This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
File:                     0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft (raw, json)
Hash identifier:          NGpTN0w7byJesCFRUr1yH+ygjB3iKVUHO922tn3SdSU=
Subject key identifier:   CC:B6:A0:9D:D1:BF:48:3A:7A:3C:38:AF:04:1C:AD:07:E0:5D:BC:4F
Authority key identifier: D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB
Certificate issuer:       /CN=A918FE4B/serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
Manifest number:          02A4
Signing time:             Wed 31 Dec 2025 01:11:15 +0000
Manifest this update:     Wed 31 Dec 2025 01:11:15 +0000
Manifest next update:     Wed 07 Jan 2026 01:11:15 +0000
Files and hashes:         1: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl (hash: x7sxUUHIGrs/1FWctS4xIkT5xb9oMv8Nw9zlhSxm8zA=)
                          2: F22AC4E253FA11F0ACEFB91BC4F9AE02.roa (hash: zV/07wRUVY1rurlMX/hm5KuzjNtGcUHEDL2bs1ve1Lk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl
                          rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 01:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE4B, serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB
        Validity
            Not Before: Dec 31 01:11:15 2025 GMT
            Not After : Jan  7 01:11:15 2026 GMT
        Subject: CN=69547833-bcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:33:0f:e9:85:09:e4:e2:9c:34:38:18:8e:
                    2e:f8:fd:31:78:55:60:2f:2d:6b:9e:c1:c3:d5:7f:
                    5b:d7:b7:ff:34:03:53:2d:75:b7:62:37:2a:ce:90:
                    8d:2c:2e:52:eb:e0:91:fc:71:d3:a3:f9:d4:28:5a:
                    2c:95:d8:86:ec:6a:42:ec:3a:18:5c:d9:59:8f:6f:
                    a8:80:e8:6f:ce:f3:1c:1e:a0:3b:71:c4:f7:6f:23:
                    de:5d:53:f2:06:2c:cd:2b:10:af:67:4a:38:9f:29:
                    a8:0c:24:8f:47:65:50:2b:e7:28:f8:3e:b8:57:09:
                    4c:8d:28:f1:51:bd:57:fb:91:58:3a:ec:da:ce:cc:
                    ed:02:6c:5d:4c:bf:ce:55:99:77:e4:f8:48:57:91:
                    92:70:cd:e6:78:33:72:a5:bc:08:e8:19:a6:e1:c8:
                    32:b0:f7:c5:c0:d9:7b:4e:65:d0:ed:20:02:7e:82:
                    1f:eb:98:08:3d:a9:d2:be:cc:45:b0:39:bf:fb:64:
                    10:40:57:d1:8b:ac:0e:f3:f7:60:45:3c:60:54:bb:
                    1e:3c:08:81:f5:2c:54:5c:b5:ba:fd:f9:08:44:90:
                    90:66:1b:08:a1:8c:6d:1c:a2:81:b8:f6:ef:94:05:
                    c9:c9:ba:a7:2b:67:e9:e4:89:f2:ff:53:b6:08:cb:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B6:A0:9D:D1:BF:48:3A:7A:3C:38:AF:04:1C:AD:07:E0:5D:BC:4F
            X509v3 Authority Key Identifier:
                keyid:D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:04:0a:73:61:cc:e5:2e:c8:a8:be:03:cd:36:83:a4:0d:c8:
         8a:1d:75:67:32:c8:2f:be:d2:13:b3:82:01:a2:a6:e1:74:0c:
         dc:bd:75:5f:97:b7:32:d9:28:1e:3f:83:9d:ec:3e:6f:ce:24:
         42:48:14:c3:05:b9:10:9e:24:e2:d7:85:9f:13:da:8a:4b:b7:
         95:93:fd:d6:d0:4d:ff:cc:07:81:a6:67:f8:57:ad:5b:8d:88:
         c8:b3:97:3b:5b:ce:6c:f8:b6:d9:f4:a1:ea:62:0f:be:f5:cb:
         c1:85:2d:d2:8f:23:db:6f:9d:d9:97:5f:2b:8b:db:35:83:00:
         d5:70:98:45:35:9d:de:c0:7f:86:f9:9a:e2:5c:87:0e:11:62:
         4b:79:64:7a:76:2d:b6:5f:d0:81:b0:1e:ab:5b:4b:51:b2:be:
         5a:e1:d2:f9:d1:ed:8b:df:a2:4f:5a:e8:66:56:b6:12:ce:39:
         8b:07:56:67:f7:41:a2:b3:10:b4:27:fc:04:5a:88:7e:ff:41:
         86:ee:2c:8e:78:06:0e:d6:af:4f:c6:41:e9:95:65:11:7d:10:
         f9:65:e3:92:88:aa:06:c4:67:33:8c:4f:4f:67:13:3c:bf:a2:
         24:af:28:0b:c5:47:bf:64:b2:5e:88:57:b0:7a:ab:7c:75:23:
         a2:19:85:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 08:17:31 2025 by rpki-client