This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
File:                     19cjt6SfGf_8n8cw1A9pUEjMCZk.mft (raw, json)
Hash identifier:          DyCv5Qcwuurr8xWifmVoPh1Y5QNffbhpjKBFDgJtpyA=
Subject key identifier:   64:D4:79:6A:9E:45:86:76:82:95:CD:FA:6B:B0:DB:3C:C2:3D:9A:F0
Authority key identifier: D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99
Certificate issuer:       /CN=A919C068/serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
Manifest number:          37
Signing time:             Fri 19 Dec 2025 06:28:15 +0000
Manifest this update:     Fri 19 Dec 2025 06:28:15 +0000
Manifest next update:     Fri 26 Dec 2025 06:28:15 +0000
Files and hashes:         1: 19cjt6SfGf_8n8cw1A9pUEjMCZk.crl (hash: kBN+XTzS2KDxpQMSRV0CQqRnoPKT/kce6UKLJdr8mQk=)
                          2: 751861108E2B11F0BFDA106EC4F9AE02.roa (hash: Pueo4Q2vOuMQZ4I9zO+98kEqu2uxXJRejgT+irrxbhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl
                          rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C068, serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
        Validity
            Not Before: Dec 19 06:28:15 2025 GMT
            Not After : Dec 26 06:28:15 2025 GMT
        Subject: CN=6944f07f-78f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:b6:17:3d:06:1a:51:f6:98:aa:e9:40:60:
                    3f:30:9e:51:93:19:63:a1:c9:33:01:a1:7f:33:e9:
                    24:c9:43:82:59:4c:f2:3f:09:93:22:be:27:9b:c0:
                    0a:a9:87:ab:c3:2c:5c:1b:57:37:33:26:b9:1c:59:
                    95:a1:12:bb:ca:e1:67:31:f7:38:09:c1:6a:42:4a:
                    ca:8f:81:62:75:ce:6e:58:46:3f:c5:7e:ae:63:a5:
                    48:57:4f:c4:ef:a4:3b:5e:f7:d2:94:78:66:28:1d:
                    7b:77:b9:22:54:8c:e3:b8:09:17:fb:5e:57:1b:82:
                    14:e7:9d:6d:f9:89:64:64:2e:bd:92:69:60:32:42:
                    97:9b:9e:d1:20:17:ab:2a:3b:ea:d5:32:58:49:97:
                    b4:f7:13:8b:c4:db:36:1e:a9:35:03:dc:8b:c3:88:
                    ed:6c:b0:0c:8c:4c:86:55:8d:43:03:ac:0e:9f:25:
                    5c:c1:36:99:24:c6:28:03:63:16:93:de:8c:f1:e9:
                    71:e7:93:c9:eb:f8:05:13:de:2b:44:28:db:bb:59:
                    1a:0b:34:bd:f7:fd:ff:5b:75:9b:7c:b6:c4:88:26:
                    10:56:a7:ca:f2:9d:21:63:9c:cb:7d:76:fd:89:50:
                    fd:f5:d8:25:b7:ba:c4:5e:0f:7b:8a:ec:0e:3f:7e:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D4:79:6A:9E:45:86:76:82:95:CD:FA:6B:B0:DB:3C:C2:3D:9A:F0
            X509v3 Authority Key Identifier:
                keyid:D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3a:5d:dc:ba:78:9f:6e:69:e9:df:ee:99:5e:15:0d:d0:a7:
         18:79:f0:db:09:28:db:ae:2c:b3:12:36:9a:da:9d:32:90:48:
         1b:2d:34:5f:f0:0d:d0:35:08:47:cd:e2:55:46:40:42:8b:a1:
         c2:19:ea:8d:10:8c:b8:4c:59:a1:1d:b0:3d:71:4b:18:b6:f8:
         74:f2:4b:f6:a1:cb:02:84:1a:fc:1c:a5:ca:6b:e8:ec:f0:69:
         5a:56:c9:ca:6a:8b:73:0c:ed:23:05:1a:28:8c:ac:52:19:09:
         e4:1c:44:ed:e7:ac:be:9f:90:96:38:4f:46:ee:c3:52:9e:fd:
         6a:f8:ae:f4:8d:af:f3:57:26:ed:3a:5c:d5:3a:58:f6:77:c4:
         09:af:6f:8e:ef:f4:5b:83:c9:f9:91:cd:fd:8e:8f:1d:96:e4:
         58:20:08:2a:21:a9:94:9e:12:67:db:4f:10:7c:8b:b6:62:8f:
         c0:78:81:3d:8b:96:8f:28:c0:4b:e3:67:f9:4e:6d:55:38:15:
         1d:c6:da:0f:ec:ac:4d:10:ca:cb:fc:a5:bd:dc:79:9e:b1:6e:
         fd:17:24:56:b0:d2:c0:b3:2d:d2:e9:83:23:32:87:47:66:08:
         b2:ed:f0:ba:63:01:26:cf:e9:fb:e6:16:f6:30:9a:cc:81:69:
         dc:64:c8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:09:01 2025 by rpki-client