This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
File:                     M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json)
Hash identifier:          emkU457nLdPGABgp2vlqy9KZ2+fgVnagfkCtnvPpZYE=
Subject key identifier:   84:F3:1D:65:66:45:C4:C4:F1:01:2E:BB:C7:4E:BC:63:CA:61:B4:C0
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Certificate issuer:       /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial:       0167
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
Manifest number:          015B
Signing time:             Fri 05 Dec 2025 02:20:31 +0000
Manifest this update:     Fri 05 Dec 2025 02:20:31 +0000
Manifest next update:     Fri 12 Dec 2025 02:20:31 +0000
Files and hashes:         1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: TWWMTfKrBcCul3yAmPMY+I8l21EApEz0LxCu3j7ch5E=)
                          2: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: EhoFh5hj1fnJIAYm7dVoqkfeol8zF4Op7mwB2iCWpG0=)
                          3: 9D107CE43FD311F08A76B677C4F9AE02.roa (hash: M4xxwp5XL8JXkQpTNZQamOx/rEaiqoV0xB/oQh2Nk2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
                          rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
        Validity
            Not Before: Dec  5 02:20:31 2025 GMT
            Not After : Dec 12 02:20:31 2025 GMT
        Subject: CN=6932416f-0f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:f8:38:bd:77:5c:1f:9e:c7:66:8f:3b:2c:
                    68:39:aa:41:84:26:3d:f6:20:f3:ec:0e:ad:c1:c8:
                    f5:c4:68:9c:39:f3:28:5c:c7:a1:99:fa:e2:29:da:
                    2d:14:c9:6f:fb:95:d3:9d:bc:34:43:b2:08:77:db:
                    ed:fa:1f:e2:b7:94:b7:fc:24:71:d4:f7:ff:20:5e:
                    f5:d6:52:fa:ce:96:bf:f3:05:50:93:e8:ac:42:52:
                    a1:08:61:cb:c0:cb:43:b4:4a:06:39:62:0e:a5:5b:
                    f0:c4:46:4b:9a:3e:89:1d:43:a0:20:97:c7:39:5a:
                    ef:5b:41:e9:c7:8b:66:67:02:be:36:79:80:eb:40:
                    1d:ef:17:95:57:a8:5b:99:7f:ef:08:0a:29:2b:6b:
                    67:7a:a1:b2:71:9b:95:72:3b:ac:45:9e:9a:75:b5:
                    7c:ea:d6:13:9b:6c:25:cb:b4:c5:3e:0c:a6:b2:c6:
                    d0:c8:ec:7b:5d:c5:c9:48:f8:cb:8c:e8:0f:29:86:
                    24:de:54:a9:a3:87:18:aa:65:1e:8b:99:3b:a9:7f:
                    55:59:bd:1f:7e:c5:38:d1:ea:3c:5f:8b:97:9e:aa:
                    7d:c5:ea:6b:b4:58:ab:91:72:72:92:be:c4:e1:0d:
                    87:9b:7b:c1:1c:34:60:47:b6:54:e6:ba:b6:56:00:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F3:1D:65:66:45:C4:C4:F1:01:2E:BB:C7:4E:BC:63:CA:61:B4:C0
            X509v3 Authority Key Identifier:
                keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:26:46:6b:cc:65:cf:62:a5:e3:ba:14:a5:60:97:07:f0:3e:
         8a:54:36:03:79:4e:b2:c6:1d:54:08:28:33:51:c3:5c:45:b7:
         31:ad:62:d9:45:c1:6f:48:f6:e8:69:5e:2b:c8:e9:be:4a:71:
         c1:25:fb:bd:c7:8d:be:b1:a6:cc:b5:54:52:7c:69:f2:f0:0c:
         11:6a:3d:14:64:84:fc:71:01:4b:9d:d0:16:3b:5d:a0:3e:77:
         70:54:49:37:68:bb:2c:4c:d1:ac:2c:85:b6:0e:1b:7a:61:41:
         bf:36:d8:5c:b6:6a:25:2f:54:81:2c:71:ce:cb:78:6a:1c:28:
         45:f5:76:fe:63:ef:75:71:bd:52:95:96:9c:99:21:ba:f8:61:
         ec:f1:8a:ac:a4:86:92:16:2b:ed:b0:bb:93:f8:7a:81:97:7c:
         e6:1f:9a:07:48:28:6d:28:d6:ed:14:02:ef:da:a7:55:8a:c3:
         df:25:63:07:98:50:3f:9e:e2:fb:17:db:f2:c4:f5:a0:33:07:
         91:3a:b9:2c:c2:19:32:31:03:88:de:da:e7:22:c8:86:a3:00:
         0f:bc:a9:24:79:ed:5e:4f:bd:2a:a5:6a:fe:e5:96:ec:49:7a:
         70:74:fa:4f:13:42:14:b7:a0:3f:b4:cd:6d:5c:dd:cb:4e:dd:
         c2:20:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:30:20 2025 by rpki-client