This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
File:                     rMARlDOHfwx0KFe46lIPjaTtCVo.mft (raw, json)
Hash identifier:          7YVo3nukkFRJiIZTBVTbIWvESDylmd9LKQPCshhwcNM=
Subject key identifier:   7D:D2:07:E1:C0:79:AC:E8:8A:2D:34:AF:F8:DE:13:20:AA:56:BC:9A
Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
Certificate issuer:       /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Certificate serial:       06BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
Manifest number:          06B5
Signing time:             Thu 18 Dec 2025 21:39:49 +0000
Manifest this update:     Thu 18 Dec 2025 21:39:49 +0000
Manifest next update:     Thu 25 Dec 2025 21:39:49 +0000
Files and hashes:         1: rMARlDOHfwx0KFe46lIPjaTtCVo.crl (hash: j/PBLNSzxpv9BwnwtRtRlJQNutltztXf8HEFuYIVa1Y=)
                          2: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (hash: 6Nwx6Bdy1j4/Wbla1onGos1GwfTZf0C7yW2rjUd5bAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
                          rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1726 (0x6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A5E7, serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
        Validity
            Not Before: Dec 18 21:39:49 2025 GMT
            Not After : Dec 25 21:39:49 2025 GMT
        Subject: CN=694474a5-6cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:d8:91:24:d2:4a:a7:11:32:3b:99:eb:f3:
                    76:64:8d:0c:19:18:b1:61:b6:10:e4:df:2e:bf:1f:
                    04:41:41:6e:a8:24:17:cb:70:6d:73:ef:d9:29:ce:
                    c4:21:95:38:1e:8b:99:ea:a8:7b:eb:72:7c:92:80:
                    c6:92:9d:c1:3d:13:f8:f0:e6:b5:df:a5:de:d6:fe:
                    f9:56:84:3e:65:c3:36:01:17:90:b3:33:c7:c2:42:
                    46:c8:21:32:27:ae:22:44:33:59:03:61:40:8d:df:
                    b9:89:24:94:a6:c0:04:27:b4:25:6a:46:91:fc:57:
                    74:d0:99:a1:5c:9c:76:5e:46:4c:ff:eb:b5:d9:6c:
                    2a:96:ae:0e:46:a0:12:25:fc:07:b5:d8:ee:fb:d2:
                    3f:e0:99:c9:40:88:fc:68:86:3c:bd:7b:78:64:26:
                    2e:3a:5f:38:a2:f5:e4:23:0a:27:4f:f1:89:af:fb:
                    86:ad:78:b6:11:c7:28:91:5a:c1:3d:2f:c4:1f:00:
                    0f:33:8a:a3:56:5e:2c:0c:4c:4b:e2:5c:00:40:2e:
                    cc:60:4c:10:f9:5f:1c:88:39:29:1d:44:72:c9:06:
                    91:b6:fb:37:20:c7:ea:54:06:86:c4:d5:51:b3:34:
                    e3:2d:d3:49:c7:3d:f0:7a:59:4f:d1:96:01:6b:ad:
                    0d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D2:07:E1:C0:79:AC:E8:8A:2D:34:AF:F8:DE:13:20:AA:56:BC:9A
            X509v3 Authority Key Identifier:
                keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:40:1d:3c:31:3e:a1:77:b3:b8:e3:79:b9:cb:83:41:90:4e:
         9d:b8:fd:43:6e:88:ef:f6:d5:3f:f2:6e:0b:5e:88:75:d7:31:
         86:8f:6b:43:59:a0:de:54:35:8a:af:e3:b7:12:b9:d3:71:70:
         ac:f5:31:25:81:be:be:97:b3:4c:69:c8:4b:59:a5:cf:25:42:
         54:0a:8e:75:ad:6e:8b:e2:c0:93:79:c7:ac:e3:b5:9e:da:cb:
         16:df:80:49:76:51:72:c9:4e:4d:48:ef:02:28:ef:ec:b1:1c:
         72:56:a0:f3:ec:66:7e:ef:36:ac:b4:35:53:f7:16:a8:f5:e9:
         5f:84:5b:e3:e4:09:18:1c:e9:e5:43:8d:27:6a:0d:63:6b:32:
         b0:ea:01:be:f0:e8:22:36:44:94:48:5c:4c:8a:b5:de:ef:75:
         73:a6:f3:81:ac:fd:7d:06:54:88:1d:22:f0:84:75:3e:55:4f:
         8e:19:31:5d:60:a9:6a:61:1c:e7:ae:65:40:a3:43:8c:57:87:
         51:e3:78:07:93:13:13:ba:04:89:ab:f5:00:f0:c9:e9:11:bc:
         9a:e8:b3:e1:9b:60:15:27:32:d9:86:f8:79:0e:36:30:ed:e1:
         98:48:35:31:08:a6:2b:c6:64:9e:58:77:a6:6f:87:02:3f:65:
         46:eb:bb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:59 2025 by rpki-client