This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
File:                     AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft (raw, json)
Hash identifier:          2jBqn7yejz0aiyJCVmR14jn7aE9PYHenNSpKGnQTl+I=
Subject key identifier:   E2:1C:83:35:25:AE:28:E4:B9:20:BD:C0:C0:40:01:4A:A8:A6:FD:8E
Authority key identifier: 00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C
Certificate issuer:       /CN=A915E131/serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
Manifest number:          18
Signing time:             Fri 19 Dec 2025 06:46:48 +0000
Manifest this update:     Fri 19 Dec 2025 06:46:48 +0000
Manifest next update:     Fri 26 Dec 2025 06:46:48 +0000
Files and hashes:         1: AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl (hash: Zljg+fmGfz4Ys+ObUik8zCIcfQKvFkeC43c/FI73GZs=)
                          2: 7CCDD124BEC811F09972220FC4F9AE02.roa (hash: kF3MsF0LKW2hpCo2tc4HdlJWfcSXM3xD20g6oUSt0Tw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl
                          rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E131, serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
        Validity
            Not Before: Dec 19 06:46:48 2025 GMT
            Not After : Dec 26 06:46:48 2025 GMT
        Subject: CN=6944f4d8-c968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:fa:78:24:ae:10:90:7d:52:4e:f2:08:1a:
                    34:b4:ad:e9:b0:0f:66:ae:82:6d:f5:4e:c8:4d:1b:
                    6a:cf:6a:10:e0:0a:e1:94:e3:29:1a:65:dd:93:f2:
                    3f:57:09:92:61:14:e6:e6:7c:94:04:b2:3f:43:24:
                    c9:81:0d:c9:24:c1:59:4e:5a:52:25:ac:eb:ec:63:
                    36:d9:a8:e7:18:c5:dd:bc:ef:3c:a1:97:9d:6e:a3:
                    d9:ba:80:17:cd:3d:59:57:ed:9a:9a:19:fd:ad:80:
                    6c:a8:43:d4:71:2b:2f:49:e8:7c:b0:71:4f:3e:c0:
                    15:06:20:27:98:f8:08:89:18:75:d6:8d:37:4b:1d:
                    87:a0:00:a8:eb:1b:c1:c8:5a:11:20:12:d8:8a:f0:
                    90:32:d3:4a:f9:83:06:ac:7c:39:5b:d2:10:73:20:
                    34:9a:3d:15:7e:d3:7f:f3:49:06:21:7e:29:28:01:
                    6c:dd:93:6c:7a:5b:46:54:b6:34:65:52:0d:1e:33:
                    b0:10:45:91:84:ae:8a:11:b1:1f:f0:8b:0b:82:17:
                    b8:83:4b:e4:e7:94:d8:85:af:61:e3:c7:c3:71:5f:
                    fd:07:65:82:c0:76:d5:dd:15:c9:8e:24:ed:05:ad:
                    5e:d5:87:58:cb:f3:f7:c3:51:ed:58:0f:e8:8b:c4:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1C:83:35:25:AE:28:E4:B9:20:BD:C0:C0:40:01:4A:A8:A6:FD:8E
            X509v3 Authority Key Identifier:
                keyid:00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:fa:95:92:0c:50:25:92:6e:66:58:aa:fe:d1:b3:af:7c:5c:
         37:93:05:3f:42:21:0b:21:c6:5c:eb:f2:0f:06:49:77:91:56:
         ea:29:87:31:12:a0:dd:26:c0:21:8f:c0:51:2e:02:c5:70:db:
         90:7c:10:1d:e4:75:1c:c7:e8:ab:ab:ff:b9:b6:7f:05:ee:31:
         bd:0f:c4:d6:64:11:06:48:f2:af:d9:9d:b6:e6:71:a7:c3:ac:
         a6:5d:49:01:58:b8:20:f2:fd:72:b5:d5:7c:a3:68:a1:3e:c5:
         e2:5c:b0:7e:e0:92:d2:d0:20:12:98:ef:e6:2b:2d:ba:9d:02:
         82:89:85:59:3b:2e:b3:a8:e5:a1:6a:85:62:bc:27:90:a7:87:
         b9:12:e3:7e:51:d3:1f:12:af:a2:12:d9:7f:76:57:0f:8b:34:
         e1:25:c1:c8:85:80:6e:8b:e7:1e:35:66:ee:b5:16:50:00:62:
         40:aa:34:d1:b2:4b:46:ff:71:f7:cc:d4:50:a5:40:f6:53:99:
         cf:4f:8f:79:15:0a:22:67:d8:7f:38:d1:22:e3:b3:fd:41:62:
         ff:b2:52:45:fd:3c:4f:5d:67:9b:ba:be:3f:96:d0:42:21:dc:
         37:96:6b:4c:e5:df:8a:3c:79:3e:88:7b:db:58:27:28:29:f8:
         91:cf:e2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:50:37 2025 by rpki-client