This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File:                     aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier:          tLH/0BXRoFZ540gG1kPUvxxAWsdlYlRB73adMA7+LLo=
Subject key identifier:   44:1F:9B:EE:27:9B:50:6E:E3:33:BA:3D:B4:D7:7F:EE:8F:78:D3:C0
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer:       /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial:       351D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number:          34FE
Signing time:             Fri 26 Dec 2025 15:10:16 +0000
Manifest this update:     Fri 26 Dec 2025 15:10:16 +0000
Manifest next update:     Fri 02 Jan 2026 15:10:16 +0000
Files and hashes:         1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: BC777Hcadk0o6K7c63XByxStEk/iukt+IOERcu8/7qk=)
                          2: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: 1AXC4CdSqCeZreg7Kdx8zTNNLCij2RY2Acpk7gs3UmA=)
                          3: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: lhbAPGcQQjVfLeBPPvSfLGakAoAsie+moEAIzx57Z0Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
                          rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 15:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13597 (0x351d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
        Validity
            Not Before: Dec 26 15:10:16 2025 GMT
            Not After : Jan  2 15:10:16 2026 GMT
        Subject: CN=694ea558-fe54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ba:6c:88:31:16:77:df:28:61:ff:e7:b1:a7:
                    6b:73:b8:16:91:42:54:f5:78:ff:c5:1c:48:f2:3b:
                    81:d7:e3:a5:f3:ec:af:94:9a:68:c3:41:43:c0:c2:
                    80:fc:c7:7b:48:69:d3:80:50:4a:ad:2a:bb:df:24:
                    92:ba:42:68:47:36:ec:2c:8d:f1:d8:fb:45:74:d6:
                    ac:55:b3:95:62:3c:6e:cd:1e:9d:7c:e5:a4:fd:ae:
                    31:e0:ba:79:a5:7b:c2:60:d0:c6:99:28:91:e4:cd:
                    a7:60:95:fb:00:2e:44:eb:da:34:d4:b7:4d:4a:d8:
                    a8:7c:97:e8:b3:a8:0c:0b:14:97:c2:ec:ef:67:72:
                    0a:f3:3b:1e:0b:e9:a6:1b:d9:f6:92:05:98:06:05:
                    ad:fb:6d:32:e1:30:5a:48:c5:b5:37:20:72:39:3f:
                    88:6b:bf:be:99:52:b4:6b:4b:7e:59:2d:d0:55:3f:
                    1f:5b:b5:b5:ff:bc:2d:34:65:f8:5f:06:55:06:32:
                    d1:f6:c2:21:90:f7:c4:21:99:c8:d7:7b:b8:b4:b1:
                    8b:85:4c:60:86:4a:f5:ea:8a:0d:62:5a:44:27:08:
                    f1:c8:99:2f:f3:bb:09:bb:05:03:67:33:c3:6c:86:
                    66:c5:85:6a:40:dc:89:bf:99:ce:86:0b:a9:4b:21:
                    ae:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1F:9B:EE:27:9B:50:6E:E3:33:BA:3D:B4:D7:7F:EE:8F:78:D3:C0
            X509v3 Authority Key Identifier:
                keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b5:9e:7f:79:f1:84:ef:0b:80:87:b8:1f:6d:c8:98:ba:0e:
         71:1e:7e:7a:99:72:ed:d4:6c:53:54:a4:b9:6c:e6:0f:6b:b1:
         7d:85:81:18:79:93:49:2c:f1:b5:c8:a0:39:88:de:20:d4:a4:
         be:b6:c0:7b:d9:65:6c:e3:30:12:58:e1:36:9c:4c:e7:34:c7:
         6c:4e:f5:e2:80:35:a1:2a:87:fe:ff:af:93:32:ee:09:27:74:
         fa:c8:06:1b:97:88:3f:5d:40:d2:18:bc:77:d5:06:85:f6:f5:
         e2:39:f5:11:35:07:11:d9:41:63:21:05:3d:58:47:32:8b:a9:
         46:d8:1d:8e:b4:e9:09:3a:df:c5:7b:ac:f3:4b:df:ce:b6:64:
         35:24:44:b4:64:d0:fc:3e:03:91:0f:a3:a0:c1:42:3d:df:a3:
         04:7f:33:ce:25:65:5a:5f:58:a8:80:04:40:29:ef:ee:bd:c4:
         79:0c:92:9a:aa:ab:d0:d1:d4:74:73:9b:5d:ea:17:60:dc:00:
         dc:53:49:4b:a6:ff:a1:51:83:fe:85:12:4f:3b:52:57:ff:c6:
         dd:2f:1e:2a:e0:07:73:68:26:d9:8d:c0:60:f8:43:d3:0d:a3:
         ed:23:4c:ff:ff:f5:4e:72:32:1e:b3:db:63:aa:ca:e8:46:37:
         59:a0:c7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 10:52:14 2025 by rpki-client