This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
File:                     19wEkNjuc-uWU-jiR2_8-4l0qt8.mft (raw, json)
Hash identifier:          xTo6RLFlSJxr0fegI6HSiu3p1s2+u5iOQnahRtzIvC8=
Subject key identifier:   89:60:11:7D:D9:39:F5:9C:33:E1:AA:9D:02:BF:A0:48:CD:3D:25:07
Authority key identifier: D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF
Certificate issuer:       /CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
Certificate serial:       051B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
Manifest number:          0514
Signing time:             Thu 18 Dec 2025 22:55:21 +0000
Manifest this update:     Thu 18 Dec 2025 22:55:21 +0000
Manifest next update:     Thu 25 Dec 2025 22:55:21 +0000
Files and hashes:         1: 19wEkNjuc-uWU-jiR2_8-4l0qt8.crl (hash: 65vKIHzKuHAuPeHZXHPP6V/CFhQ+GOMDcOeLnlLo2C0=)
                          2: 233E4D90309811ECAED04B4AC4F9AE02.roa (hash: CZ7WkBrqTyJNM4Pw1sCP57Phckm4MGOWnQm76XtbNLI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl
                          rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A0B8, serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
        Validity
            Not Before: Dec 18 22:55:21 2025 GMT
            Not After : Dec 25 22:55:21 2025 GMT
        Subject: CN=69448659-337c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:34:90:0b:fd:92:f1:25:63:6c:d8:ba:a7:75:
                    f6:02:50:2e:a4:6f:76:5c:88:8b:b6:db:23:64:f3:
                    ea:41:8a:f0:c5:9e:2e:84:db:d2:ba:82:f4:a7:04:
                    68:87:21:e7:cc:17:6c:d4:05:5b:0d:bd:10:28:f2:
                    74:c7:dd:69:9f:98:66:ee:91:19:8c:b6:93:ea:f2:
                    d7:94:1f:ab:f7:e8:f0:81:f5:77:3d:06:2e:af:78:
                    7f:c0:f0:d1:4f:37:e2:d2:b8:6d:fe:6e:3b:bf:dc:
                    a8:46:66:d7:f2:73:bc:2d:3f:b7:5d:47:79:ab:a6:
                    c0:fa:7a:e3:41:89:ed:82:0a:69:e6:87:de:f9:19:
                    ee:53:77:b4:21:0f:c3:68:4e:2b:40:d0:2b:a2:18:
                    2e:45:14:d9:b9:01:55:ea:51:5e:86:c6:67:0d:09:
                    63:25:b7:c6:ce:17:ff:fa:fc:74:bb:88:d8:24:59:
                    de:89:9c:a8:2c:ec:3e:cc:6e:25:5b:c5:e4:92:cb:
                    4e:db:19:c7:ed:16:7c:fd:87:40:ca:68:d5:79:f7:
                    75:8e:f4:90:ab:69:07:39:e7:99:76:64:b9:a9:ae:
                    26:c5:2f:12:ea:3a:77:b9:93:72:df:9e:e4:54:18:
                    79:b8:14:78:0d:fb:6f:55:10:e1:fe:33:92:d4:1b:
                    23:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:60:11:7D:D9:39:F5:9C:33:E1:AA:9D:02:BF:A0:48:CD:3D:25:07
            X509v3 Authority Key Identifier:
                keyid:D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:61:a9:aa:da:0f:0c:63:40:21:5d:f5:a0:68:3d:b5:bf:7e:
         39:82:30:f9:c2:05:d8:26:1f:73:82:33:c3:00:d4:6b:4b:73:
         dc:78:f5:1d:2a:d5:30:ab:bc:a5:70:7b:62:56:86:e3:0c:3a:
         72:20:e1:f5:b8:e7:9f:c8:7d:91:43:88:e5:76:51:62:ee:91:
         e4:48:5a:9c:21:19:31:9a:bf:9b:e3:ff:0b:71:89:49:06:07:
         c6:0b:73:a8:17:24:d4:f8:c0:b8:04:e5:0e:33:9c:47:40:59:
         70:3f:b0:89:fc:bd:66:9e:3f:31:a0:5d:e7:16:bc:19:bc:b0:
         74:41:c9:fc:4d:1a:53:dc:9d:d1:e0:4d:f5:be:40:71:58:c7:
         43:d7:3a:7d:54:38:80:6d:e2:97:f7:00:c9:22:c9:78:77:7f:
         d4:59:5b:a2:09:5b:68:69:80:b6:6d:b3:6c:f5:2d:be:ca:a8:
         2b:68:67:9d:80:22:07:5a:cf:de:e5:ae:af:49:61:6c:c9:eb:
         6d:d8:2a:d9:c3:0a:6e:6f:11:81:80:29:a2:2e:5e:76:7f:cd:
         66:04:0a:d7:4f:31:3c:11:e8:29:11:27:a2:3c:18:b3:f8:bd:
         8a:9c:03:7a:03:9d:8d:7a:f7:d5:1c:64:6f:25:bc:d0:c7:5c:
         be:b9:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:39:05 2025 by rpki-client