This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
File:                     SIlwUGJk75bYHsEuar0lbbMP3Po.mft (raw, json)
Hash identifier:          pRC6d6/VsAw6eKsydqeKYBVQFura97ZExJ0Q6iZKbWM=
Subject key identifier:   4B:75:97:31:32:29:46:DD:8D:36:18:04:EB:70:44:AD:8B:A2:5B:3A
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Certificate issuer:       /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
Manifest number:          01EB
Signing time:             Sun 21 Dec 2025 02:17:50 +0000
Manifest this update:     Sun 21 Dec 2025 02:17:50 +0000
Manifest next update:     Sun 28 Dec 2025 02:17:50 +0000
Files and hashes:         1: SIlwUGJk75bYHsEuar0lbbMP3Po.crl (hash: r5ZneipknHZlUg5U0WhGvRuZmJruws6a8zHWcl86fjU=)
                          2: 99A281E8BC3411EE878F6918C4F9AE02.roa (hash: x/8WQYFzZJjd6qiztbaiX3Fhr5RPTxAWezVDeewWTpg=)
                          3: A73AF738366311EEB376DC3AC4F9AE02.roa (hash: Q2j+bx3N3ZdUKPXJTepPxaW/OkIMk2izDVndHTAeFvA=)
                          4: 627A2B5C6E8211EFA8F9497EC4F9AE02.roa (hash: GDYTVh4gyl7O9JzQyRBJqT3HYO/YJl9I+B0Gy9Lz2Cc=)
                          5: A4E3DD6A366311EEB376DC3AC4F9AE02.roa (hash: F/8OplCzxxbsHxuvcFxtuR1UH/SV8pdy21RejCPpR20=)
                          6: A460738A366311EEB376DC3AC4F9AE02.roa (hash: 0NoO1H2x4iLqPGTPjj6vdQCUi1d5uzF87/kugyQBVZA=)
                          7: A87D6400366311EEB376DC3AC4F9AE02.roa (hash: 1wC1Zjtr4j1pOe9r95SiDjCvJHvrP4BbdROmwODnYXg=)
                          8: A6254C72366311EEB376DC3AC4F9AE02.roa (hash: sbz94/ghA9Z8Yf2KftdiTiUietfmj4zdumVvStOwteg=)
                          9: A6A9297A366311EEB376DC3AC4F9AE02.roa (hash: Q/tfph6nEYImSVUPIwrVwxqRFftY0TuEkG+wERHRvDQ=)
                          10: A5A25326366311EEB376DC3AC4F9AE02.roa (hash: gx3HIUe1RGtDm6y22ZFweid6K0sud9BNrhfyZltCrH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
        Validity
            Not Before: Dec 21 02:17:50 2025 GMT
            Not After : Dec 28 02:17:50 2025 GMT
        Subject: CN=694758ce-a594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:31:65:cb:d9:a4:47:29:1d:81:1c:86:38:
                    7b:6e:73:0a:f2:39:72:03:dd:76:f1:ad:c4:87:05:
                    e0:00:b2:ac:75:13:38:1f:c8:4b:24:2f:c9:72:c3:
                    9b:66:d3:a5:eb:46:be:8e:f8:54:9f:f7:fe:6d:ec:
                    1e:57:07:7b:b8:b3:d1:81:a1:dd:fc:e1:c3:fd:3d:
                    46:3d:ce:c5:5f:6c:85:bc:a2:da:1e:08:ff:c5:a1:
                    68:85:08:a8:a9:52:1c:5f:1e:c2:dc:a0:fa:77:dc:
                    ef:5d:40:8f:99:6b:9e:8a:b4:3e:20:1e:e7:60:a6:
                    bb:af:34:b6:85:be:37:40:5d:c4:5e:47:dc:cf:cb:
                    0d:00:c5:c2:9e:c0:99:bf:40:26:cc:5b:63:07:a4:
                    13:05:56:bc:23:35:d5:73:32:16:80:15:66:f3:e4:
                    da:44:eb:cc:79:56:a5:b9:51:39:45:7a:e3:52:97:
                    2b:76:53:3c:18:5a:ae:8a:99:07:5d:d4:cb:e5:56:
                    78:bc:3c:5c:c6:73:d7:cf:8a:51:e1:34:3f:75:07:
                    60:10:bc:36:67:ef:2f:7e:77:eb:67:3a:33:0a:e6:
                    b8:bb:f3:5d:53:71:d9:33:7c:e2:f1:fb:e0:21:73:
                    a0:af:6b:0f:bb:0e:01:0d:7c:f0:80:c3:cc:8f:d1:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:75:97:31:32:29:46:DD:8D:36:18:04:EB:70:44:AD:8B:A2:5B:3A
            X509v3 Authority Key Identifier:
                keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ff:41:75:4a:96:88:b6:b2:ef:3c:71:7a:62:38:33:8b:b0:
         4e:f0:92:70:70:f9:9d:0e:44:91:28:0c:32:58:e8:a9:2b:c7:
         d7:38:b8:33:70:0e:9b:3f:a9:f4:a6:42:f4:d5:10:84:ec:c1:
         e1:4b:c2:6a:24:fa:d2:4b:da:ae:89:26:18:0c:51:dc:5b:3f:
         4e:f3:37:00:19:02:a1:0e:cf:c4:57:5e:66:4c:1a:2d:7e:97:
         54:0d:39:f1:03:ec:2c:07:84:89:75:ed:30:b4:5c:e0:b4:dc:
         77:d5:bc:89:8a:b0:ad:c2:a8:31:6b:1e:1e:1b:11:17:3e:95:
         94:ed:17:91:e1:85:5e:a6:73:0c:49:e7:10:12:f4:cf:b8:3d:
         1f:b2:a2:90:9d:ac:f8:5c:7f:0d:fd:1a:b0:82:77:87:08:81:
         a3:12:5d:c1:fb:92:a4:f0:32:b1:87:bb:b3:13:98:b3:7d:7a:
         a9:b2:a1:ab:3e:61:36:ff:81:72:a5:fa:c5:64:7f:4c:a8:d1:
         0c:ca:62:5a:21:25:ad:40:ac:2e:7a:2e:f9:aa:26:de:17:7e:
         b3:b0:a5:b0:f8:d1:a6:95:d4:d8:77:d5:67:60:b3:55:28:16:
         43:6b:85:58:98:1e:0a:6f:7d:5f:5d:98:2b:70:e8:dd:a9:19:
         cf:39:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:22:39 2025 by rpki-client