This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
File:                     m0G07JA0ytKB1baCVnQwWQMlK94.mft (raw, json)
Hash identifier:          /tXx5qwUK8FTiTiJnHQ8naDJLYFQhjhFht4DrQUymDc=
Subject key identifier:   C6:70:15:14:85:33:DB:B9:FA:C4:D0:10:C2:52:06:2B:CC:3E:06:B0
Authority key identifier: 9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE
Certificate issuer:       /CN=A915E39C/serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
Certificate serial:       0683
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
Manifest number:          067E
Signing time:             Thu 18 Dec 2025 21:53:18 +0000
Manifest this update:     Thu 18 Dec 2025 21:53:18 +0000
Manifest next update:     Thu 25 Dec 2025 21:53:18 +0000
Files and hashes:         1: m0G07JA0ytKB1baCVnQwWQMlK94.crl (hash: 5mntNzqrMNXN/Hp/kqoYpUwHAgumfOH/7A/S6XZKsDM=)
                          2: 7EA34D309EC511EBA85F8276C4F9AE02.roa (hash: yK6C1pWwJA6WJCQDjIzeh8mb+889ajrC1dn+LyzHgJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.crl
                          rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E39C, serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
        Validity
            Not Before: Dec 18 21:53:18 2025 GMT
            Not After : Dec 25 21:53:18 2025 GMT
        Subject: CN=694477ce-2348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:76:4d:89:72:61:b8:74:ef:da:ea:83:6f:
                    86:c1:e8:6e:1f:bd:0b:f9:76:c4:89:6f:79:f2:3b:
                    0f:63:0a:af:d0:fc:0a:81:b4:57:64:bc:f6:18:cc:
                    57:51:56:44:be:2d:b1:82:e7:23:17:c5:d9:56:30:
                    f9:52:fe:25:91:63:6a:09:23:61:10:46:77:24:4c:
                    8f:75:77:05:cc:61:40:36:b9:e4:e8:42:78:2b:85:
                    32:cb:bc:35:a8:04:37:9d:a7:bc:dc:94:72:0d:cc:
                    d9:b7:e3:96:eb:b5:40:ab:4f:3e:7f:f3:de:14:55:
                    b2:e0:03:e3:0f:92:ea:6d:f9:3b:85:68:bc:3f:7f:
                    f9:ad:11:e2:22:8b:83:15:cd:e4:e9:d6:72:6b:60:
                    7b:0b:25:43:09:76:62:e9:88:d2:42:4b:41:88:e6:
                    00:f1:63:74:47:ea:7f:a5:74:08:be:71:de:79:e2:
                    d8:e2:a2:60:49:a6:a9:31:34:0c:4c:b2:b4:f1:ec:
                    d7:90:51:d2:cd:37:d9:da:40:6f:51:06:1d:ba:e2:
                    29:f4:31:7e:92:79:58:d1:10:db:b3:65:2f:4b:85:
                    8c:08:a1:77:26:25:b8:99:20:b2:7a:76:03:53:c1:
                    5c:ac:3e:c0:76:2e:19:3d:5d:75:83:52:a3:ae:87:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:70:15:14:85:33:DB:B9:FA:C4:D0:10:C2:52:06:2B:CC:3E:06:B0
            X509v3 Authority Key Identifier:
                keyid:9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:56:bf:ca:13:98:1d:c6:20:03:17:64:95:57:a5:51:3d:3a:
         aa:4a:80:19:e8:a2:47:e2:63:d5:1a:dd:6f:54:4a:6f:4e:f5:
         3b:de:7b:f9:9d:7a:c6:44:82:98:b5:ba:36:bd:b7:b2:bd:e1:
         6b:cc:d3:5d:3c:5d:f4:e8:7e:ef:d5:c7:94:51:b9:b8:d7:87:
         08:e7:4e:08:07:c3:12:dd:34:1d:9e:04:eb:e0:2e:e2:2e:e4:
         52:0e:1d:e3:31:82:f1:45:ee:b3:e0:86:fe:5e:f7:a9:5b:44:
         10:0c:ea:d3:cc:56:73:c7:b0:9e:2d:63:8d:3a:02:b4:de:be:
         16:1a:46:3e:27:ad:77:92:a4:75:64:42:f3:43:1f:47:f5:79:
         0a:a9:e4:da:5d:69:70:ac:62:cf:2c:e4:40:ea:f0:a4:df:2a:
         97:3f:3b:4b:e9:cb:68:eb:d3:6a:73:c6:6c:1d:29:35:a1:9a:
         d3:ed:cb:1a:1c:54:be:25:88:b9:0e:ef:43:46:56:86:e0:a6:
         48:31:c4:e0:2d:ba:6d:8d:22:f1:db:11:b6:f3:97:f3:c8:42:
         35:cc:17:e1:c8:ba:fc:14:4d:bf:9e:8e:4e:55:f3:fb:4d:0d:
         e5:89:99:c4:b5:c2:e6:84:5b:a1:d1:d6:b5:e0:17:ff:85:2d:
         ae:3a:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:03:10 2025 by rpki-client