This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
File:                     RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft (raw, json)
Hash identifier:          cCZsSP8GrQtHFMdJ3en6KK54GN/zGV2FLbPSAr2RfyM=
Subject key identifier:   3B:7C:93:11:BF:2C:D0:CE:28:E0:87:E2:C8:EF:61:79:B8:F6:0F:5A
Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73
Certificate issuer:       /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
Certificate serial:       057D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
Manifest number:          054B
Signing time:             Thu 18 Dec 2025 22:52:36 +0000
Manifest this update:     Thu 18 Dec 2025 22:52:35 +0000
Manifest next update:     Thu 25 Dec 2025 22:52:35 +0000
Files and hashes:         1: RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl (hash: oensnHGTnmJp0MbvPgNmm78qaK9ivcncw0VQzdFTet0=)
                          2: D26FE5F62BC511EEA4569A67C4F9AE02.roa (hash: nfvl8LItHRnHU7cOFArXS6hV97B38VNc9C2Ezi3lr6U=)
                          3: 7AD7390CD15111EE98EBEC1EC4F9AE02.roa (hash: xYTAg38yoW7vEoZGmEJB6isoNNBjQGepwhuw97pD1/8=)
                          4: 5A306016D15111EE98E6801EC4F9AE02.roa (hash: 0iX8GWVZfHTiPTTq9om3cBPBNC8DR5QF75DufZZXDYg=)
                          5: 20C2C8980D4111EEB385BA83C4F9AE02.roa (hash: pqx2bVF6KFi6pAp+san9BeaofosCjXIfjaAQRpbI48w=)
                          6: C6E67CEACB0911ECA16E4A19C4F9AE02.roa (hash: smZT0oXuvwsnfsI3CoSJhx+rXSo9yTN0/TLArPnl3aY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl
                          rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B2EC, serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
        Validity
            Not Before: Dec 18 22:52:35 2025 GMT
            Not After : Dec 25 22:52:35 2025 GMT
        Subject: CN=694485b4-72dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:48:0f:46:68:b3:e1:8d:ba:b6:f8:68:77:5e:
                    e4:ba:39:51:72:45:de:e3:4c:16:72:f4:12:57:d4:
                    e6:fe:35:de:47:3a:6a:76:7b:d7:89:d4:da:66:2b:
                    c1:fb:a2:83:a4:ec:a4:0a:62:65:21:51:c0:6a:8a:
                    d8:d5:ec:16:81:a7:56:46:29:f3:db:91:86:9b:3f:
                    88:f8:d7:ab:05:ac:9d:17:58:05:5f:cc:64:b1:e7:
                    a0:de:91:dd:5c:19:c5:61:d9:76:d8:ff:7e:83:41:
                    6a:d6:fe:c1:cc:2f:59:7f:4e:af:6c:e0:15:4e:93:
                    6e:28:40:43:09:8c:32:49:69:48:f1:69:fa:6c:b4:
                    84:bd:21:e9:d7:d0:ad:b6:80:1e:37:ea:dd:c9:83:
                    71:39:09:d2:12:45:f3:9e:64:e1:77:9b:75:91:f4:
                    5f:c7:1f:1e:23:11:03:38:9b:32:8b:b6:62:a2:a9:
                    31:5b:15:c2:23:3c:8d:6b:ea:80:eb:91:11:97:87:
                    f4:c4:d8:cc:3d:4b:31:4c:9b:5f:f8:2e:d7:c1:b7:
                    31:ae:59:8c:34:7e:f4:33:62:52:cb:53:bf:e9:7f:
                    5d:fc:0d:aa:4d:b8:86:7c:aa:1c:85:18:d5:64:32:
                    95:fa:86:af:b0:15:fc:0d:4b:c9:48:d8:8f:01:1b:
                    aa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7C:93:11:BF:2C:D0:CE:28:E0:87:E2:C8:EF:61:79:B8:F6:0F:5A
            X509v3 Authority Key Identifier:
                keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fd:0e:f7:b5:aa:4f:08:27:04:65:f3:1d:32:93:4e:de:12:
         eb:d1:7e:ee:7c:2f:27:98:03:21:b8:f1:f7:bb:e8:af:20:d6:
         99:a2:d1:9a:df:be:3f:0f:4e:5f:fd:b1:eb:75:5c:58:cd:ca:
         66:83:8a:0f:18:cf:06:33:39:90:0b:15:cc:4e:e6:0a:2a:d9:
         c0:e7:c0:1f:12:9f:4e:25:97:7c:cb:b8:79:bb:c6:ec:5a:fd:
         60:82:a6:0e:3d:2e:ea:7e:ef:0a:cd:ef:3e:68:bc:51:ea:72:
         49:1c:3f:3a:46:04:5e:ac:f2:4a:7b:a0:b4:31:a5:51:b5:97:
         62:fa:44:14:e9:33:48:b8:5c:65:8a:29:e4:f0:50:33:e0:1a:
         e9:62:60:1e:2a:0b:4c:94:08:31:38:02:d6:04:77:79:ea:cb:
         cf:50:02:86:43:06:44:29:5d:de:c4:b7:8d:6a:91:32:62:3c:
         1d:bd:cf:c9:b9:23:c1:9b:68:25:a4:62:65:5c:a0:d7:92:7a:
         00:7d:e1:0b:ee:fb:85:13:7d:73:69:a8:e6:76:22:43:b9:0b:
         5a:6d:db:38:4a:ae:20:86:6b:2f:34:6a:b8:33:95:a4:8f:2c:
         de:86:26:c6:03:e1:66:21:a1:2e:e5:c9:6b:c0:aa:9c:ed:ee:
         15:a5:ce:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:08:55 2025 by rpki-client