This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
File:                     dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft (raw, json)
Hash identifier:          JZ4bxodqrvvZgIEt6MBFHcJn8vvFjNJi1+B12Pz2zwo=
Subject key identifier:   33:E7:93:A9:62:A6:B1:D8:D2:78:F1:B9:BC:6C:48:B6:24:BB:C5:F1
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Certificate issuer:       /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial:       062D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
Manifest number:          0618
Signing time:             Sat 20 Dec 2025 22:12:00 +0000
Manifest this update:     Sat 20 Dec 2025 22:11:59 +0000
Manifest next update:     Sat 27 Dec 2025 22:11:59 +0000
Files and hashes:         1: dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl (hash: rdo2foeFWWBDSMOocwhdEDbWkOHeyebVEKrb7VPvJXo=)
                          2: 77A20CBE5BDC11F0BE617A76C4F9AE02.roa (hash: +Zl76cmx7AGsUQYqJ/t8IiGMCuy30Wvn2FjTFytnW7U=)
                          3: B00A7E6A5BDC11F098C0ED78C4F9AE02.roa (hash: eH6QA4sZzgrBJC86LHr1zy/a4vVBHZoyZjexz7LGcMM=)
                          4: C2B9483E5BDC11F0AA574A7AC4F9AE02.roa (hash: ex+WlMFyVtiheikj5CcskwxC1bY5wSTJhW1aaMBV/nE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
                          rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
        Validity
            Not Before: Dec 20 22:11:59 2025 GMT
            Not After : Dec 27 22:11:59 2025 GMT
        Subject: CN=69471f30-b47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:38:40:5d:3c:91:63:34:6a:5e:76:d3:61:
                    a2:3c:e8:97:42:85:87:af:16:61:3c:cb:5a:b9:ae:
                    8f:97:55:19:e0:18:c7:dd:d0:d7:1a:2f:09:ee:30:
                    1a:d3:26:a9:49:6b:90:9c:5f:72:c2:6d:98:88:de:
                    80:65:a0:1e:37:fe:dc:1c:15:e7:83:56:89:98:c1:
                    2f:82:82:69:14:13:74:ae:ca:b6:12:fd:29:8b:b8:
                    cb:98:fc:1b:73:35:d6:7b:14:b3:94:9e:fe:63:15:
                    cd:67:35:4d:73:62:e8:96:57:7d:67:66:7b:a7:14:
                    5a:32:74:cb:f4:e1:66:73:c8:f6:a8:a6:08:2b:08:
                    84:af:7f:0b:73:85:f3:96:99:a5:a7:de:6c:a5:87:
                    a6:3b:97:f5:37:9d:93:03:ab:99:43:82:dd:e1:01:
                    a4:70:00:b0:41:5d:04:af:90:e3:26:e4:34:01:fe:
                    11:5b:15:20:ad:15:24:16:5f:61:f9:ad:a8:03:15:
                    71:63:36:14:fa:2c:81:f1:98:01:a2:89:08:76:52:
                    2e:ac:e3:b5:64:29:2d:60:b4:36:a1:b9:ee:ab:38:
                    97:60:65:17:bb:1f:c7:c9:17:a8:fb:8c:61:2a:05:
                    30:c4:41:a6:d1:18:99:62:ed:7b:be:37:74:f9:16:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E7:93:A9:62:A6:B1:D8:D2:78:F1:B9:BC:6C:48:B6:24:BB:C5:F1
            X509v3 Authority Key Identifier:
                keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4b:69:15:bd:43:fd:c2:0a:1f:7e:06:da:5a:3f:48:97:d3:
         6e:1f:05:54:e0:78:a6:4c:ee:5d:15:30:74:a6:98:ec:d3:46:
         c2:86:07:93:c4:13:b1:9a:20:43:18:4d:09:80:a2:9a:5c:75:
         97:71:2d:6f:22:28:ae:e0:f0:80:dd:74:ba:2c:6f:26:34:f1:
         c7:41:15:78:43:42:65:4e:c1:6a:6c:e0:a8:93:83:4b:ca:81:
         c0:40:31:23:9f:c5:28:f7:70:3a:f4:3f:e0:e8:29:4b:ac:3b:
         20:8d:69:4e:36:76:3d:88:6e:2e:91:a9:e1:ff:33:08:67:31:
         6e:73:91:86:12:99:0d:41:7d:d5:b7:82:66:6e:68:ea:f0:55:
         c4:bd:fb:55:f0:1d:aa:ad:92:54:15:98:2d:ab:ca:b1:5b:f1:
         40:2f:0f:7f:ad:16:01:27:51:b5:2a:b5:80:3a:65:58:3f:8f:
         14:ec:41:5d:96:18:f4:cd:cf:fe:62:3f:e3:93:60:74:6b:7c:
         99:42:43:2b:5d:1e:3b:8c:54:6f:91:d4:2d:ab:1d:d7:ee:d4:
         d8:43:5c:e1:b5:07:a9:9b:4f:05:0d:f9:15:c3:58:77:a2:63:
         72:6c:da:0b:8d:6b:e1:2a:6d:18:d7:fb:ff:2b:76:fc:48:cd:
         ab:b3:6f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:16:20 2025 by rpki-client