This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
File:                     V88585q2G1OO6nyy1Wo0vle4mvs.mft (raw, json)
Hash identifier:          2xPeOHtR1MoTQOZJlpqupdxTkrlhN/L+PwzWnkxG+5Y=
Subject key identifier:   D4:74:75:2D:E3:57:1E:A6:3F:71:F7:95:A9:46:8D:75:4C:4E:FD:FC
Authority key identifier: 57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB
Certificate issuer:       /CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
Certificate serial:       06C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
Manifest number:          06C3
Signing time:             Wed 31 Dec 2025 14:45:15 +0000
Manifest this update:     Wed 31 Dec 2025 14:45:15 +0000
Manifest next update:     Wed 07 Jan 2026 14:45:15 +0000
Files and hashes:         1: V88585q2G1OO6nyy1Wo0vle4mvs.crl (hash: +ivuWJEjlR2ftR68K29dZT+L2xPqfUBmO+ordPFA1sc=)
                          2: 6DB6146E0E2F11EDB4659653C4F9AE02.roa (hash: jVO5wSX7TJcWYZD+VE2YuDs8rKtO7MY++7pypycZONE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl
                          rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 14:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D4C4, serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
        Validity
            Not Before: Dec 31 14:45:15 2025 GMT
            Not After : Jan  7 14:45:15 2026 GMT
        Subject: CN=695536fb-c3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0b:a2:a2:1a:ab:e1:fd:b1:ee:a5:ca:4a:6b:
                    b6:7e:07:34:71:48:52:7a:7e:4c:3b:87:7b:33:06:
                    65:b3:5d:69:20:6e:d8:66:b9:da:25:ba:24:79:c3:
                    76:3c:9b:a4:06:bc:01:62:5a:d1:96:86:11:68:ef:
                    e2:1f:11:6a:9f:c0:06:74:fb:58:27:28:d4:25:0b:
                    75:1d:55:dd:e6:30:39:ee:91:ae:6a:e8:cc:e3:65:
                    a1:d4:f7:19:04:4e:a7:40:13:ff:4f:b1:65:c3:a4:
                    8a:94:11:14:79:91:4c:b7:94:3f:02:87:af:2d:cc:
                    19:ed:7b:78:5e:54:52:6e:87:b1:19:3e:15:cd:99:
                    d0:ab:cc:5d:6f:af:81:22:e8:21:7c:51:11:8d:e7:
                    a3:41:96:e3:02:bb:2d:bf:e1:ca:89:58:a9:b9:6b:
                    d7:e6:2e:dd:f0:b4:98:ba:85:92:28:c9:f1:0f:5f:
                    0b:5e:5b:e4:f4:85:30:b1:ec:16:c5:ac:7c:cf:3b:
                    af:0b:10:59:70:55:b9:c6:56:56:98:26:77:f7:b8:
                    19:74:7a:b3:0a:ec:eb:e7:02:93:4b:69:7c:44:d5:
                    57:9c:e5:ce:1d:be:3d:4a:f7:81:9d:3e:e8:e7:20:
                    9d:e9:d5:4e:27:ec:54:bd:7c:67:c7:e8:0d:41:d3:
                    bc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:74:75:2D:E3:57:1E:A6:3F:71:F7:95:A9:46:8D:75:4C:4E:FD:FC
            X509v3 Authority Key Identifier:
                keyid:57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ff:6a:9e:1a:bb:3c:26:0d:20:1f:9b:8f:63:3d:23:bd:f2:
         f9:00:b7:04:d5:6b:45:44:20:f5:e8:99:8c:53:25:15:0a:88:
         45:3d:61:9c:4d:9a:e0:85:77:fb:50:ed:da:0e:eb:d2:d7:fa:
         28:22:19:e9:44:33:69:60:9a:90:e7:fa:0b:98:fb:95:22:e3:
         7c:c6:fb:c3:95:7e:79:cd:4f:a8:c1:b2:98:1b:ba:9e:0b:1a:
         05:30:4d:1d:d9:57:56:7e:cc:8c:16:31:d3:bb:24:70:4d:54:
         20:2d:b4:e7:46:ff:3f:60:c2:7c:de:5a:06:f2:5d:d6:33:bf:
         c8:69:f0:46:94:b1:ac:3f:f2:fb:05:aa:58:b5:46:38:a2:2c:
         f6:3e:f3:77:42:ab:21:3d:26:7f:ec:e6:93:b7:c9:a8:73:bf:
         cb:90:97:61:5d:f4:8e:7e:24:c3:ae:5a:96:3b:bb:47:87:98:
         94:c9:1e:d1:95:93:c8:aa:92:f2:a2:e3:ce:ac:fa:bc:22:e7:
         49:82:57:e4:28:ae:32:0c:4a:d7:c4:ad:6b:de:39:0f:d5:e4:
         5d:6c:be:e5:9a:de:36:1e:16:e5:84:b3:38:d8:87:32:41:80:
         ad:ef:77:2b:a4:54:b0:be:d5:bc:08:5a:3c:3a:78:65:c6:32:
         f0:05:2d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 15:57:46 2026 by rpki-client