         f7:3f:2c:05:07:1a:ea:bf:a8:d9:b8:96:c8:a6:9b:dc:74:0e:
         d3:3e:f7:ca:8d:db:e2:d7:85:0a:8f:74:04:f6:0b:9c:98:6e:
         e1:0a:7e:38:91:d8:49:84:73:f0:bc:e5:a3:49:e7:4b:d5:10:
         53:d8:da:6b:47:c2:98:ec:f7:c6:dd:6f:77:0b:f4:08:71:bb:
         83:99:29:11:c5:66:91:33:0e:90:a0:fe:72:cc:4b:80:0d:54:
         4d:92:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:40 2025 by rpki-client