This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
File:                     o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft (raw, json)
Hash identifier:          7ly44g94dpPwc8OTMoIE2Vvvsdwo5yW71AeF45CvwSQ=
Subject key identifier:   D3:D1:FC:50:B0:58:B8:CD:7B:77:B7:62:0E:51:F2:CD:5F:D0:24:6A
Authority key identifier: A3:AD:82:B2:4C:7F:F8:EF:F5:4C:92:79:88:C7:CA:3A:5A:8C:44:5E
Certificate issuer:       /CN=A914E3B7/serialNumber=A3AD82B24C7FF8EFF54C927988C7CA3A5A8C445E
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
Manifest number:          0E
Signing time:             Thu 18 Dec 2025 15:05:00 +0000
Manifest this update:     Thu 18 Dec 2025 15:05:00 +0000
Manifest next update:     Thu 25 Dec 2025 15:05:00 +0000
Files and hashes:         1: o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl (hash: jib+CC+yjDaRyHlRKLSkY/KpZHJKcoHUlwgx5sA5Cwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl
                          rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E3B7, serialNumber=A3AD82B24C7FF8EFF54C927988C7CA3A5A8C445E
        Validity
            Not Before: Dec 18 15:05:00 2025 GMT
            Not After : Dec 25 15:05:00 2025 GMT
        Subject: CN=6944181c-51ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:90:0f:d1:c5:b5:56:da:01:7f:ab:8d:ae:e2:
                    48:82:66:e7:2a:0a:e4:e8:19:13:dc:34:e5:1f:cb:
                    93:eb:89:14:81:23:fe:08:90:77:aa:3b:94:78:73:
                    6e:a1:cd:37:ed:fa:0c:c4:7f:bc:ef:06:71:f8:10:
                    90:43:98:e9:ac:fd:69:a5:e7:40:76:09:e8:d7:e1:
                    fa:e6:8d:21:36:c8:75:8a:4e:fa:d6:be:12:b1:f4:
                    55:cd:6b:00:aa:94:83:d7:6d:2e:a2:f4:a3:27:f0:
                    88:01:c2:01:c8:ab:5c:71:45:46:b6:ea:b4:34:b9:
                    eb:c2:03:b3:a7:8d:49:27:d7:ee:af:9a:fd:7e:98:
                    2f:fb:ca:52:b7:7e:b3:15:db:82:52:54:a6:31:24:
                    93:1a:ff:a0:6a:df:27:f0:ea:21:06:42:67:5b:e1:
                    dd:16:16:09:81:44:e4:1e:2e:b1:8b:d7:97:db:c5:
                    2e:57:7b:1f:28:b4:c7:63:45:39:29:4e:1a:d1:48:
                    e7:9a:9f:1b:b5:9e:57:0b:45:be:e1:7f:42:02:9f:
                    85:e4:f1:0c:54:f3:0e:f1:f6:ff:75:0c:d9:25:80:
                    44:2e:1c:97:4b:dc:b7:30:fa:1e:e4:15:ef:12:f4:
                    d8:60:d1:65:15:81:90:21:70:c8:8c:31:f9:ea:9f:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D1:FC:50:B0:58:B8:CD:7B:77:B7:62:0E:51:F2:CD:5F:D0:24:6A
            X509v3 Authority Key Identifier:
                keyid:A3:AD:82:B2:4C:7F:F8:EF:F5:4C:92:79:88:C7:CA:3A:5A:8C:44:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:5f:19:fd:65:4d:e4:6f:07:43:ae:b6:bd:f7:e9:e7:67:b8:
         4a:76:90:03:f6:32:ee:d7:4f:92:30:9b:2b:21:89:62:fd:b1:
         bf:d9:c7:4c:5b:35:57:08:7a:19:0e:d2:94:dc:1c:c5:65:77:
         0e:54:21:23:d1:32:05:46:19:e4:0e:27:9b:04:e4:d9:65:16:
         78:d0:0e:81:0b:f9:31:06:3a:bd:5f:5f:63:c0:a7:ba:94:fa:
         99:6e:8b:ee:ab:ae:99:68:ac:ed:87:8f:b5:c9:e8:7d:a2:e0:
         db:51:7d:96:17:96:aa:53:1a:1d:a8:2b:15:63:86:3e:d8:54:
         17:4e:e3:e2:e9:87:37:7f:d7:3a:5a:92:9b:1d:d5:4d:b9:d1:
         eb:fc:ae:fb:d4:9e:88:79:83:e7:34:e7:4a:ff:e9:9e:c8:a8:
         dc:9f:98:68:7b:77:a2:41:e7:42:a6:5e:ea:16:0d:1d:51:2d:
         0c:e2:6f:50:a6:1d:03:6c:ee:c8:8b:30:fb:c2:b6:4f:e6:74:
         4e:48:c4:ff:c6:11:d1:b8:7f:3d:4a:cd:16:19:e1:84:26:58:
         87:c1:78:36:e0:24:e9:1e:35:f7:ad:e0:a2:54:ed:5a:a1:2f:
         96:3f:d2:1b:03:c9:e7:39:a7:1f:63:76:da:d5:39:d7:f7:c3:
         47:64:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:51:12 2025 by rpki-client