This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
File:                     M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json)
Hash identifier:          5ZWO3moQeINw9U5/X0u2UeeODNFHSefRMbpYMLUO32M=
Subject key identifier:   2A:6F:93:66:E8:6B:5C:CB:E7:85:D7:75:67:8C:90:82:F6:BE:2E:A2
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Certificate issuer:       /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial:       0481
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
Manifest number:          0469
Signing time:             Wed 31 Dec 2025 23:40:36 +0000
Manifest this update:     Wed 31 Dec 2025 23:40:36 +0000
Manifest next update:     Wed 07 Jan 2026 23:40:36 +0000
Files and hashes:         1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: 5KHguJDOT1aYhTGpGeUwbbfqVCWsMI32xFvHnI70ipo=)
                          2: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: YqwmzbTbjnpJlQJ9+wOnubrOXT3PgUZiurP57f5+HVQ=)
                          3: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: zLlFP29fbev002DflF+TA3Qjdh6cZ72DZUDF3K/hrT8=)
                          4: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M67wvRNu5yJc0PmvdrXe9QBiktT/1OOEAW8u7AyC62Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
                          rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 23:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153 (0x481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
        Validity
            Not Before: Dec 31 23:40:36 2025 GMT
            Not After : Jan  7 23:40:36 2026 GMT
        Subject: CN=6955b474-66cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5e:ef:34:b7:10:d1:e7:9e:d5:cd:ef:ed:07:
                    9e:50:a3:6c:ae:ee:2d:96:08:c5:27:95:14:b1:37:
                    f0:38:c1:4d:c0:fc:b4:b2:6f:8d:4e:12:23:f9:b5:
                    d1:23:cd:35:95:8b:09:0b:27:26:76:96:8f:6f:fa:
                    5c:c1:54:1e:bc:07:b2:e5:63:0c:d3:f6:83:d2:34:
                    64:d3:aa:d7:cd:c7:6b:c9:26:0d:a1:79:b3:9c:47:
                    81:e3:14:bb:69:20:3c:85:ac:81:87:2c:78:30:8f:
                    23:37:bc:84:34:61:a5:52:b6:31:78:10:d3:c6:b6:
                    d3:58:a0:8c:94:c4:4c:08:34:e8:c8:15:28:10:96:
                    63:98:80:9c:d2:6e:92:aa:f5:ba:5f:d5:e2:dc:89:
                    03:03:e8:ad:fd:c8:4f:4a:e5:3a:44:a7:bb:94:cd:
                    78:87:6d:23:b7:25:57:92:53:e7:ce:40:62:30:23:
                    0d:41:11:4f:d0:6d:43:4b:36:f2:a4:07:41:85:6f:
                    49:12:4a:00:86:6f:11:4a:bb:f7:ae:1e:f1:7e:fd:
                    8a:70:20:3e:c7:c7:a3:1c:a4:11:da:88:0e:47:ab:
                    14:7b:4b:3c:ce:08:46:e1:8b:ed:b8:28:e1:76:cf:
                    9d:54:0d:87:52:60:f1:b0:f6:a6:73:87:b5:5f:f9:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6F:93:66:E8:6B:5C:CB:E7:85:D7:75:67:8C:90:82:F6:BE:2E:A2
            X509v3 Authority Key Identifier:
                keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c3:27:25:41:e0:6e:0c:d9:ff:e4:39:e9:e5:48:e8:f2:06:
         c8:6e:87:10:c9:59:5c:0c:9f:84:cf:d3:1e:17:01:4b:d0:05:
         21:e5:74:54:7f:b8:60:25:c4:6e:15:36:4f:f0:16:76:cc:4f:
         71:1e:bc:cb:80:95:f1:31:1a:91:a5:13:cf:98:cb:d0:c5:2a:
         05:be:03:29:a8:bf:15:fc:9a:19:7f:7f:4e:a9:e3:0f:c4:e0:
         04:cb:f5:c9:2d:dd:e1:86:bb:d6:62:56:df:9a:de:1e:cc:a9:
         12:93:f4:b8:4d:a8:5b:da:49:99:19:21:2a:20:cf:ff:e4:8f:
         19:1d:81:5f:ae:80:5e:24:b4:45:ad:b8:82:ac:ea:93:b4:16:
         0a:4c:ec:b3:23:7f:58:ac:22:ff:28:31:42:4e:39:b1:84:52:
         7c:2b:39:54:00:bd:d8:1f:19:e1:78:b8:bf:83:93:43:4a:b3:
         40:49:89:2b:ef:e4:c8:f7:10:e8:23:9b:d3:9c:cd:cd:f5:41:
         b6:c9:02:4d:e6:b0:84:99:25:a3:10:43:83:d6:40:58:13:af:
         4c:36:81:41:e9:3e:93:5f:fb:ae:78:fa:5e:04:d5:a3:11:13:
         8c:28:34:07:60:7f:29:8a:c0:15:c8:eb:41:f3:b8:86:4f:db:
         5d:a8:ca:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 00:58:29 2026 by rpki-client