This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
File:                     AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json)
Hash identifier:          aE+tubjfRYxglAykUP2uMH7bmVKCxGxFb2oRmbkFlAw=
Subject key identifier:   8B:02:80:28:9D:FD:C9:D5:20:6A:70:39:89:FB:C9:1E:2B:7A:4D:77
Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F
Certificate issuer:       /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F
Certificate serial:       10E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
Manifest number:          10DA
Signing time:             Sat 06 Dec 2025 16:47:36 +0000
Manifest this update:     Sat 06 Dec 2025 16:47:36 +0000
Manifest next update:     Sat 13 Dec 2025 16:47:36 +0000
Files and hashes:         1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: uXPHjpru7KICS5PGIBiMGp/AL3/1qG4KXcUcMG9TBhM=)
                          2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: 0SVk2cOfikrAvRDDJgb5TANBAXNNynzVUWZgXY+3hcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl
                          rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4322 (0x10e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912216A, serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F
        Validity
            Not Before: Dec  6 16:47:36 2025 GMT
            Not After : Dec 13 16:47:36 2025 GMT
        Subject: CN=69345e28-6e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:2c:de:c6:a9:90:c1:d4:09:04:e0:5f:cf:
                    22:c8:a5:c1:61:2c:8e:59:ef:f3:6d:5c:86:61:24:
                    e9:da:a2:d3:ed:40:ca:4e:9e:3a:65:ea:91:2b:d8:
                    ec:cb:7b:f1:5e:31:41:62:f8:15:53:d4:1d:f9:3e:
                    24:9e:43:5f:4d:b2:d3:d9:6b:c2:3c:b8:a4:91:12:
                    99:35:19:a4:19:57:02:60:ab:af:3a:00:b2:82:4c:
                    8a:92:a9:69:a9:0e:cd:23:64:c1:02:45:8c:10:eb:
                    60:ed:33:c3:af:d5:3a:d8:62:8a:5d:93:6b:02:b4:
                    33:d5:a3:08:f6:49:cd:2c:d9:0c:43:34:79:0a:a4:
                    7b:28:27:6e:11:63:a2:01:ec:6d:d6:e8:18:e7:9a:
                    6d:41:71:45:92:3b:13:bf:9e:76:a3:ea:6f:c1:1c:
                    cf:cf:46:e2:73:68:a9:0c:49:40:7e:df:51:f1:dc:
                    3b:f4:79:73:1a:67:2b:53:47:38:37:d7:18:87:cb:
                    ef:5f:11:44:12:26:49:c6:fb:bb:09:b5:df:a5:a7:
                    00:d0:c2:9b:d0:d1:3e:47:d5:8a:ca:6c:c5:28:2d:
                    04:27:e0:99:f6:bb:4f:e5:9c:a8:44:6d:38:d5:bf:
                    46:1d:3b:ee:f8:25:c0:a9:e1:c2:d3:4c:89:b8:3e:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:02:80:28:9D:FD:C9:D5:20:6A:70:39:89:FB:C9:1E:2B:7A:4D:77
            X509v3 Authority Key Identifier:
                keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8f:e7:11:b0:a2:30:4d:b4:22:16:05:70:20:87:f4:f5:72:
         33:b5:bc:e8:19:71:a2:01:81:2e:cc:85:80:7c:37:44:62:81:
         3d:f2:03:8a:e5:2d:18:26:11:91:ff:3a:66:24:8c:24:0a:0b:
         31:3c:08:63:62:38:3b:84:2c:aa:de:2d:e7:52:41:98:5d:c6:
         69:e7:a6:6b:88:c5:27:55:70:ac:14:e0:f3:28:06:c4:96:49:
         22:0c:ae:41:6c:5b:a4:7e:6a:3e:d5:69:03:7d:8c:84:d4:fd:
         1a:c1:f6:c5:0f:52:ac:9c:b2:92:7e:91:cb:62:68:fa:fa:b4:
         51:85:6f:a5:b3:58:bb:7c:34:44:8c:1a:d2:3f:47:4c:6e:ac:
         47:60:99:0f:ae:eb:78:14:b1:0c:dc:95:b6:fa:cd:55:99:1f:
         ec:e4:bf:17:aa:38:7e:5e:89:b5:0a:dc:a0:9c:d6:fa:61:27:
         bf:a8:42:a9:22:0b:8e:c7:1b:c1:38:d3:9b:cd:52:ca:88:ae:
         3c:27:13:0b:0b:87:82:5c:ee:b7:a0:6f:38:55:a5:cd:15:b7:
         65:b0:70:ca:61:82:3d:7b:b4:34:97:d0:ed:15:13:7e:6f:d3:
         35:46:75:1b:e0:30:a3:6e:56:4c:67:04:a4:4a:18:db:9d:8b:
         fd:53:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:12:50 2025 by rpki-client