This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
File:                     P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json)
Hash identifier:          ulNILMNr4IJ6E60UdzC14f7c3LC+uxxQDSBcfesoVCk=
Subject key identifier:   0D:00:F2:CD:27:00:DB:FC:F9:E8:B9:6A:1F:17:16:A3:1D:E2:2C:D3
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Certificate issuer:       /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial:       15A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
Manifest number:          1585
Signing time:             Wed 31 Dec 2025 16:34:46 +0000
Manifest this update:     Wed 31 Dec 2025 16:34:46 +0000
Manifest next update:     Wed 07 Jan 2026 16:34:46 +0000
Files and hashes:         1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: HMLO/bx+kApTcYohMbl99yqwlx+PiLcqDoxgd+mUYwM=)
                          2: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=)
                          3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=)
                          4: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
                          rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 16:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5536 (0x15a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
        Validity
            Not Before: Dec 31 16:34:46 2025 GMT
            Not After : Jan  7 16:34:46 2026 GMT
        Subject: CN=695550a6-7375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:e5:53:a8:7e:e7:fc:45:7b:56:b0:b2:84:
                    8c:75:49:0b:df:aa:2a:51:33:4c:c3:c2:91:22:35:
                    79:59:64:b6:8b:0a:1a:af:6b:a7:fe:d0:a4:06:06:
                    c8:80:8a:8c:60:30:ad:a3:a1:b2:b1:f5:b0:40:28:
                    e1:f9:84:8c:b1:ba:fb:a9:4f:d0:c6:51:fe:24:b7:
                    81:1e:07:17:80:83:b7:50:00:50:d9:f3:76:65:db:
                    d1:35:a7:04:8b:f1:7d:22:f7:10:2d:c0:4a:7b:5a:
                    b0:dd:d4:83:d3:51:7c:41:44:ec:eb:19:58:ef:4d:
                    8e:9e:16:8d:86:b0:e6:2a:df:8d:5b:d8:cd:fc:bb:
                    5c:a2:e1:20:cb:b8:2b:15:ef:c6:34:b4:aa:ad:61:
                    af:ef:5b:69:1d:80:86:cc:66:6a:21:74:52:93:c7:
                    59:0f:39:f4:66:30:7c:12:88:00:c9:9b:9b:0e:e3:
                    17:ba:c1:b1:54:a9:db:34:7e:3d:59:4c:a8:40:9b:
                    de:5b:71:a6:5f:b8:30:0e:49:84:7b:1c:7e:88:5e:
                    f9:e6:39:ef:73:73:f9:33:66:43:14:2c:41:53:55:
                    94:2d:09:c4:21:18:d7:10:dd:de:d2:33:18:60:55:
                    3a:c9:c9:a9:9f:ce:21:f2:09:4e:1d:15:0e:3c:17:
                    36:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:00:F2:CD:27:00:DB:FC:F9:E8:B9:6A:1F:17:16:A3:1D:E2:2C:D3
            X509v3 Authority Key Identifier:
                keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d9:ee:e3:d7:db:12:2a:d2:be:11:9d:05:40:31:88:51:2e:
         8e:2d:73:d3:c2:3a:b6:90:72:0d:3f:40:3e:e4:5b:48:9b:a7:
         fa:c0:92:23:6e:3b:59:5f:f6:af:56:62:49:80:ac:94:77:38:
         08:4a:72:ab:f4:1a:fe:2a:0b:61:29:57:b2:b9:1f:d2:34:32:
         1f:40:13:e8:29:d3:2b:e8:4a:97:79:0a:ef:6f:ff:fc:8e:ec:
         17:5f:86:a4:6e:63:27:41:93:8d:a3:b8:55:c0:42:43:ac:ed:
         cc:7a:1b:02:bc:ad:fd:dc:47:d8:0a:27:b6:e3:5b:70:b2:55:
         fa:60:3c:5a:6f:6a:c1:d8:01:9f:8a:65:b9:23:36:54:24:a8:
         ae:d8:58:ea:8d:93:08:0e:63:13:77:6b:f4:c3:66:a4:11:62:
         1a:19:4f:df:fa:22:1f:9e:59:46:a9:75:13:33:3c:cf:fe:18:
         a7:10:d9:0e:fe:50:b6:47:9f:04:09:a4:e3:94:2a:e9:3b:60:
         2c:3a:2e:40:74:e4:af:4c:88:d9:5a:a1:85:9a:96:5f:52:28:
         ad:fd:06:6f:7c:99:9a:89:ab:59:65:13:f4:ef:a5:10:c1:a8:
         8b:48:0a:27:58:ac:23:15:98:55:3f:27:0a:df:c7:76:ba:38:
         64:79:f7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 19:35:25 2026 by rpki-client