This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
File:                     R-8IU6LX3qJJt8P694FpyPjbx-k.mft (raw, json)
Hash identifier:          2UisQZLHDa4UUWGjl9vL//o/ieskKyc2dPlwXSGQsKs=
Subject key identifier:   31:53:A3:38:BF:88:B3:EF:2D:E4:88:1D:31:5C:72:51:77:AE:48:85
Authority key identifier: 47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9
Certificate issuer:       /CN=A912946F/serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
Manifest number:          1A
Signing time:             Fri 05 Dec 2025 05:38:26 +0000
Manifest this update:     Fri 05 Dec 2025 05:38:26 +0000
Manifest next update:     Fri 12 Dec 2025 05:38:26 +0000
Files and hashes:         1: R-8IU6LX3qJJt8P694FpyPjbx-k.crl (hash: ZOv8m9wzTPVZtvkSm5yyzNM24hSS9EbjUHq3cw5nYwE=)
                          2: 6F324D3CAB2811F08D96D563C4F9AE02.roa (hash: 88QIr/+6SV1XGmbtRjlIpjfP33+g+SedUIOc4mh9AFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl
                          rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912946F, serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9
        Validity
            Not Before: Dec  5 05:38:26 2025 GMT
            Not After : Dec 12 05:38:26 2025 GMT
        Subject: CN=69326fd2-4ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:92:66:7c:e9:0f:fa:c7:ac:a1:b8:ae:ff:
                    95:6d:3b:9c:4e:3a:de:14:d6:9b:c0:83:1f:0a:cc:
                    08:84:23:d0:ab:1a:76:c7:3b:52:10:37:f5:57:a6:
                    2e:dc:e1:1a:1f:02:2b:46:6c:01:38:ee:a4:63:ba:
                    9e:1c:3b:3f:be:30:b9:7a:72:9c:7c:41:8f:72:d5:
                    98:4a:c8:9b:a8:ab:93:79:eb:47:95:49:ae:0a:78:
                    55:ea:8e:2b:c5:20:2c:89:1c:0c:6f:6a:d3:04:1a:
                    61:20:71:9c:b6:34:e3:33:ad:af:2e:b9:a1:60:a7:
                    d3:2a:74:67:1d:34:df:e7:82:24:5f:71:75:00:37:
                    ff:c8:68:27:fa:69:7b:84:9e:ba:75:75:35:f6:ed:
                    bc:6f:aa:5e:2f:17:d3:82:94:09:ac:35:12:b4:62:
                    32:9b:12:2f:90:e2:82:03:1f:41:ca:54:0b:4a:86:
                    1f:fd:2c:6a:7e:be:39:09:1e:d4:ed:69:3e:62:cd:
                    47:c6:8f:db:de:0e:bc:a4:2b:da:f3:5a:0c:a2:6a:
                    e5:2f:18:2c:5c:f0:5b:39:2d:e7:6e:20:59:5a:07:
                    22:66:6d:08:42:27:8d:13:dc:a7:67:31:16:d2:fc:
                    d9:67:a9:30:0a:6a:3d:b2:42:26:14:7f:b6:41:30:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:53:A3:38:BF:88:B3:EF:2D:E4:88:1D:31:5C:72:51:77:AE:48:85
            X509v3 Authority Key Identifier:
                keyid:47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0d:65:ad:c4:bb:1a:29:29:41:7c:4e:d1:f7:f1:60:cd:7c:
         4e:ce:2e:69:55:c8:dd:52:c5:13:5f:fb:e0:9c:27:66:30:6c:
         f3:7c:ef:6b:43:f1:1c:a5:03:eb:1e:44:a6:46:12:56:24:d2:
         0e:d1:c6:d7:41:fc:0a:8b:57:9e:2f:99:31:5a:9c:5e:cd:c6:
         dc:44:36:f7:5e:8c:f9:88:03:d0:1d:80:a8:e6:7b:b6:b4:7d:
         18:9f:12:a9:8c:8a:1c:31:6f:69:09:39:4f:28:ff:06:fc:e0:
         d0:25:77:bc:73:99:de:9b:5f:5e:7d:68:a8:81:4b:32:7e:4e:
         f1:8e:b2:f1:fc:76:42:ff:c9:31:40:60:26:04:05:47:b0:b9:
         73:bd:16:eb:9e:c4:98:aa:e5:58:8f:3d:7c:77:df:33:61:32:
         69:00:fe:c6:c3:c4:89:39:94:e2:e0:1a:7c:72:cb:15:4b:ee:
         11:27:ad:28:74:29:0c:7d:45:7d:14:ad:51:13:31:46:f4:ca:
         0a:99:78:b0:57:f0:83:d3:f3:a0:cb:d8:09:72:50:1c:85:cc:
         36:19:dd:71:e9:94:65:47:08:1f:e8:fd:1b:b4:88:6f:0f:c8:
         f1:24:87:f6:0b:b4:16:98:a8:42:35:7b:e8:3b:16:b0:3b:e4:
         98:d9:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:59 2025 by rpki-client