This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
File:                     3JGEsEpTx6Fy980mJV612APjRwU.mft (raw, json)
Hash identifier:          QsEInIT5kAN+jDe5X7U5B5C7pGjmj+mzt8/DX4PC6+Y=
Subject key identifier:   B4:AF:49:74:28:B3:D7:21:6B:34:C8:CE:E2:BA:6D:34:41:D7:E3:C7
Authority key identifier: DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05
Certificate issuer:       /CN=A919910B/serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705
Certificate serial:       0716
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
Manifest number:          070A
Signing time:             Sun 28 Dec 2025 21:12:39 +0000
Manifest this update:     Sun 28 Dec 2025 21:12:39 +0000
Manifest next update:     Sun 04 Jan 2026 21:12:39 +0000
Files and hashes:         1: 3JGEsEpTx6Fy980mJV612APjRwU.crl (hash: XGlGlPvr4rzQEBDbiGFbILcnlQS0LYLwWeekweP6U08=)
                          2: BB199EBC6F8711EB9E412A2BC4F9AE02.roa (hash: DGzXCeNwvDBe7tehCzISldKuF3rMgtSzwuNEMYEu//8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl
                          rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 21:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1814 (0x716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919910B, serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705
        Validity
            Not Before: Dec 28 21:12:39 2025 GMT
            Not After : Jan  4 21:12:39 2026 GMT
        Subject: CN=69519d47-804a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:4a:40:0f:17:1f:f7:94:ab:fd:fd:a1:7d:
                    d9:87:b5:f4:0a:a8:63:ab:d4:47:9d:50:6a:24:f1:
                    ac:1a:f5:e8:7e:0f:61:1c:da:69:df:64:41:5b:71:
                    fa:b7:4b:dd:59:15:fe:5c:16:d2:49:d0:33:9c:d9:
                    2e:53:64:93:9a:66:2f:5f:ff:3a:0d:89:5c:a9:ab:
                    91:f3:b2:23:7f:5c:8f:5f:b8:65:ae:db:22:7d:5d:
                    6a:e2:1b:84:f6:97:55:8a:63:8a:03:d8:29:29:9b:
                    27:d8:a2:46:ac:f8:cc:7d:39:1a:0d:5f:0d:08:cd:
                    52:9a:2d:29:13:07:06:31:8e:e3:82:e6:9f:fc:01:
                    0a:2b:0f:d0:d3:76:46:e2:a7:0b:69:9b:2e:9e:96:
                    2e:53:8a:e0:51:a2:f2:92:f1:60:a3:c8:50:a8:4b:
                    7e:28:db:7f:0d:88:71:63:dd:5c:a0:35:c9:b4:f9:
                    1c:6c:62:bd:a2:dc:76:10:6e:ab:21:d4:6c:70:c4:
                    b5:2b:e2:40:be:dc:01:49:ec:5a:b3:a0:eb:9a:50:
                    71:2c:c6:f2:14:7a:06:db:35:91:9c:f9:76:e3:45:
                    15:61:7d:c3:d3:14:79:f5:80:15:76:17:3b:48:57:
                    e8:a1:d0:ee:5f:c9:ee:a9:46:0c:b7:7c:55:1b:2f:
                    65:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AF:49:74:28:B3:D7:21:6B:34:C8:CE:E2:BA:6D:34:41:D7:E3:C7
            X509v3 Authority Key Identifier:
                keyid:DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:a4:de:5b:4a:36:27:48:22:06:54:88:f8:40:93:63:01:
         56:a3:61:fc:05:40:e9:a5:7d:6a:1a:5e:60:fb:12:32:1d:b6:
         99:bb:40:b8:a7:d5:03:00:09:bc:31:b7:57:1d:13:0c:89:aa:
         df:78:1b:d6:8a:19:7d:43:b8:0a:85:d7:f1:73:71:a3:28:33:
         cc:82:c8:9c:4d:ef:61:b2:a3:b3:9c:26:e0:39:85:33:c2:8f:
         4a:69:4d:81:5a:37:e6:c4:b4:51:56:45:42:4a:82:bd:29:03:
         2a:84:e3:52:7e:79:79:5a:5e:d0:d0:42:ce:ce:41:13:fc:97:
         0d:c9:6b:a2:4e:08:fa:c1:51:45:c7:4d:92:25:fc:33:b8:cb:
         10:d4:86:7f:9e:71:76:18:40:39:0d:ed:c6:64:88:4b:06:0b:
         63:f5:a5:3b:4b:b1:57:81:77:a3:87:01:bd:80:7a:85:33:49:
         1b:58:8f:c4:c0:3c:e4:35:1b:94:3c:e6:2c:06:38:e5:6c:db:
         a0:23:7a:23:05:10:b8:7b:b1:b7:05:e1:1d:0f:25:22:c1:13:
         16:d9:a5:37:df:fe:9c:ab:c1:ab:02:f7:e2:74:f7:60:b7:db:
         28:a3:10:99:d3:25:57:90:0f:61:9a:18:91:4f:b5:6f:4b:54:
         93:ef:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 07:06:50 2025 by rpki-client