This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
File:                     Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json)
Hash identifier:          d6tj0X1a0MmziYlkZi5oxhEo+u+vylfNs9HuYAwLvmk=
Subject key identifier:   45:F6:1F:11:55:F1:CE:D4:4C:C7:5B:7A:8C:93:2E:CE:DC:96:77:B4
Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
Certificate issuer:       /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Certificate serial:       0C6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
Manifest number:          0C64
Signing time:             Wed 24 Dec 2025 18:13:27 +0000
Manifest this update:     Wed 24 Dec 2025 18:13:26 +0000
Manifest next update:     Wed 31 Dec 2025 18:13:26 +0000
Files and hashes:         1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: HQi41XCrW5VNvy1woCs0kiKYIveabspJ0hJGkhgKC6k=)
                          2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: PSYdfl98cedaU/3qMpT/EpqxaVey0RuTtf7go0CLQak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
                          rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 18:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3181 (0xc6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
        Validity
            Not Before: Dec 24 18:13:26 2025 GMT
            Not After : Dec 31 18:13:26 2025 GMT
        Subject: CN=694c2d47-7b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:11:9a:9b:3b:bc:53:7c:f8:36:6e:43:5f:
                    0a:ae:e6:c4:f4:48:ed:3c:c7:56:45:23:64:47:ef:
                    a7:e9:34:e5:01:67:c4:96:c7:dc:c6:61:d3:98:e7:
                    f4:e0:01:7b:7f:49:a1:89:50:ce:b0:a2:c6:d6:bc:
                    7d:93:12:42:0a:94:8e:b8:4d:f4:27:e9:be:d1:b6:
                    7d:6e:11:79:3d:60:dc:c5:cb:75:28:a6:4f:d6:ec:
                    80:c6:a8:e5:de:75:de:e7:41:56:98:a6:69:e5:9e:
                    88:ba:6a:ae:d3:2d:8a:b0:0e:d9:f1:60:87:bb:76:
                    a3:74:22:32:ab:ef:20:ab:c4:63:bd:4f:22:78:f2:
                    37:f1:c1:ee:cb:da:4a:29:90:20:ca:7b:c0:7a:90:
                    03:0a:1f:95:59:3a:0b:24:e3:42:01:a4:91:ef:29:
                    52:c2:74:15:79:55:71:99:09:f8:cd:5e:81:0a:e9:
                    7f:0a:2b:02:7b:14:3e:87:cd:3b:92:2a:ce:c2:14:
                    46:84:62:0b:05:e6:b1:23:3e:15:42:fe:c2:80:6a:
                    c3:f5:09:50:dc:d1:55:27:30:0e:bd:c0:72:1d:9b:
                    53:90:a7:b8:dd:73:99:97:1d:67:30:ac:53:f2:6c:
                    8d:2c:87:0a:b2:7c:86:bb:f8:13:11:bf:ca:1d:bf:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F6:1F:11:55:F1:CE:D4:4C:C7:5B:7A:8C:93:2E:CE:DC:96:77:B4
            X509v3 Authority Key Identifier:
                keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:72:00:e2:fd:cb:22:f3:60:fd:e2:e4:ec:7d:c7:36:55:dd:
         9a:18:6e:1a:94:09:75:bb:12:1e:35:5d:47:f8:d3:4c:d6:15:
         f1:72:2b:34:ed:80:70:96:37:87:1e:ce:a8:5d:bb:07:32:bd:
         fe:ee:43:95:ad:94:03:61:3c:52:b1:86:9b:3e:c7:16:6c:e0:
         94:57:42:8b:69:be:4c:f9:2b:86:a7:a8:71:0a:87:19:8a:8e:
         a2:66:dd:cd:dd:4b:a6:c3:7e:c0:b3:ce:21:94:93:fe:b9:16:
         a9:b8:7c:1d:17:55:f8:89:8a:b2:74:49:29:4f:77:9c:11:f9:
         c6:98:d5:13:4a:cd:0a:f5:db:66:cd:4a:92:79:7c:dd:e8:fb:
         1f:7f:d1:af:48:d7:f1:65:21:8f:4b:9e:c7:d2:ca:bc:9d:28:
         f6:f0:72:f1:97:6b:25:a1:ff:5a:42:72:b8:11:44:e3:7b:d5:
         99:e7:71:fc:8b:e4:50:c0:2f:61:dd:68:17:7b:26:a6:49:4e:
         41:f8:23:0a:8b:83:ac:4b:db:0f:3b:ab:a2:e5:bd:ce:9f:1c:
         8d:45:c6:94:ce:f4:34:ac:ff:dc:01:64:24:9d:c8:00:8a:67:
         e4:90:7e:e5:8c:5f:2d:79:9c:69:6c:d7:31:6d:5c:ad:81:f5:
         0c:87:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:33:20 2025 by rpki-client