This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
File:                     DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json)
Hash identifier:          883Gh6p3B6pZtj7v8r0ZogcyzdiSuuwJjkdIsgvGjSg=
Subject key identifier:   18:0F:F4:15:DF:F3:24:3B:DC:5D:DC:89:25:BB:8C:D3:38:F2:C9:5D
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Certificate issuer:       /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial:       17CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
Manifest number:          17AA
Signing time:             Fri 26 Dec 2025 16:19:37 +0000
Manifest this update:     Fri 26 Dec 2025 16:19:36 +0000
Manifest next update:     Fri 02 Jan 2026 16:19:36 +0000
Files and hashes:         1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: klNXDhv9buR91RyJV6MSZhC3gxLoQugB9YaKIhl2iq8=)
                          2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=)
                          3: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=)
                          4: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 16:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6094 (0x17ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
        Validity
            Not Before: Dec 26 16:19:36 2025 GMT
            Not After : Jan  2 16:19:36 2026 GMT
        Subject: CN=694eb599-ea59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:73:bb:20:26:3b:aa:2b:89:b7:63:fe:70:b9:
                    37:ab:03:a7:3c:2d:a2:d0:b7:10:28:f0:ae:e9:d3:
                    39:e1:97:6e:95:39:91:a4:c1:93:b1:aa:8c:9f:19:
                    e0:b1:a8:a8:4f:dd:d9:26:45:83:53:61:e1:30:f7:
                    5c:8a:5f:c2:9f:c1:95:be:6d:38:44:26:ce:82:06:
                    9d:d9:79:f6:07:ad:3b:96:97:b2:8b:eb:4f:2d:cf:
                    23:82:ee:68:56:52:a0:e3:f8:a3:85:97:11:ee:19:
                    2d:c9:9a:f2:20:10:cf:53:2d:c1:d8:81:a7:37:5a:
                    06:b1:40:19:1c:42:cf:cc:b6:66:8e:a0:d9:88:27:
                    52:a2:cf:4a:c5:fd:27:08:37:66:c6:0e:76:f7:87:
                    91:c3:5a:23:47:b3:49:0a:16:81:bf:97:0c:0e:49:
                    f5:76:46:ff:3c:f0:8a:cf:3c:c7:d8:6d:f9:0d:84:
                    94:fb:22:0c:9c:6e:b6:f2:1f:5a:dd:98:8d:d0:fa:
                    58:85:d8:80:6e:45:66:58:11:1d:cd:02:5b:0f:48:
                    dc:d1:f5:8c:0a:51:00:c1:aa:0e:dc:34:e5:18:19:
                    b7:28:12:f8:45:c9:16:71:47:fb:78:e3:18:a6:24:
                    13:e2:b2:b5:a7:f4:12:46:2d:4d:f9:4c:ec:39:6d:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0F:F4:15:DF:F3:24:3B:DC:5D:DC:89:25:BB:8C:D3:38:F2:C9:5D
            X509v3 Authority Key Identifier:
                keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5b:6e:fc:09:45:97:3a:ee:0b:7e:2f:20:6f:62:9c:1a:66:
         dc:47:a7:9c:8a:26:44:43:1d:7e:df:ed:51:89:22:92:fb:8b:
         69:45:02:2f:fc:ed:ea:22:8b:38:dd:ed:8f:37:33:0c:c7:02:
         2f:9c:be:55:80:ee:72:26:8c:ef:8e:62:d1:55:23:fc:1d:ca:
         11:25:7e:24:5c:1c:6d:db:97:7e:06:07:00:b6:ab:9e:ab:8a:
         7d:eb:2d:06:4a:ae:29:3b:01:2f:35:6e:53:f4:07:9f:ad:97:
         bb:aa:89:c2:78:6b:e2:f3:3f:07:33:ae:0d:13:36:c6:c0:56:
         2f:9c:72:b8:31:13:90:ad:1c:88:b9:3b:b1:b4:aa:39:ef:c4:
         aa:91:f8:1e:38:e7:39:1e:fd:5f:90:8b:fd:a9:87:a4:ea:37:
         02:74:42:bc:0c:af:be:13:10:9b:6c:b1:a7:7a:f6:a1:83:cc:
         d0:b6:af:9b:d1:0f:10:3d:cf:d4:2e:1f:f6:2e:80:fb:c1:21:
         a0:2f:e9:dd:83:f0:35:b9:18:d3:77:18:74:51:b7:bb:2a:92:
         bb:37:93:b9:6f:c9:7a:04:16:8e:59:93:9a:c7:34:de:0f:5a:
         6d:d7:f7:1d:c2:ac:40:52:ba:b8:60:f7:98:56:cf:39:24:c0:
         5d:b5:66:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:46:51 2025 by rpki-client