This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
File:                     XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json)
Hash identifier:          n0nQYMm64k+4EE7QDqrh5ns31ovYMjcKAXNGTGgGE5s=
Subject key identifier:   7A:57:2B:FB:B9:6D:03:DB:6B:F6:85:8C:0D:7B:23:27:D2:31:91:E7
Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC
Certificate issuer:       /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
Certificate serial:       02E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
Manifest number:          02DB
Signing time:             Thu 04 Dec 2025 23:42:40 +0000
Manifest this update:     Thu 04 Dec 2025 23:42:39 +0000
Manifest next update:     Thu 11 Dec 2025 23:42:39 +0000
Files and hashes:         1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: EFArUfd7KEYLafkRsA5SjycCBX4Luov9f9+h2rjf7Kk=)
                          2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: yP2d46I6eQAvhpe/ALVhIcW2d8YQgRGFzGAw4LWLaPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl
                          rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
        Validity
            Not Before: Dec  4 23:42:39 2025 GMT
            Not After : Dec 11 23:42:39 2025 GMT
        Subject: CN=69321c6f-72fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:41:aa:93:a4:18:0a:8a:f5:45:18:d9:25:1d:
                    94:c9:04:2a:52:cc:0e:19:bb:fb:7b:e7:a9:3a:5d:
                    50:12:16:a3:d9:f1:8c:6f:0c:8f:8c:71:a6:98:27:
                    76:cc:ef:8e:0b:7f:45:b8:f5:61:ae:1c:09:2e:12:
                    20:ca:e8:5c:0c:f6:7c:cb:4c:e5:a0:ae:8f:34:d3:
                    66:a1:76:8b:49:8d:c2:ed:81:7c:2b:0d:00:26:68:
                    7d:85:86:2e:f2:8f:18:28:fe:69:10:00:ca:09:71:
                    b2:7d:e7:9c:34:88:75:1c:c9:fa:e5:01:c1:97:f0:
                    47:1b:fa:09:95:f9:5e:2b:b4:4f:83:fa:44:f7:b7:
                    de:b7:da:2b:79:85:ed:23:c0:b2:27:96:57:5b:94:
                    50:1f:e3:10:c8:d4:b0:d1:84:82:b4:b1:bf:40:42:
                    7c:87:61:ff:42:99:b9:96:5c:42:06:7d:ac:bb:33:
                    43:f7:91:03:f3:ce:6b:b6:da:bb:6c:6b:5b:b2:e3:
                    48:57:25:73:14:54:24:9e:48:09:c9:14:a1:b2:72:
                    fa:de:39:10:73:a1:cc:e3:d1:14:a0:7a:95:87:84:
                    6c:b0:13:89:a4:55:af:83:98:ba:c6:7b:53:df:76:
                    ec:09:49:84:a8:4b:6b:6a:a2:48:27:3e:8b:4e:49:
                    75:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:57:2B:FB:B9:6D:03:DB:6B:F6:85:8C:0D:7B:23:27:D2:31:91:E7
            X509v3 Authority Key Identifier:
                keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9a:76:b6:0e:31:b4:75:2a:89:a4:1d:e8:af:ee:f4:4c:61:
         ed:df:b7:3a:93:a4:59:c1:8e:4f:ce:6c:d8:47:d0:3a:87:40:
         24:d8:99:a8:3e:7f:2d:36:35:3d:7e:59:82:d0:cc:cd:45:42:
         e1:67:33:2f:fb:11:c5:2d:8d:f6:cf:88:c6:ad:af:b7:05:35:
         42:20:d1:c7:cd:e2:a1:52:21:13:d3:e2:ec:11:4e:a0:d0:1d:
         d3:3d:b3:a1:ec:7a:55:d8:27:ac:d4:e7:c7:d0:2d:70:da:5a:
         9b:ed:b9:0f:b6:d5:72:76:45:e8:4b:27:12:a3:e3:31:f1:f3:
         8b:b0:58:cd:bf:9a:9d:12:9a:6b:64:b3:07:48:9f:93:44:6a:
         d6:90:c8:1d:26:4e:35:6e:25:c1:ad:e0:a0:f6:e0:35:17:1f:
         23:79:3d:53:24:92:48:66:9a:8e:64:b2:44:ba:ee:31:ac:26:
         bd:27:72:b7:a3:9d:94:75:89:f4:b2:72:99:8d:57:2c:75:0d:
         92:9b:ac:e0:a4:c3:14:ea:dd:c9:1f:6d:44:d5:c9:ff:f8:de:
         32:1e:5e:41:c1:24:16:4d:da:e5:f7:61:7c:ee:76:c5:88:36:
         4d:ce:e3:63:8f:59:ee:8c:d7:25:93:b7:91:c9:0c:6c:b3:87:
         21:88:c1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:12:43 2025 by rpki-client