This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
File:                     DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json)
Hash identifier:          /qBTfnFmwS5uw4NwCDh5KzhWseuRnQ1qx24MWBDoE60=
Subject key identifier:   20:23:83:9B:BA:7E:AB:9C:AA:DA:DB:B1:07:36:FF:B9:B9:2B:43:CC
Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
Certificate issuer:       /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
Certificate serial:       03F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
Manifest number:          03E7
Signing time:             Sun 28 Dec 2025 23:41:06 +0000
Manifest this update:     Sun 28 Dec 2025 23:41:05 +0000
Manifest next update:     Sun 04 Jan 2026 23:41:05 +0000
Files and hashes:         1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: eFtf4pLcJruHszbj1aMXmPuF2sv/l72z2pWVcixsgGI=)
                          2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: EyHs5y7oE17xIkYVPklIvc2ZONwGgz4agYPg5DpPAPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl
                          rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 23:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1012 (0x3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
        Validity
            Not Before: Dec 28 23:41:05 2025 GMT
            Not After : Jan  4 23:41:05 2026 GMT
        Subject: CN=6951c012-5fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:53:15:98:cc:47:4e:cc:d1:2b:b7:28:f3:
                    74:a5:cb:d8:27:85:d5:2b:17:24:67:f4:5b:38:38:
                    5d:4e:7a:de:f4:0a:54:42:ad:83:b1:4b:4e:76:1c:
                    f2:29:04:55:ee:a0:88:dd:a9:8f:d5:a9:28:32:d7:
                    61:19:e2:e4:45:6a:99:24:e2:92:89:c6:0c:5e:8e:
                    13:4c:f0:40:b2:9b:9e:7e:10:00:f8:7f:47:a2:7d:
                    25:97:a1:ad:cf:db:08:d8:d6:c0:8b:07:cb:80:f9:
                    06:b4:17:44:16:e5:c2:4e:e9:fb:7d:5c:ec:13:46:
                    bb:70:03:db:a5:de:13:c0:f4:31:a8:4a:31:8d:28:
                    f8:f1:98:02:f3:a1:92:e8:b2:6e:5d:02:58:90:25:
                    1e:7f:e5:92:56:f9:52:1d:b1:65:cb:7c:c8:0f:3a:
                    72:c6:0e:fc:ef:b8:42:d8:92:6e:7c:c3:e5:8f:f9:
                    db:17:c3:5c:57:ed:96:3d:fd:7d:f1:d9:35:b9:7d:
                    f9:a7:87:9b:f6:f3:1b:8a:bd:a1:8d:fe:9d:e5:07:
                    7d:73:1b:a1:42:a4:6b:a7:77:18:1d:27:d6:9c:15:
                    56:20:90:37:d4:32:36:59:82:cb:d7:61:19:9f:30:
                    ca:a8:6c:a9:c6:f3:29:93:dc:82:9e:79:1b:a4:b9:
                    a3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:83:9B:BA:7E:AB:9C:AA:DA:DB:B1:07:36:FF:B9:B9:2B:43:CC
            X509v3 Authority Key Identifier:
                keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:81:73:44:eb:70:46:59:9f:ea:39:be:a8:cd:f2:50:7a:a2:
         66:22:a2:c0:7e:9e:94:70:86:08:e1:5d:46:f9:01:b0:09:1d:
         9e:88:cd:de:70:95:88:f3:75:c6:3b:16:5a:51:aa:ec:f1:06:
         9d:4a:8a:19:24:30:28:83:c0:e4:d2:9b:72:54:c5:af:a9:58:
         9f:1e:b8:66:1d:76:22:4b:b6:2a:70:ab:18:86:30:ee:cf:0f:
         6a:db:73:20:99:2c:51:3a:d5:17:54:c4:c4:4f:e8:c8:c1:e7:
         73:31:01:52:b2:18:c9:ce:e6:e4:1d:ba:c6:7b:34:b4:34:ae:
         e3:f4:81:0f:69:24:0f:bb:36:c8:89:7d:0b:39:7e:5e:c1:85:
         c8:bd:39:2c:ad:f7:69:6e:af:dd:01:c3:9b:af:5c:4a:7a:8c:
         1a:a3:d9:69:db:c3:7f:0c:ac:6f:47:36:17:04:1a:64:7d:97:
         6b:a6:0d:a4:13:fa:dd:8b:08:1a:a8:59:1e:b1:c3:ec:04:24:
         40:80:e5:0a:13:34:2a:95:9f:98:00:f3:a1:76:ba:0a:41:39:
         15:e8:1b:c1:23:71:34:d4:f4:25:47:ad:e9:08:49:95:18:74:
         6d:9c:17:b5:1d:ca:49:26:46:c4:61:ee:19:65:92:8a:39:f3:
         eb:49:72:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:26:37 2025 by rpki-client