This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
File:                     AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json)
Hash identifier:          0mXTqummVsiou5BtZ+pTf6bfVZhO08MvUNxK/VM32BU=
Subject key identifier:   52:8B:30:3E:E0:2E:6B:B0:85:CF:B1:39:5C:76:50:7C:77:DB:D3:19
Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4
Certificate issuer:       /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4
Certificate serial:       244E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
Manifest number:          243D
Signing time:             Thu 18 Dec 2025 15:43:52 +0000
Manifest this update:     Thu 18 Dec 2025 15:43:52 +0000
Manifest next update:     Thu 25 Dec 2025 15:43:52 +0000
Files and hashes:         1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: 4nHXfp31225rIQpcSid6IETziz3BcWemD0j6JMPCqG8=)
                          2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: ynqxjgpY/LcV5YgALtE8f4Xl7ViuJV7AKID6+ElR2jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9294 (0x244e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147259, serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4
        Validity
            Not Before: Dec 18 15:43:52 2025 GMT
            Not After : Dec 25 15:43:52 2025 GMT
        Subject: CN=69442138-8b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:09:c1:32:8a:81:02:9d:1c:fd:f4:78:48:
                    84:aa:e8:73:d5:f6:76:23:df:72:58:63:bf:7f:01:
                    34:04:57:a3:83:ae:af:ec:dc:12:6d:3d:59:45:bb:
                    09:00:d2:38:16:a8:c6:4c:64:e6:d1:c1:93:f1:31:
                    47:bb:0c:dd:ee:b8:00:90:c8:f1:e6:70:77:0c:c7:
                    d0:ee:88:33:15:fd:40:86:27:f3:44:9c:26:75:4a:
                    14:21:b7:fd:dc:87:37:b1:db:8b:24:65:85:21:57:
                    32:98:99:03:b3:21:b9:ec:76:b9:39:3c:90:4e:59:
                    1c:2f:02:12:e6:04:69:1a:46:7d:36:09:ea:41:9b:
                    ba:2e:e0:9c:83:d7:9c:5c:df:05:be:75:08:56:92:
                    01:1c:d4:b1:03:a3:7d:36:4f:f6:6f:81:fb:e4:a6:
                    4e:c2:88:7b:45:52:f6:61:c5:18:83:a4:e4:dc:fe:
                    f0:87:a2:70:ec:40:84:05:8d:b9:de:3e:a6:52:74:
                    a9:79:e3:08:78:ab:6d:a6:0a:66:1e:6f:e2:7b:01:
                    06:78:ea:41:aa:c4:b6:93:96:7f:55:95:ad:2f:34:
                    cf:1f:6a:e3:77:80:54:cb:12:a6:d2:1d:9b:95:aa:
                    69:c0:ca:cc:1d:9c:00:89:0c:bf:62:86:c7:71:c1:
                    b3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8B:30:3E:E0:2E:6B:B0:85:CF:B1:39:5C:76:50:7C:77:DB:D3:19
            X509v3 Authority Key Identifier:
                keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:49:a6:15:e4:0c:4e:bf:a2:18:d2:d6:aa:b1:6a:53:75:33:
         98:40:58:a6:8a:f1:41:88:1f:04:72:ba:bd:9d:2c:37:10:d1:
         38:a1:01:ba:8d:75:97:44:18:95:79:3a:8a:94:d3:3c:f0:b3:
         d5:79:25:ee:78:81:a4:36:06:9a:75:d4:fd:85:c7:02:dd:0a:
         02:84:e8:5c:83:ad:c2:f5:75:e6:e8:d0:fe:e3:d5:8e:71:df:
         2f:f9:4d:56:84:cd:35:60:45:e9:0c:ec:3a:a8:a8:62:03:30:
         71:79:bc:bb:8e:a8:e9:d4:70:00:b8:2b:d1:53:25:31:0f:13:
         9e:4b:66:80:b4:a8:3b:b2:28:3a:7a:4e:12:76:8b:81:c5:09:
         c5:a2:56:5b:3b:f5:aa:3f:d7:41:51:80:7d:f5:5a:7d:63:d0:
         54:bb:6f:7e:06:21:24:20:ed:2b:63:6c:bb:dd:ea:b1:2d:92:
         6f:3a:22:c5:15:e0:b6:00:9b:3f:57:fc:7e:97:a1:21:75:bb:
         11:08:27:aa:71:85:e1:98:ca:bd:1f:e9:b1:7f:4e:47:55:33:
         8b:77:b2:fb:2a:b9:7f:e2:8b:c6:63:cb:0c:b1:e5:6c:39:95:
         42:b0:0b:f5:21:fa:6e:09:bc:97:cd:83:a2:20:42:7f:28:13:
         91:9f:f2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:46:57 2025 by rpki-client