This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
File:                     1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json)
Hash identifier:          dYHkMV9eZHROz//adYQlFYPdIxMtSW43kVZPWkFhZxw=
Subject key identifier:   04:E6:37:86:86:6E:54:04:B7:41:FE:40:61:A4:D3:22:95:DF:59:94
Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7
Certificate issuer:       /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
Certificate serial:       3508
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
Manifest number:          34FB
Signing time:             Thu 18 Dec 2025 14:57:09 +0000
Manifest this update:     Thu 18 Dec 2025 14:57:09 +0000
Manifest next update:     Thu 25 Dec 2025 14:57:09 +0000
Files and hashes:         1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: NK2I+bz9NeSixO0l06s51XAomIf2RZKsrVVcw2/omsg=)
                          2: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: jWpGewbGAxCVZEy9uZnR7Tfw1mCynOwqfq2TLC2QUUM=)
                          3: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: KB0yl0ZQRg2b/pl7UMxerf5AoFGQw8HVHTGUQ+jATl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl
                          rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13576 (0x3508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
        Validity
            Not Before: Dec 18 14:57:09 2025 GMT
            Not After : Dec 25 14:57:09 2025 GMT
        Subject: CN=69441645-febf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:d6:48:e4:c4:25:87:dc:98:b6:53:f4:81:
                    c7:6b:77:bc:66:5e:07:c5:7b:c6:08:e8:2a:cb:6b:
                    27:e1:5f:55:48:1e:26:c1:62:88:f9:c0:d2:98:bf:
                    9b:d0:d1:ad:07:7c:ab:15:5f:f6:c5:6c:57:69:6d:
                    87:cc:42:c8:91:ea:3a:dc:0e:de:cd:88:4a:52:75:
                    12:b9:76:2b:2a:59:9f:a4:57:5f:42:26:6d:05:f1:
                    d5:81:56:f0:fc:99:2b:5f:2a:b8:ad:0e:d0:9c:ac:
                    22:d9:77:68:f1:e5:6b:1c:fd:da:ac:f4:6d:8a:9e:
                    55:af:bc:0c:9e:2a:33:a9:6a:3c:be:5f:f3:ff:02:
                    fd:75:e4:12:1f:21:df:77:46:2a:8c:b9:ff:fa:70:
                    df:00:25:b7:0d:06:96:d8:ad:a1:d6:63:d1:38:32:
                    ab:3a:94:8d:1e:e7:d8:77:7a:f1:0f:49:ae:99:58:
                    9a:f9:0e:bf:1b:92:53:c9:a7:5b:26:a7:12:23:b9:
                    c5:97:76:6d:35:a9:e6:17:75:21:34:36:0c:f9:69:
                    53:11:23:91:75:c0:69:86:cb:91:37:d6:13:87:ff:
                    6b:95:58:20:1b:6c:b6:06:54:c9:68:d2:c4:f8:43:
                    9e:cc:2a:0e:fa:9a:1e:72:90:9d:c7:bf:15:cf:3f:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E6:37:86:86:6E:54:04:B7:41:FE:40:61:A4:D3:22:95:DF:59:94
            X509v3 Authority Key Identifier:
                keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:53:9c:6a:cf:7d:f4:8f:9c:59:c5:b6:ef:b7:d6:ce:95:e2:
         01:0c:8c:d8:c8:a3:8c:c1:5c:47:ac:7b:89:90:0a:f0:6c:12:
         31:53:c0:55:52:94:73:b9:b4:1d:d5:7a:38:64:ae:39:47:bc:
         1f:0c:92:ac:54:4e:9b:6a:18:7f:96:5a:03:6a:57:f4:a9:a1:
         d0:06:a6:9d:a4:95:51:bf:4b:c9:07:59:4b:9c:28:fb:70:fa:
         6e:5c:46:ba:67:05:74:ae:f8:ed:7a:4a:7e:24:8b:c4:88:fe:
         8b:b3:16:8c:ca:52:0d:d0:18:67:c1:f3:f8:b8:41:d6:0d:24:
         c5:ee:bf:9c:7b:59:86:3b:f9:6e:2e:eb:07:09:5d:a4:50:d9:
         43:ed:88:ad:68:4c:c3:62:9f:fc:c2:e5:ce:1c:c9:81:53:28:
         2a:82:ff:6e:26:21:fa:8a:c4:23:35:8d:cb:76:49:2f:1f:b8:
         62:27:34:b5:67:db:bb:f1:fc:73:03:18:65:6d:2d:81:d0:c4:
         ba:05:c7:13:e1:00:45:d9:93:1e:05:ed:91:68:b9:7e:aa:93:
         1f:c8:e3:79:1a:b2:da:5c:47:ca:5b:00:79:ce:5e:85:c3:f7:
         05:0c:8d:7b:d9:2b:0a:a6:2c:14:86:ee:cb:fc:47:17:18:1d:
         03:0f:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:00:59 2025 by rpki-client