This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
File:                     STXJCZ1YAoESreyiiRQ1_MWPuiw.mft (raw, json)
Hash identifier:          2KxLB3Y3LzFO6m3uP70X7IWla9KquyXHY1WuhBnz1mM=
Subject key identifier:   32:90:B4:63:CA:DE:E9:A9:B5:D3:5B:90:44:6C:43:CF:11:83:79:BF
Authority key identifier: 49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C
Certificate issuer:       /CN=A9142E1E/serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
Manifest number:          E3
Signing time:             Fri 19 Dec 2025 04:34:58 +0000
Manifest this update:     Fri 19 Dec 2025 04:34:58 +0000
Manifest next update:     Fri 26 Dec 2025 04:34:58 +0000
Files and hashes:         1: STXJCZ1YAoESreyiiRQ1_MWPuiw.crl (hash: euoE9IOst/hPO0QP4brpcMES5q6p6jar5QFuhhnmMAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl
                          rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142E1E, serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C
        Validity
            Not Before: Dec 19 04:34:58 2025 GMT
            Not After : Dec 26 04:34:58 2025 GMT
        Subject: CN=6944d5f2-0611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ed:b7:8f:eb:c1:11:3e:71:47:03:66:d9:71:
                    c3:3e:d8:78:21:46:ac:a1:53:b4:d0:98:e2:93:a0:
                    84:d4:17:fc:30:98:7b:09:7a:2c:14:62:4e:2a:c4:
                    95:02:db:d0:82:ed:a7:b5:9a:61:5a:1e:38:9f:a8:
                    80:9f:e1:16:84:6a:ac:cb:18:78:68:7d:ec:3d:f9:
                    73:27:35:2f:56:02:6e:8e:57:6b:da:5c:a1:18:62:
                    49:a7:4c:e8:f1:83:f4:1e:17:e9:3b:24:91:cc:28:
                    af:b2:c3:4b:3f:7a:f4:29:7c:aa:2b:68:26:c4:5d:
                    fa:8b:66:19:56:c8:40:6f:06:70:8d:24:59:68:de:
                    65:57:a4:5d:bb:bd:22:6e:fb:df:76:22:45:a1:fd:
                    52:64:34:2e:32:c5:4e:6f:be:92:04:ca:4e:57:48:
                    27:27:9b:48:65:bc:cd:be:cc:6a:fb:c6:20:94:80:
                    20:c3:a6:a2:09:95:37:fe:e4:1d:db:06:7c:2c:0c:
                    ca:15:14:7c:69:86:9f:1f:07:8c:3d:5d:bc:7b:aa:
                    5f:88:db:82:76:96:85:f4:30:12:e9:ac:92:66:90:
                    88:03:ba:b0:9d:79:2c:4d:1e:f1:c7:46:ce:7d:7e:
                    34:ed:90:4c:5b:ab:f8:aa:eb:09:54:ee:d2:b3:f1:
                    79:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:90:B4:63:CA:DE:E9:A9:B5:D3:5B:90:44:6C:43:CF:11:83:79:BF
            X509v3 Authority Key Identifier:
                keyid:49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b6:45:43:05:d7:75:a9:3c:ea:14:b4:cb:04:f1:94:3e:e4:
         31:15:ba:b3:40:06:d8:a2:e2:86:fd:04:20:24:3e:21:16:2e:
         5d:55:bc:4d:a8:a7:b2:ed:53:ea:37:f4:b4:2d:0c:8d:ac:59:
         2a:0a:68:94:0e:46:d8:39:d5:a8:24:b8:09:b8:82:8a:77:2e:
         15:2e:83:c6:d2:fd:d0:1c:61:1f:4d:86:4e:58:d8:e3:83:7a:
         ab:15:7b:3e:04:ad:b0:f7:3b:f3:0a:61:aa:2a:b0:bd:21:ec:
         67:98:3e:31:bb:7a:a9:96:a9:c1:62:52:04:54:9a:c8:fa:87:
         33:68:85:bf:6d:d4:11:e7:a9:6c:a8:08:7d:3c:58:8c:71:98:
         a4:f7:3a:88:1e:5b:6f:65:80:b4:8c:99:e6:81:53:9a:76:ab:
         19:02:99:d8:fb:d0:5b:d5:9b:9f:df:92:d5:5a:98:c1:94:91:
         46:9a:5f:75:76:e0:21:4c:6f:40:ac:cf:ef:d8:df:85:55:e6:
         5a:82:ce:2b:36:25:15:1a:3e:2f:32:1d:70:e0:08:dc:20:b7:
         08:5d:f9:7e:c3:cf:3b:eb:95:b3:b1:1e:00:fe:6f:63:ab:20:
         0e:9d:dd:30:bf:7f:a0:d4:50:db:a2:f6:33:42:d3:ab:8d:cb:
         d2:b9:84:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:36:37 2025 by rpki-client