This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
File:                     V2eQJEzCknXBEjVv9iDyYg19YV4.mft (raw, json)
Hash identifier:          GItDoB7e9yKwg29Ce4RHLQ8FoatPsN+R1dI/FwsF8Ic=
Subject key identifier:   B8:7D:C1:61:29:50:3E:2C:97:0F:84:D4:0D:E6:3E:7A:64:FF:A3:A6
Authority key identifier: 57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E
Certificate issuer:       /CN=A916AC30/serialNumber=576790244CC29275C112356FF620F2620D7D615E
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
Manifest number:          0102
Signing time:             Fri 19 Dec 2025 04:41:48 +0000
Manifest this update:     Fri 19 Dec 2025 04:41:48 +0000
Manifest next update:     Fri 26 Dec 2025 04:41:48 +0000
Files and hashes:         1: V2eQJEzCknXBEjVv9iDyYg19YV4.crl (hash: TG/pyf2Wd7P1ajAdeHI91Tid+8X9OFIuNlSqQcXWH1Q=)
                          2: 33A6DBFAD31C11EFA728D52FC4F9AE02.roa (hash: d+2E/HbLJ8pzF6OA60FF562YwoCx7bSVEy6bEbIl4YM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30, serialNumber=576790244CC29275C112356FF620F2620D7D615E
        Validity
            Not Before: Dec 19 04:41:48 2025 GMT
            Not After : Dec 26 04:41:48 2025 GMT
        Subject: CN=6944d78c-b901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:6b:f6:91:be:f8:76:60:6d:11:9e:b5:51:
                    39:b6:77:9f:da:b4:6e:94:6e:ad:30:f8:b3:de:fb:
                    1a:e4:58:4b:99:01:72:ef:ef:71:21:16:8e:a2:d1:
                    e6:f2:78:1b:95:c6:9c:31:00:41:cb:64:5b:b1:3c:
                    71:d4:78:d2:42:51:30:10:d3:f1:7d:91:ae:c4:5b:
                    d5:d1:79:49:f4:27:38:d6:8a:ee:31:51:9d:b5:a8:
                    a5:81:ff:80:6b:7a:79:1f:40:6c:82:28:8a:ed:a8:
                    4f:cf:91:f6:dd:02:2b:e6:be:f8:28:95:76:9c:11:
                    79:18:5c:72:16:b8:8b:46:ff:35:80:c1:a1:34:de:
                    65:cc:e0:06:2d:32:3f:37:d9:94:07:b7:56:1f:4d:
                    29:84:06:c7:1c:b9:3e:96:67:ba:70:e6:f0:8e:ba:
                    86:dc:6a:c6:2a:d6:7b:82:ef:04:fc:78:7e:82:a1:
                    df:70:a1:91:de:2c:3b:59:c9:b0:cd:7d:b9:f5:42:
                    ac:db:75:49:be:cd:f5:ad:2f:06:97:bb:4b:9d:8e:
                    13:14:69:0e:f9:0b:2b:26:09:ba:bb:3f:d3:c0:a9:
                    4b:12:d3:ab:dd:fe:82:7d:cf:e3:e3:d9:a1:c8:41:
                    26:b4:c1:12:a7:7e:2f:09:83:5d:43:9d:7b:25:05:
                    24:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7D:C1:61:29:50:3E:2C:97:0F:84:D4:0D:E6:3E:7A:64:FF:A3:A6
            X509v3 Authority Key Identifier:
                keyid:57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:57:f9:7f:9b:88:c2:b7:04:2e:f1:23:84:fa:8d:58:94:c1:
         60:d6:9b:21:de:fb:50:70:b3:93:3e:c4:84:4e:d5:30:6c:78:
         d1:bc:93:0d:b8:5c:b2:be:32:9a:76:87:9a:49:25:4b:90:f4:
         da:f3:a4:6d:a2:6c:ab:96:eb:ec:50:90:84:43:91:b1:97:08:
         15:d3:4c:f0:ae:70:07:5b:7d:f2:9d:80:ad:0c:cc:02:8c:2b:
         3f:5f:80:a7:a6:5c:84:7c:b1:61:52:9f:41:ce:c4:3a:dd:cd:
         0e:ea:2c:d9:4c:1b:44:6c:38:5c:2f:58:39:76:24:44:dc:d1:
         d6:ef:62:25:3c:fd:c6:06:0f:21:4d:56:e7:70:2b:28:bc:0f:
         fe:6b:65:c6:ad:16:d2:8d:6f:d5:fd:69:fa:ab:77:90:e6:1d:
         0c:15:6d:90:cd:59:a6:99:d3:a1:99:27:7c:d5:2a:6c:ed:6f:
         af:e7:72:c2:ef:10:ec:a2:b7:08:2b:b2:d7:1f:7b:80:a5:25:
         ea:b3:8e:cf:b2:54:be:1c:d0:5c:9f:97:84:58:11:f5:b8:58:
         8d:27:98:92:87:7e:14:dd:5b:e9:c7:d1:f4:d6:9a:f7:bc:99:
         ca:1b:83:fc:31:24:b1:2f:22:92:f6:b6:16:80:f9:d4:c9:e5:
         df:ed:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:37:51 2025 by rpki-client