This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
File:                     AVyC748X910B8qMGeGhd_cJeH3w.mft (raw, json)
Hash identifier:          WCt47M25lTOgY0Bx4M2aVfw7jA+6+26poGFEF+9OwaA=
Subject key identifier:   E7:E3:03:2D:B3:FB:4A:70:AA:64:B3:81:B2:E8:73:92:CF:0C:12:1E
Authority key identifier: 01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C
Certificate issuer:       /CN=A9193EEE/serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
Manifest number:          84
Signing time:             Fri 19 Dec 2025 05:43:32 +0000
Manifest this update:     Fri 19 Dec 2025 05:43:32 +0000
Manifest next update:     Fri 26 Dec 2025 05:43:32 +0000
Files and hashes:         1: AVyC748X910B8qMGeGhd_cJeH3w.crl (hash: lOW2Ljaw4Xnw1G8Ms9zCLcK9+k+OqPmptZJEWiyhW7Y=)
                          2: 39A906E8152C11F08DC35116C4F9AE02.roa (hash: LpZGZLncTzWOvQxmXibbHB08wMwsFC9T1sCL9HoJGDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEE, serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C
        Validity
            Not Before: Dec 19 05:43:32 2025 GMT
            Not After : Dec 26 05:43:32 2025 GMT
        Subject: CN=6944e604-7be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:67:13:98:b9:04:6b:ce:63:83:ab:f8:c5:
                    6b:e6:93:3c:d2:1e:66:aa:35:2a:a5:fb:53:b9:7c:
                    03:ed:b7:71:0e:ae:69:f3:fc:bd:9c:84:f1:67:cb:
                    20:b9:24:48:4e:e3:6b:2f:3c:2a:05:97:ce:93:9b:
                    b4:ec:59:7a:64:d8:72:c5:29:46:b4:7f:a4:da:78:
                    53:84:22:1d:3a:12:5f:71:2a:16:cf:33:99:a2:7a:
                    66:df:aa:74:c4:3b:a5:6e:3f:73:00:8a:75:9b:58:
                    6c:6d:d2:b6:a1:b4:0d:ab:a0:44:cd:31:62:df:8b:
                    d0:ec:e2:b0:9c:32:b2:92:18:fc:68:e3:8c:0b:99:
                    ce:bd:7d:06:ef:70:66:a5:14:c5:47:3e:ae:42:28:
                    f2:0c:e5:5b:0a:be:41:16:6e:7c:a5:6c:f2:37:0b:
                    4a:3b:8e:d4:37:61:07:74:bb:d8:44:7d:a6:50:7a:
                    4f:99:cb:cc:0c:e0:04:d5:20:65:0e:1c:ce:87:62:
                    b2:a9:02:fb:76:0e:e5:15:f1:5d:5c:c7:84:2c:d1:
                    96:f5:29:54:05:3a:5d:e6:00:99:3f:78:41:9c:f9:
                    e3:8d:af:00:18:9e:27:04:2c:f3:de:1d:d3:fb:2e:
                    c2:b0:3c:0c:1a:d2:f0:ae:b4:d5:10:8f:9c:fd:34:
                    d2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E3:03:2D:B3:FB:4A:70:AA:64:B3:81:B2:E8:73:92:CF:0C:12:1E
            X509v3 Authority Key Identifier:
                keyid:01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f8:c3:f2:79:f8:29:3d:9a:10:09:52:0a:16:46:96:30:9d:
         dd:44:7d:3b:b4:ca:9d:56:96:fd:58:3d:4a:b2:ef:a3:9e:f6:
         15:01:c4:1b:f1:05:22:4b:23:ab:c6:89:d4:53:9e:99:a8:e2:
         8c:23:b2:80:b4:b5:c6:1e:11:11:42:2d:60:f7:7f:e1:c1:3a:
         15:9e:bb:80:a0:4a:f6:50:53:26:cf:2b:72:70:ea:de:a8:27:
         df:bc:1a:02:0d:3d:4c:4a:28:ae:b8:1b:b1:ec:32:4e:94:e8:
         7c:4c:d3:2e:7e:ed:5b:e8:6a:16:7b:48:13:05:2d:fa:e1:a0:
         c7:39:72:51:9b:15:61:b4:7d:ae:f2:eb:86:0a:11:ee:c1:d9:
         2a:0b:a0:ac:d4:89:cc:e9:27:b7:79:7c:76:f3:ea:b1:47:69:
         ee:c2:97:19:3c:1a:7f:ab:55:77:b2:7b:cd:f0:c8:22:26:17:
         be:29:2f:1a:89:0c:c7:c7:82:ee:b9:51:09:c6:b6:fc:26:2f:
         9a:80:09:a5:25:1b:47:4f:fe:55:6f:af:ec:41:62:ed:cc:5e:
         b7:5e:3c:91:36:87:d0:e2:59:9c:ee:fc:77:78:7d:1e:17:f0:
         25:8e:b3:61:6a:fc:44:2f:24:21:2d:e2:ae:dc:88:e2:a2:58:
         85:7b:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:46:38 2025 by rpki-client