This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft
File:                     adZjNUxrsvo0MdQq-FaCEER_2-E.mft (raw, json)
Hash identifier:          WZZA+v3TeTB5Sn1w6v+gcm6+xcg0Tarl59/Q8girbyg=
Subject key identifier:   38:E6:59:A0:30:03:D4:96:AA:80:B8:00:5F:EC:A5:2E:04:DD:3F:CD
Authority key identifier: 69:D6:63:35:4C:6B:B2:FA:34:31:D4:2A:F8:56:82:10:44:7F:DB:E1
Certificate issuer:       /CN=A9150F54/serialNumber=69D663354C6BB2FA3431D42AF8568210447FDBE1
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/adZjNUxrsvo0MdQq-FaCEER_2-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft
Manifest number:          1D
Signing time:             Fri 19 Dec 2025 06:43:24 +0000
Manifest this update:     Fri 19 Dec 2025 06:43:23 +0000
Manifest next update:     Fri 26 Dec 2025 06:43:23 +0000
Files and hashes:         1: adZjNUxrsvo0MdQq-FaCEER_2-E.crl (hash: /QZan48IOcut4b4nXYxDSX44RcjSrcmMaxzaAMYN6fg=)
                          2: 7A8E45ACB3D211F0B405AB5CC4F9AE02.roa (hash: HfDxaBHZ6X0XQZ+M+nxQJ2IQep+T6wXa2xyzjQc0a6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.crl
                          rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/adZjNUxrsvo0MdQq-FaCEER_2-E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F54, serialNumber=69D663354C6BB2FA3431D42AF8568210447FDBE1
        Validity
            Not Before: Dec 19 06:43:23 2025 GMT
            Not After : Dec 26 06:43:23 2025 GMT
        Subject: CN=6944f40c-ffd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:bf:bf:6a:49:f9:6f:99:be:85:45:88:e0:
                    8d:44:83:00:3e:b7:bb:72:a4:8d:de:e8:fa:6e:78:
                    73:c2:3b:10:f3:d2:c6:06:a7:fd:71:72:24:61:3b:
                    12:94:6d:8b:2e:7d:3f:92:06:67:75:93:26:64:10:
                    64:69:dd:e7:02:21:d5:0f:fb:69:98:4b:de:69:0f:
                    a5:86:be:a0:c8:d9:52:a6:6f:f6:b5:3b:e7:ec:c3:
                    dd:ec:83:50:8b:1d:29:b8:8a:87:b7:62:d3:3a:83:
                    e9:5f:0c:a1:6a:66:9f:ac:a2:2c:8a:b9:8d:f2:45:
                    ad:b6:51:71:15:0a:48:d2:8b:38:32:7e:08:83:86:
                    e4:b8:ec:59:c5:80:76:ea:c9:1a:89:8c:8a:e2:11:
                    21:22:19:30:66:55:59:49:31:57:6c:f2:86:54:32:
                    e1:f4:2a:b5:8a:d7:67:6b:2c:2c:eb:d8:a3:72:42:
                    16:e9:b4:da:8d:55:62:58:b4:ff:bb:03:94:39:42:
                    f8:65:ca:57:18:c9:f1:7c:5a:37:1c:24:d5:b7:a7:
                    2e:4e:65:51:1f:99:c5:12:36:43:56:65:3f:90:84:
                    49:6a:85:ce:7f:72:fc:a6:27:21:c3:d2:5c:b1:8c:
                    02:b4:b5:d0:f7:81:39:14:c6:be:e9:49:55:7e:ae:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E6:59:A0:30:03:D4:96:AA:80:B8:00:5F:EC:A5:2E:04:DD:3F:CD
            X509v3 Authority Key Identifier:
                keyid:69:D6:63:35:4C:6B:B2:FA:34:31:D4:2A:F8:56:82:10:44:7F:DB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/adZjNUxrsvo0MdQq-FaCEER_2-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:71:e3:53:34:08:34:ca:90:ab:97:e3:66:ef:3f:0f:fe:41:
         6e:a2:ce:8b:4b:ba:a9:60:7d:f7:f3:aa:9f:74:ed:a4:b1:f4:
         7d:74:0e:e5:fa:cb:78:ba:1d:0e:03:49:30:be:08:df:60:7a:
         fc:87:02:18:3c:61:eb:29:78:e4:5a:c8:b8:9d:8f:36:10:39:
         9b:03:84:9e:d6:ed:9a:c1:2b:24:02:3a:d2:6d:b0:3c:03:37:
         9a:aa:40:f4:c2:66:92:d5:ce:c7:ae:9d:15:55:9f:ac:98:b6:
         ab:ac:da:c9:2b:e9:18:96:df:85:ed:2c:c2:9f:c3:0e:b9:1b:
         4d:1d:06:3a:ef:d7:14:eb:2e:4e:e5:d2:9e:c1:5c:b6:83:86:
         24:44:86:52:85:0e:e6:aa:b8:c5:b3:56:56:51:e3:f5:73:9b:
         e4:11:72:23:dc:48:ee:e1:44:82:86:4f:48:54:06:15:f5:d4:
         54:41:85:e3:e3:2e:c5:93:28:33:96:24:e3:19:0c:16:be:53:
         0f:02:af:7c:3b:f6:b7:cc:fd:97:39:2f:0c:87:fd:a4:be:59:
         00:49:ff:f4:33:7a:77:32:de:65:ff:da:3d:15:96:c5:90:cf:
         32:e0:89:10:ee:34:5b:59:f6:75:89:12:3f:c2:7c:d4:3f:cd:
         1e:4a:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:50 2025 by rpki-client