This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
File:                     DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json)
Hash identifier:          Znmxjesbogic+yNNHMbCTdmcvJyMgyRtjFpiyBOK3tg=
Subject key identifier:   5C:1E:DA:EE:9A:A3:66:EF:32:C7:21:CE:57:3A:07:22:4F:B5:98:C8
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Certificate issuer:       /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial:       17CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
Manifest number:          17A6
Signing time:             Thu 18 Dec 2025 16:27:06 +0000
Manifest this update:     Thu 18 Dec 2025 16:27:05 +0000
Manifest next update:     Thu 25 Dec 2025 16:27:05 +0000
Files and hashes:         1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: MY54dbSWQ7S3CR1qudq0xsj6V85NzWDZnFds58l6DKI=)
                          2: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=)
                          3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=)
                          4: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6090 (0x17ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
        Validity
            Not Before: Dec 18 16:27:05 2025 GMT
            Not After : Dec 25 16:27:05 2025 GMT
        Subject: CN=69442b5a-946d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:3e:db:80:20:19:cd:b1:5d:89:80:59:ab:
                    db:94:9f:84:76:f7:db:de:3f:37:a7:02:49:d2:6e:
                    fa:81:23:1e:8c:07:0d:38:f5:32:ad:d2:75:7f:b9:
                    94:51:b7:cb:f2:a5:d3:fd:7d:60:96:68:80:c1:07:
                    03:d4:5c:58:1b:87:bd:db:b1:29:ea:90:2c:62:9a:
                    ac:7c:38:0b:69:f3:33:05:36:06:e0:1f:c8:95:b3:
                    93:7e:43:86:0d:4a:31:cf:3f:93:5c:b8:1e:4a:60:
                    42:9b:d2:ef:06:a7:95:fa:7d:cf:7e:0d:7a:d9:26:
                    b6:76:e7:85:36:85:57:7c:20:06:9a:ca:a1:df:b2:
                    8d:54:a8:87:7a:ce:32:e7:00:ec:2d:a6:26:f9:87:
                    e7:48:ba:8f:bc:89:0a:38:d9:de:c5:64:11:14:97:
                    0d:c1:8f:b8:b7:af:fc:79:95:f6:61:99:ab:34:1d:
                    06:ce:1b:d3:e6:d7:88:46:96:ad:33:7d:a1:cf:8f:
                    87:ca:ff:ff:57:0a:65:bb:28:1c:db:38:89:fd:ce:
                    2e:5c:21:87:96:47:36:b3:bd:d2:de:90:e1:4e:06:
                    f5:78:10:34:ab:c5:42:77:da:70:67:33:da:8e:00:
                    c8:68:12:c0:2e:a7:9e:76:b4:b9:37:b6:40:8c:5b:
                    20:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1E:DA:EE:9A:A3:66:EF:32:C7:21:CE:57:3A:07:22:4F:B5:98:C8
            X509v3 Authority Key Identifier:
                keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:55:0d:89:ac:71:2d:0a:e7:6e:07:11:3c:bc:6c:c4:61:62:
         27:7d:dd:f1:d1:f4:28:a2:a7:25:6c:e7:93:8a:9d:13:79:ad:
         c6:73:b6:48:e4:fb:8f:46:2b:92:d8:9d:67:11:7c:da:a7:f6:
         2f:be:70:8b:87:4a:c1:f1:0d:32:ab:57:05:7e:57:c8:dc:9b:
         fc:fc:05:c8:b3:14:cc:eb:51:70:b9:a4:2f:4a:7d:d8:2d:fe:
         71:b9:8b:91:19:13:81:30:ca:d7:4e:08:93:0b:e0:4f:53:43:
         2f:21:de:d9:4c:0e:9a:d7:2b:87:ff:54:6a:a3:bc:78:16:8d:
         fb:8b:ff:da:99:6f:24:06:dd:5c:6b:6f:7f:5e:f4:16:6d:7a:
         aa:e0:dd:46:58:ba:7b:33:ee:4d:9e:da:91:5b:7e:bf:51:3e:
         0c:07:70:60:0e:71:bd:37:ca:b4:f9:87:5d:74:30:f6:6d:03:
         63:1b:29:ff:ee:bc:e9:d1:4a:4a:97:e1:3a:cd:b8:87:31:c9:
         f7:f4:48:c8:b5:ce:cc:c5:18:19:94:54:a2:3e:09:2f:a5:48:
         a7:6d:56:9e:2e:6d:8c:20:a8:e4:1f:23:94:ca:e3:ce:8f:12:
         43:e3:b8:cd:ea:8d:18:87:a3:97:dc:dd:f7:bf:75:2f:db:4c:
         e6:44:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:05 2025 by rpki-client