This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
File:                     dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json)
Hash identifier:          AV82QE7Y2/i1WXGcqaGV1r4nr8Hz4Vi1WUTktkq2+tU=
Subject key identifier:   E3:E5:D0:45:FA:C6:BD:60:F5:1D:37:F9:5F:C6:83:61:AF:FD:A1:B2
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Certificate issuer:       /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial:       0324
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
Manifest number:          030C
Signing time:             Fri 19 Dec 2025 00:29:50 +0000
Manifest this update:     Fri 19 Dec 2025 00:29:49 +0000
Manifest next update:     Fri 26 Dec 2025 00:29:49 +0000
Files and hashes:         1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: hS2WkN3C9XsulCVK38R1+wlue5397rfcXII3oB/xpLQ=)
                          2: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: TJ9ECbrNmrbj5mhfI5HTyIvIslW5iwcIqu2ptc1cXhA=)
                          3: 9BA94A4A0D8911ED999D4F3BC4F9AE02.roa (hash: oF4weljdyCKoRiSGG2z17wTaQsEcpMts8sv9D62jJPE=)
                          4: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: D7GG+9V9VetFTo3WS2746v47jcVH9mGxmAznj65oILQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
                          rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804 (0x324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
        Validity
            Not Before: Dec 19 00:29:49 2025 GMT
            Not After : Dec 26 00:29:49 2025 GMT
        Subject: CN=69449c7e-ae4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:6d:aa:e5:ac:9f:04:ab:89:62:78:8b:5e:
                    07:6c:9f:f2:da:37:53:b8:f7:71:3e:40:50:a7:2c:
                    e2:e8:74:eb:4a:15:2b:f4:8a:b5:18:c5:a5:b2:7e:
                    a8:e1:23:dd:d3:4b:c2:fd:33:c1:4a:07:09:8d:4d:
                    f8:fb:5d:7d:f8:58:fc:a6:ff:ae:62:53:29:73:af:
                    b2:07:07:76:d5:75:c0:86:3a:d3:0b:b4:d9:e3:0a:
                    73:f8:c7:34:1e:1f:e0:53:23:c5:9e:ba:7c:b9:13:
                    62:f3:35:4a:f3:e6:31:54:fa:56:99:7c:66:c4:9d:
                    09:3d:d6:42:2a:32:ea:fa:6a:09:dc:f0:c6:fd:8a:
                    b1:8d:55:37:61:31:e7:cd:9b:1a:0d:a3:62:de:8a:
                    65:d1:d1:11:9b:34:ab:b4:dd:11:2c:f1:95:62:63:
                    0c:d3:49:14:3b:91:8f:20:89:9d:03:f7:ea:4e:63:
                    20:0d:1a:8d:00:3d:46:99:cc:10:c7:21:39:8e:5b:
                    d7:08:7e:83:ab:8b:1b:d4:c7:06:c1:54:a7:a2:c9:
                    90:52:a6:b6:a9:1c:f5:2e:4a:ce:67:06:c7:73:bc:
                    c4:42:ff:5c:a2:95:2d:b6:3a:31:59:a2:a9:09:68:
                    2b:f8:7c:d2:48:91:b0:ac:13:d1:ef:38:c8:e6:ae:
                    77:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E5:D0:45:FA:C6:BD:60:F5:1D:37:F9:5F:C6:83:61:AF:FD:A1:B2
            X509v3 Authority Key Identifier:
                keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:2e:2f:34:2e:47:4f:10:58:d5:55:70:58:3b:02:6a:91:4f:
         9c:26:d5:3a:cf:13:a4:1b:1c:bb:fc:8b:7d:34:53:b1:21:07:
         04:5a:94:d6:c2:c8:ee:3d:cd:d7:de:14:3b:e8:f7:62:59:60:
         af:b0:5e:a8:94:b7:7a:b6:1b:66:91:d8:71:7d:48:54:b8:0a:
         a7:85:b3:00:71:12:88:f3:5b:37:f0:d6:31:97:1f:f1:ae:00:
         e0:4b:e7:e7:4d:a3:9d:fb:41:b3:73:76:9e:05:9a:98:94:ee:
         4e:7a:ad:84:50:f4:bd:28:40:10:2b:9c:4b:a5:76:c0:75:aa:
         49:51:ba:7a:b2:f3:76:57:5a:2f:ef:5d:be:75:8f:af:2d:72:
         41:8e:a8:58:d2:13:cd:94:c8:6e:73:fa:b6:9f:85:5e:f9:84:
         b2:05:ec:d3:ce:48:6c:ba:c8:75:0e:bb:15:40:d0:8a:9c:db:
         1b:61:29:65:80:e6:9e:a1:2f:3a:57:9c:81:3d:eb:49:65:0b:
         9a:ee:46:e3:38:82:44:81:7a:f2:68:4c:fe:42:9a:2c:13:c1:
         a1:2d:01:0b:c4:66:38:57:b1:45:74:4f:9f:33:ba:75:6e:08:
         6c:4d:f2:ca:01:5e:57:22:74:38:c4:e7:78:13:88:1f:86:a2:
         77:af:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:48:56 2025 by rpki-client