This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
File:                     ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json)
Hash identifier:          C+O3juP23+zq3K2orXstnxrz5T4O4+Ow45b+YhrN0uk=
Subject key identifier:   AE:C4:4D:51:A3:8F:C4:47:5A:F0:28:A9:EA:B1:BF:B3:AB:4D:2A:6E
Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
Certificate issuer:       /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
Manifest number:          56
Signing time:             Fri 19 Dec 2025 06:10:11 +0000
Manifest this update:     Fri 19 Dec 2025 06:10:11 +0000
Manifest next update:     Fri 26 Dec 2025 06:10:11 +0000
Files and hashes:         1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: gYYTjezVTAqo2iiF/WZpo2RCq80ri1JfClr4yKMK9rs=)
                          2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: ml1Kug9S1qOScffHzmjdmVF6lgBnT/45matCF9JTOhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
                          rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
        Validity
            Not Before: Dec 19 06:10:11 2025 GMT
            Not After : Dec 26 06:10:11 2025 GMT
        Subject: CN=6944ec43-f6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:08:32:95:5f:e9:45:e1:2b:5a:9f:75:7e:44:
                    09:e1:c9:2f:49:f9:4d:31:9a:b7:00:fe:ae:99:f8:
                    46:67:b1:18:68:36:58:9b:32:1d:63:e8:25:b0:9f:
                    80:10:a0:a3:ac:a4:1f:c3:6e:f8:15:17:b1:61:c0:
                    f1:15:57:e1:33:ae:fa:f8:12:5e:f4:16:88:a3:fb:
                    d6:2f:e7:b5:30:fc:06:bc:ec:86:9c:0a:17:76:59:
                    ba:b4:31:33:15:b8:12:5b:0c:bd:6f:b9:f6:f0:6b:
                    ef:24:79:b3:73:44:38:29:82:14:dc:c8:bf:64:6b:
                    53:cf:d4:1c:cc:12:c3:4c:76:66:f2:31:ac:e0:5c:
                    b7:ab:c9:1a:f4:e3:7b:7e:b5:09:22:f4:d2:98:35:
                    bb:4f:64:a3:6d:fd:c7:47:41:30:f0:01:bb:02:52:
                    44:1a:2c:e7:22:c1:75:95:bf:53:d8:86:8e:94:fc:
                    7f:4d:a1:a2:0f:13:2f:38:45:c2:1d:67:04:86:3b:
                    17:d9:08:d1:bc:d3:b3:e6:0f:b0:73:a9:fa:14:ee:
                    7f:68:a9:f2:d6:1f:ae:45:49:b1:da:30:cf:c7:55:
                    40:4f:45:25:29:e7:62:fd:bc:c0:9d:a2:89:03:ad:
                    07:40:c7:7a:43:85:fe:4e:c4:33:ce:c8:fb:0f:09:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C4:4D:51:A3:8F:C4:47:5A:F0:28:A9:EA:B1:BF:B3:AB:4D:2A:6E
            X509v3 Authority Key Identifier:
                keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1c:35:ff:2d:ce:63:e7:c6:91:a5:72:ad:46:16:27:34:f9:
         98:43:9e:96:a2:71:6c:07:2c:a5:50:aa:a0:30:82:fa:67:75:
         cb:0e:7f:06:af:99:50:87:fc:84:06:42:63:bf:50:c4:b9:75:
         9f:5e:8a:79:96:c5:62:8e:ef:e0:89:0b:fc:cd:f4:da:dd:29:
         46:eb:fe:ac:40:a3:0e:53:0f:0a:c3:5b:0c:d7:ce:19:2f:bc:
         30:6d:44:6f:ef:85:be:4b:89:2f:bd:64:ac:e0:40:52:5d:5f:
         0f:4c:2f:47:39:70:67:19:96:e7:9a:3d:c3:c3:c6:49:f0:95:
         e8:49:6f:61:36:e9:93:d4:40:9e:15:10:24:d8:4b:57:90:7e:
         2e:3d:ce:b7:31:c1:75:04:b2:65:0d:04:05:9b:c6:9e:bc:23:
         3c:1e:0d:fa:0d:fb:9b:cd:5e:74:87:3a:14:e9:00:a2:dd:16:
         3f:ff:f5:55:8c:f9:ee:c8:89:5d:7b:67:6e:47:08:0c:29:78:
         ac:ab:87:9d:14:c7:23:25:03:de:53:4a:3c:02:62:d8:58:8a:
         fb:53:19:11:1a:f5:a7:5d:cb:d0:a5:58:b5:ff:1b:98:97:54:
         b2:94:43:fb:73:bc:d6:c1:5f:85:e2:f5:f4:08:11:ee:dc:03:
         d0:2c:bc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:57 2025 by rpki-client