This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
File:                     2gQijT7rRR_A8iM2aXFwV_irNmk.mft (raw, json)
Hash identifier:          a7sgiTws0o3bjDtkStQWUJZfnQGrsD7RmRImJWj23ys=
Subject key identifier:   6F:95:31:41:83:B4:EF:C3:BA:6D:25:FC:AC:52:F0:E1:05:B4:20:70
Authority key identifier: DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69
Certificate issuer:       /CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
Certificate serial:       08E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
Manifest number:          08DF
Signing time:             Thu 18 Dec 2025 19:56:20 +0000
Manifest this update:     Thu 18 Dec 2025 19:56:19 +0000
Manifest next update:     Thu 25 Dec 2025 19:56:19 +0000
Files and hashes:         1: 2gQijT7rRR_A8iM2aXFwV_irNmk.crl (hash: gDOmtA3qHXvUKkI/5D0hp32yBvPb5hK1ogddm+AcSgg=)
                          2: 26AECD92C2B211EABBD0ED4AC4F9AE02.roa (hash: C/eVnfyL6ySkKhbG0QllU10wv4xhGd4o4YA02lTj0B4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl
                          rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2279 (0x8e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B165, serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
        Validity
            Not Before: Dec 18 19:56:19 2025 GMT
            Not After : Dec 25 19:56:19 2025 GMT
        Subject: CN=69445c63-0f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:7a:98:6d:d4:fe:a9:05:6c:4b:3c:2f:f5:
                    b6:7d:c8:0f:13:4f:c3:5b:56:00:4d:59:17:44:13:
                    6e:71:a1:ef:0e:34:aa:f1:76:f9:23:87:69:52:f6:
                    1a:49:79:ec:8a:15:c9:91:eb:bd:6f:8b:a5:54:8d:
                    7b:b1:5b:06:c3:5b:90:ce:70:f2:07:dc:e0:34:8b:
                    03:fb:bd:5b:fd:f2:13:90:fa:eb:3b:58:f5:e8:c7:
                    89:d1:36:59:f5:49:51:af:62:f2:fa:53:98:3a:0f:
                    a0:ec:21:bc:b2:b1:3d:70:9f:7c:77:12:33:77:fc:
                    5b:86:17:6c:79:79:c2:b8:3f:2d:c1:a8:b3:63:41:
                    c1:cc:ac:0b:4b:52:71:d7:fc:64:72:a5:43:29:97:
                    a7:b9:54:b4:26:b0:24:1a:41:97:05:b9:c3:7c:d5:
                    58:fa:01:a0:2f:d9:1e:1e:02:61:82:35:2e:7c:79:
                    f7:09:39:88:52:2c:fd:31:4a:0b:68:ec:ec:fd:79:
                    7a:66:1a:d5:7f:10:a3:ed:2c:e8:2c:6e:f8:9f:cd:
                    6e:39:f8:1a:aa:9b:e5:ff:e3:dc:81:35:3c:05:99:
                    31:bb:18:16:6f:2e:73:b7:09:1d:6a:47:91:41:be:
                    ae:1a:06:09:18:9f:01:93:df:df:19:3b:76:d7:85:
                    50:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:95:31:41:83:B4:EF:C3:BA:6D:25:FC:AC:52:F0:E1:05:B4:20:70
            X509v3 Authority Key Identifier:
                keyid:DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:67:56:f6:33:62:98:63:fc:09:0a:ce:c4:71:13:5e:22:92:
         ba:62:f7:7b:6a:39:87:dd:63:82:a7:1f:75:7d:9a:04:8c:80:
         e4:a0:35:ea:e0:ea:c1:23:25:a2:15:a8:47:e6:7d:3b:6e:54:
         80:35:21:ca:7a:49:5d:a7:15:49:6d:01:07:b4:32:c1:a8:ea:
         91:f0:1e:2b:98:90:60:53:f6:5d:b0:45:b1:b4:63:ed:e8:ac:
         63:bc:33:9c:c6:10:6a:9d:51:17:ff:9f:e8:c5:de:f3:c2:b5:
         a8:8d:84:c7:08:2b:75:ea:36:c7:fe:63:02:af:38:3c:2e:b7:
         4f:e1:8d:e4:52:cd:69:a2:13:11:67:39:5a:be:1f:4e:3f:18:
         a7:1e:31:a8:d0:9d:d6:bf:f8:d0:14:7d:c6:5a:fa:83:77:cd:
         20:47:d5:88:44:4f:50:02:39:27:43:dc:a6:51:ad:ab:b5:6d:
         48:41:bf:51:48:b2:ab:f6:90:94:1f:44:f3:0c:13:64:0c:03:
         87:0a:34:30:b5:46:5e:98:4f:1a:e7:9f:4c:cf:6e:3e:65:2a:
         55:37:11:04:fb:e9:a0:33:b8:d7:c7:cb:de:eb:b6:97:7d:51:
         a6:5d:69:ad:17:25:c3:b7:59:97:5e:31:b9:2b:ba:6e:d4:f3:
         72:59:13:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:27:42 2025 by rpki-client