This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
File:                     r1VYG6En4gkKClRi_nvOcGFvLNw.mft (raw, json)
Hash identifier:          CrRgkVCCSHy2rF8+VWu8y3UlhotLu1P1tsZlxsRxIsg=
Subject key identifier:   A0:91:F6:7E:C0:8F:DB:88:1E:23:40:79:CF:F8:E6:D2:A2:29:E3:0C
Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC
Certificate issuer:       /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
Certificate serial:       037F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
Manifest number:          0375
Signing time:             Fri 19 Dec 2025 00:07:41 +0000
Manifest this update:     Fri 19 Dec 2025 00:07:40 +0000
Manifest next update:     Fri 26 Dec 2025 00:07:40 +0000
Files and hashes:         1: r1VYG6En4gkKClRi_nvOcGFvLNw.crl (hash: MfY92Ugmu6Xbriobqo0Rq/cr3sLN80iXhxcSSwobzPk=)
                          2: 1B22E756D37711EC9A8FF526C4F9AE02.roa (hash: gy37y3m86p91aNaJLGl/OcCXrwdEyv/PB6GXlm+9olg=)
                          3: 1CA2FA08D37711EC9A8FF526C4F9AE02.roa (hash: 5YLYcly93145UErNSmHTZCyYs7eD4zU0w+fdftiuni0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl
                          rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895 (0x37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B758, serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
        Validity
            Not Before: Dec 19 00:07:40 2025 GMT
            Not After : Dec 26 00:07:40 2025 GMT
        Subject: CN=6944974d-0b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:b4:43:01:af:2d:8d:5f:38:a0:27:22:2c:
                    3c:83:16:9c:9f:7e:23:2b:fc:30:e7:49:3f:31:4d:
                    00:29:67:da:c5:a3:68:48:9f:18:f5:2c:f5:82:6d:
                    8d:63:8b:71:16:f6:e0:45:2e:0e:47:02:f7:98:22:
                    f7:8b:7d:ed:2d:04:91:ba:87:21:8b:8b:bd:27:21:
                    ea:32:75:fa:12:b1:be:2a:d6:59:2b:a4:1b:75:56:
                    e4:1c:b8:e4:4f:e4:f5:89:aa:f6:e2:2c:be:71:a9:
                    04:c0:98:3b:2b:c7:f1:10:d3:8f:69:fe:d4:ee:8e:
                    25:d0:79:ce:32:1b:ef:3c:ef:41:e7:83:80:ce:3b:
                    69:dc:9c:15:3e:f4:c4:e5:db:54:00:4e:f0:7c:dd:
                    d2:aa:60:51:b8:e9:d7:1b:92:a4:e1:36:fd:4d:4a:
                    cc:bf:df:ee:8c:39:07:10:38:7a:41:07:e6:5d:e4:
                    0c:95:44:98:59:19:65:17:a1:90:0f:89:8b:cd:09:
                    1e:9c:06:27:94:0d:65:59:18:cd:19:8e:a1:b3:89:
                    38:d3:66:2e:f5:6d:99:07:e5:3b:85:8f:b8:25:f6:
                    ee:f9:af:17:67:05:29:ac:fe:55:bd:20:4d:28:09:
                    4d:56:26:92:38:7a:c7:3a:59:10:c4:44:a6:6f:0c:
                    6d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:91:F6:7E:C0:8F:DB:88:1E:23:40:79:CF:F8:E6:D2:A2:29:E3:0C
            X509v3 Authority Key Identifier:
                keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:1c:01:d8:d0:65:74:49:b0:6f:7c:d4:4d:21:09:ff:0c:2b:
         92:08:2e:1f:ad:e4:91:5a:66:8a:73:2a:99:9a:23:dd:be:eb:
         37:30:ae:cc:02:45:c9:6d:7c:1e:e6:13:d3:bc:77:20:c6:c4:
         b5:2c:98:39:36:9c:15:25:36:e3:3d:9b:a4:1e:99:52:95:15:
         d1:3c:72:24:d1:8c:be:60:04:22:43:8d:2c:cc:e8:b6:35:af:
         f2:07:60:ca:6c:52:43:a6:6c:42:b0:62:0e:5b:84:61:83:2e:
         aa:7e:5b:5d:71:fd:4c:2f:cd:44:d1:6a:3e:90:d9:c8:32:f7:
         e7:22:bf:b7:bc:53:80:df:25:5b:eb:98:84:ee:10:a2:b7:7c:
         67:4e:cf:58:5e:6c:d5:6a:f4:95:ea:d3:90:8d:fd:ca:a9:67:
         53:dc:ac:88:e5:e6:76:d5:7a:bd:e6:80:c2:e4:4f:f0:51:85:
         9a:46:12:cc:d5:ad:b2:64:52:e9:8a:e8:ad:be:d9:06:ed:e0:
         26:dd:a1:f4:6a:fa:a5:d8:68:63:e2:9e:8d:3a:95:c9:c9:51:
         a4:13:71:c7:de:96:f8:f5:c9:90:ea:ce:67:16:08:41:9f:00:
         43:e7:c3:09:dd:e5:6d:4a:17:b9:1a:7a:64:10:b8:95:f5:5a:
         fb:ea:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:14:44 2025 by rpki-client