This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File:                     -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier:          Dhs3dObQo8fHyzBnrbBEObn0qf1pZOdl8xdk64sUUBM=
Subject key identifier:   70:13:A6:66:4A:59:40:1E:3B:6B:20:A9:A0:41:B7:E7:B0:0F:E3:B2
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer:       /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial:       031F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number:          0310
Signing time:             Sun 21 Dec 2025 00:23:14 +0000
Manifest this update:     Sun 21 Dec 2025 00:23:14 +0000
Manifest next update:     Sun 28 Dec 2025 00:23:14 +0000
Files and hashes:         1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: BFu8sLhKsFu7VZNZfHs3daXc+VpvR9zc7EkluzlcJLg=)
                          2: C79B240C249811EFABD23253C4F9AE02.roa (hash: 82ItOlvihDjqVoWpSyFuHxJCD90xjXFw0eTtjvUUFXI=)
                          3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: xP/jJhS+dRDMFII7/oN+e6tmZGRsaM2PF5rzA01lyJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
                          rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 00:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
        Validity
            Not Before: Dec 21 00:23:14 2025 GMT
            Not After : Dec 28 00:23:14 2025 GMT
        Subject: CN=69473df2-b5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:2f:92:88:a5:6c:df:c5:c8:db:4c:56:8e:
                    29:16:bb:00:2f:c4:00:f6:cf:e8:90:1d:cf:bf:31:
                    a1:8c:51:06:57:c3:53:3e:64:bc:4f:01:f8:a4:44:
                    d1:ce:67:89:64:9b:aa:00:ea:77:e9:5a:68:24:ab:
                    9b:1a:25:ed:93:b3:3a:6e:92:93:b1:31:dd:0c:8c:
                    71:18:ed:4a:b3:e7:3a:a9:c2:80:7b:64:37:84:80:
                    73:75:d4:a5:62:29:b2:7d:a1:fa:2a:c8:16:55:1b:
                    b2:cf:d9:a7:ff:c5:28:a1:a0:40:e1:91:15:27:25:
                    9b:ae:50:7a:84:ee:66:3a:97:a6:6f:cc:8e:cd:e3:
                    4d:3f:8b:bf:99:e0:c3:9b:4b:44:65:80:7c:a2:b5:
                    4d:33:c1:55:39:0d:bc:0f:90:dd:9f:84:5b:22:70:
                    e7:63:6c:8d:48:e3:98:75:24:52:68:ef:9f:46:9e:
                    27:23:1f:01:78:d7:3f:2e:65:e6:6a:e8:e6:51:eb:
                    ec:a9:8e:e4:8e:ac:87:98:8a:bb:0b:a1:57:51:19:
                    2e:f7:a7:ff:c0:68:31:9a:a2:23:cc:a6:ae:f2:44:
                    97:ec:9a:d9:ce:a9:da:67:1f:a9:59:e1:77:61:d3:
                    f1:34:55:ff:af:de:ed:64:bb:80:d5:44:51:b0:2b:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:13:A6:66:4A:59:40:1E:3B:6B:20:A9:A0:41:B7:E7:B0:0F:E3:B2
            X509v3 Authority Key Identifier:
                keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:60:37:45:f7:63:18:38:21:f8:28:08:7b:3a:43:ff:0b:62:
         51:30:a1:2a:e1:ec:28:78:b9:81:d5:05:f1:32:fb:8e:00:56:
         61:e7:06:65:25:dd:92:ac:df:c0:b2:65:44:05:e6:31:a8:4f:
         09:48:26:89:87:fc:7a:8a:35:57:08:c1:88:3e:39:69:9e:0d:
         fe:34:45:7e:6a:e5:6a:d3:11:ef:46:ea:1e:4c:d2:f4:d3:80:
         a3:e3:e2:9d:8c:3c:cb:81:30:44:42:b6:91:d6:9b:90:d5:36:
         7b:9c:bb:60:5c:48:3a:68:7e:35:e9:aa:b5:bf:9d:99:46:88:
         04:65:aa:63:28:cd:1e:3b:ee:a8:8c:cc:a0:21:c7:e9:0f:65:
         82:1e:64:45:24:ef:f4:33:25:b4:bc:8f:ef:83:e6:d7:ed:2b:
         64:5d:e4:75:28:73:cf:e7:61:d6:ae:92:ce:1b:44:49:c5:37:
         48:ee:54:25:53:4a:10:75:d5:1b:ac:9b:59:89:03:6d:76:13:
         55:f2:7b:17:bf:a5:f6:22:9d:52:ae:a9:8f:7a:59:eb:1e:aa:
         45:f5:41:99:1b:40:37:d4:44:0d:10:1e:db:d4:ad:9f:40:b6:
         e9:90:c5:c0:d3:9f:fa:f0:de:bc:a5:64:3f:01:35:47:6b:46:
         65:84:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:42:25 2025 by rpki-client