This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
File:                     MfUEGe8ZsP2mG2Y5DBLur27L50E.mft (raw, json)
Hash identifier:          DC/M0mxgT6Er5BPVkd7pnZ2XPfc8GjRXTQajOfwxweE=
Subject key identifier:   07:42:E5:9B:DB:AE:69:E1:15:05:94:F6:14:4B:52:02:A0:40:A3:89
Authority key identifier: 31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
Certificate issuer:       /CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Certificate serial:       0887
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
Manifest number:          087F
Signing time:             Thu 18 Dec 2025 20:05:17 +0000
Manifest this update:     Thu 18 Dec 2025 20:05:16 +0000
Manifest next update:     Thu 25 Dec 2025 20:05:16 +0000
Files and hashes:         1: MfUEGe8ZsP2mG2Y5DBLur27L50E.crl (hash: 0Z0Y+4P6xjCqg4SMiyMR5kZsYjACGUNZObkiPwqK76c=)
                          2: 1F820766D66F11EAB2766134C4F9AE02.roa (hash: FxDMGItivgHcpDIQVI/wEfT2xKykaCPSfnkqAOljfEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
                          rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186584, serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
        Validity
            Not Before: Dec 18 20:05:16 2025 GMT
            Not After : Dec 25 20:05:16 2025 GMT
        Subject: CN=69445e7d-c77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:54:6c:76:31:89:ad:26:eb:f2:d7:b8:b4:
                    98:55:73:f3:89:1f:82:2d:17:ae:a5:13:85:16:d9:
                    fc:e9:b8:92:58:ea:36:d5:4a:73:ab:44:c1:76:90:
                    1b:55:22:4c:32:63:08:57:a3:37:39:f9:ab:20:c2:
                    c1:5b:db:6d:6b:36:8b:39:7f:cc:c6:f6:dd:d6:6e:
                    c9:76:80:ab:80:f5:8a:dc:91:c8:5b:0b:e5:37:5c:
                    74:e0:54:96:0f:a3:3b:ec:a9:50:c5:a9:6e:51:8c:
                    28:0c:04:79:8d:e9:8b:92:6b:d8:ea:32:ac:1a:af:
                    9d:f6:4f:f8:34:66:cd:67:fb:e6:83:73:8d:cb:76:
                    9b:dd:87:e5:e4:13:79:ba:66:63:b0:d3:78:24:f4:
                    08:9d:0a:ce:f9:02:5d:8b:8d:a1:0c:8e:1c:fa:6c:
                    d0:5e:b4:67:25:a6:4c:4a:c4:2c:95:f8:d2:a7:d7:
                    a2:80:62:ce:dc:3c:ef:a6:d1:ec:82:30:81:91:08:
                    2d:f7:47:ce:76:cd:82:f4:e6:72:f6:ba:4d:41:b6:
                    57:7c:05:55:88:a4:e4:bf:3d:bb:97:4c:51:c8:e4:
                    c6:01:7c:f4:59:74:94:e0:83:0e:d2:dc:e6:4f:cf:
                    8c:7f:9f:84:83:7d:77:7a:a3:19:c7:d8:3f:8b:61:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:42:E5:9B:DB:AE:69:E1:15:05:94:F6:14:4B:52:02:A0:40:A3:89
            X509v3 Authority Key Identifier:
                keyid:31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9e:be:8c:b1:a2:e3:fa:1b:cd:0d:15:b8:96:eb:25:26:eb:
         2b:ba:8a:29:2b:d8:06:53:7d:b5:f0:7d:8c:45:72:22:d2:4f:
         1b:35:b5:3b:db:be:3a:9b:cc:51:7b:1c:1d:66:da:15:e8:c0:
         af:d5:3b:42:a1:f6:4d:91:ac:19:64:ba:e5:83:c1:fc:3c:6e:
         44:d5:e8:02:f9:a2:71:41:35:9a:78:9f:fe:fe:7a:11:dc:6f:
         ef:94:e7:44:7e:0d:a3:a1:90:56:ae:40:7f:c2:62:f9:97:11:
         3f:dd:92:30:9d:af:92:85:6f:f3:69:76:39:a8:6e:81:b4:ec:
         9e:1b:51:71:fe:13:e3:61:41:69:22:e7:d5:cd:3b:32:e5:d6:
         26:36:76:ff:fe:d8:e2:e4:70:da:1b:8c:48:f0:94:7e:ce:ec:
         cb:67:fc:34:17:55:89:2a:06:60:54:0a:4b:f6:bd:b1:06:ee:
         3c:a7:6d:6c:2c:7b:9b:19:53:62:e6:0d:8d:fe:5f:ec:47:c4:
         1a:a3:8e:78:2f:e7:56:ec:11:64:84:f3:0b:e7:ab:e4:78:64:
         4e:80:e1:b8:4a:0e:48:87:d0:13:49:f0:56:14:71:be:c8:48:
         3d:88:64:76:17:f9:8e:4b:4a:25:0d:4a:9f:5f:47:64:1a:ec:
         17:82:41:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:58:52 2025 by rpki-client