This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
File:                     edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft (raw, json)
Hash identifier:          Gy3RQKR6d/ik5a5CaqGSO5u97daVSqLET2J6SKnASzk=
Subject key identifier:   BD:E9:83:F3:A8:98:C8:8E:25:ED:51:E7:9B:C1:96:CD:77:FB:A3:B6
Authority key identifier: 79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F
Certificate issuer:       /CN=A914541C/serialNumber=79D6305FA22FFDF7E351067497862C64A165472F
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
Manifest number:          0146
Signing time:             Tue 23 Dec 2025 03:18:59 +0000
Manifest this update:     Tue 23 Dec 2025 03:18:59 +0000
Manifest next update:     Tue 30 Dec 2025 03:18:59 +0000
Files and hashes:         1: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl (hash: RJDhykjf3s92mP0isNEnWhZCk+RPf7dRIAFVeQI8CcU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl
                          rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:18:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914541C, serialNumber=79D6305FA22FFDF7E351067497862C64A165472F
        Validity
            Not Before: Dec 23 03:18:59 2025 GMT
            Not After : Dec 30 03:18:59 2025 GMT
        Subject: CN=694a0a23-7684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:28:b0:27:71:47:06:f4:ac:53:c9:21:cf:
                    e1:50:14:d1:47:bc:88:2c:c0:9b:b6:ea:6b:b5:58:
                    17:f6:17:ad:54:ca:40:c6:e6:a2:ef:1c:b9:2c:fe:
                    c2:b0:ad:60:64:12:96:0f:60:92:85:f5:99:a5:5b:
                    cc:a9:05:ce:92:c6:ec:57:17:4e:c6:ec:d2:22:09:
                    fb:e9:90:32:eb:e0:29:ae:13:e9:87:8f:7a:16:c6:
                    0c:1e:e5:6b:50:d2:7e:d2:09:09:8f:50:1e:ba:dd:
                    9a:99:8c:fc:5c:88:b2:24:9a:09:62:1e:77:80:15:
                    a7:27:38:0d:1c:fe:6d:5a:ac:c2:ee:d1:64:6a:ad:
                    68:a3:43:fd:73:8f:bb:c5:e7:2e:48:3b:1e:75:d9:
                    ed:97:98:ba:3a:63:8c:59:a0:0f:d7:76:f8:9a:7a:
                    b8:5c:c4:18:82:75:66:4e:db:dc:1f:6d:45:2f:28:
                    ae:19:7e:78:46:a9:9a:ba:90:e9:7f:94:42:17:eb:
                    40:c8:2b:44:43:f0:23:58:54:bf:84:b8:d5:af:81:
                    52:90:05:eb:5b:04:ba:3c:fa:45:93:db:b9:8c:e9:
                    c0:cf:81:fa:00:37:f8:36:dd:66:f0:7d:bf:cb:b3:
                    c9:cc:70:7d:bf:24:de:08:9d:2f:f8:09:6b:af:73:
                    f2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E9:83:F3:A8:98:C8:8E:25:ED:51:E7:9B:C1:96:CD:77:FB:A3:B6
            X509v3 Authority Key Identifier:
                keyid:79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:93:11:d8:2a:21:1d:60:24:eb:8f:34:b3:83:85:a9:b1:62:
         0a:32:e9:bc:bc:7b:50:7f:b1:03:3f:d8:2c:8c:9c:67:9e:73:
         a7:89:36:a6:57:3f:f5:72:ae:12:0d:6c:aa:33:9c:8d:12:d6:
         f7:d7:4d:48:f5:36:7a:ed:b7:5f:91:ce:91:26:97:53:86:9a:
         90:08:8d:8b:84:da:bf:56:d7:1e:00:71:6a:74:fa:ca:9e:0b:
         7f:32:24:c4:c0:58:ea:ae:c0:c6:d0:8d:c6:c5:88:ba:12:fd:
         15:d1:91:4a:1e:34:87:0d:f7:8b:e5:c2:25:dc:db:5c:21:af:
         ca:5a:93:8b:e6:79:fa:46:37:46:8a:4c:60:d7:0d:c1:e7:7d:
         99:8d:fe:84:e1:6f:0b:70:5c:64:a4:e3:c3:4a:2e:fa:38:7b:
         11:5d:2c:a3:4e:eb:e5:ac:9b:91:01:04:48:e5:57:35:1f:47:
         81:a4:e2:4c:2a:be:73:74:3d:14:a8:63:a2:36:5f:98:ed:a1:
         b4:30:76:12:b2:04:a7:e3:58:fc:31:16:4c:2c:e4:6b:40:ab:
         d0:c5:4a:08:13:47:b3:d1:27:af:b4:aa:a4:38:59:50:a6:9f:
         ea:38:1a:21:ab:b5:42:2b:16:58:e9:76:18:4a:db:3b:2b:8a:
         c0:b3:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 01:23:01 2025 by rpki-client