This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File:                     cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier:          WsenDV5wd3hHnDaSMPNXkJh1uoOnimWO/Iz4t+mnQYE=
Subject key identifier:   15:3C:4A:09:55:01:C8:F9:55:5E:2A:9D:13:3C:5C:96:E0:7A:56:FF
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer:       /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial:       0C16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number:          0C03
Signing time:             Sun 28 Dec 2025 18:23:25 +0000
Manifest this update:     Sun 28 Dec 2025 18:23:25 +0000
Manifest next update:     Sun 04 Jan 2026 18:23:25 +0000
Files and hashes:         1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: 2V7eu+/Jo6JKfYsMIiXRktHUkxROTbW0cOzXZlDGBnM=)
                          2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: 3kF8zJlwF4UbEFsgd+jLuLFD7uUy5scRolMoxM2c994=)
                          3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: Jnuyh/tjlmXzh/W0FC+nfv2/1A+JOUdoR1QdMOg2nAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
                          rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 18:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3094 (0xc16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
        Validity
            Not Before: Dec 28 18:23:25 2025 GMT
            Not After : Jan  4 18:23:25 2026 GMT
        Subject: CN=6951759d-7f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:b7:a2:19:a4:1c:d7:01:1c:57:99:37:b2:
                    e6:89:7c:be:c4:62:a9:8f:84:0a:93:3a:84:8b:52:
                    0d:ee:a8:c1:eb:f2:fd:b6:a6:e8:4c:1c:9a:7a:32:
                    e6:cf:e7:76:e3:17:ba:a8:2e:a2:b7:ee:a8:a4:b5:
                    68:c4:4b:c0:d7:c4:a4:9f:67:d1:b0:90:34:18:97:
                    3a:97:d4:11:75:6f:7a:b8:83:8c:ef:07:ce:09:0c:
                    23:ed:d7:1b:be:1e:02:53:1c:87:87:27:91:98:17:
                    21:92:87:ee:2a:66:19:90:4f:38:b7:13:14:29:a1:
                    b5:54:e9:9b:cc:17:9c:bd:e2:fa:2a:55:8d:f2:a8:
                    48:7f:07:11:ce:cb:ee:39:8e:53:81:47:c6:ca:3f:
                    2f:84:f1:c9:5f:04:e9:43:5d:42:e7:8a:4c:6a:ea:
                    57:b7:50:a0:c3:cd:5b:e4:9a:4d:7f:28:ca:85:95:
                    8a:a3:86:3f:e9:ef:d1:d7:4f:eb:a6:08:cb:06:d7:
                    c5:6e:bf:2e:17:d4:fc:56:6c:6a:a1:ce:96:eb:55:
                    90:bb:b4:ed:71:69:47:4e:65:70:33:13:44:c0:39:
                    2c:f7:80:44:fc:ec:c9:10:a3:54:8f:be:e8:06:e1:
                    5f:98:aa:30:0c:0c:99:83:56:49:e6:2f:2e:87:7a:
                    d3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3C:4A:09:55:01:C8:F9:55:5E:2A:9D:13:3C:5C:96:E0:7A:56:FF
            X509v3 Authority Key Identifier:
                keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:79:f4:5b:a4:ec:b0:65:29:7a:68:82:10:e2:7c:25:9b:97:
         12:46:9c:ec:71:89:61:2d:3b:55:f8:28:cc:7d:29:f0:74:68:
         89:19:1c:74:2c:9a:72:ca:4c:64:2f:56:75:04:bd:33:56:c8:
         41:a2:62:9e:82:0b:67:10:41:b7:c9:2d:6b:c6:ca:e7:72:97:
         57:64:e1:a4:0e:09:0b:90:c3:a4:a7:a6:dc:f5:49:44:60:32:
         7c:21:68:d1:be:5e:58:a0:5b:31:46:e8:ce:62:df:f5:c1:66:
         ea:b0:b6:cb:57:25:d7:47:09:76:54:31:e6:f7:ab:25:3e:77:
         ec:2f:3c:6a:24:7c:7d:f8:9b:e0:15:c2:2a:56:83:0f:a0:97:
         5b:ff:b9:2f:1c:14:45:b5:91:8a:20:51:51:03:15:21:2f:e9:
         a9:36:a9:df:95:45:fb:8c:4f:71:3d:a7:81:bf:9d:b6:fe:f6:
         3d:b1:79:0c:f8:2b:fa:a0:3e:80:6d:db:b7:34:64:e2:2e:98:
         62:a0:8c:44:18:12:da:ed:16:73:34:89:da:5f:47:31:ee:15:
         2a:98:2f:92:be:db:f0:f1:85:f5:9d:20:66:f6:a1:c1:7f:1f:
         d1:5d:94:e1:d4:a3:ac:61:fa:05:ba:71:a0:51:f1:33:95:8c:
         a2:cc:a4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 23:22:45 2025 by rpki-client