This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
File:                     DmJr6z1CBZMzO_tMhYMHqJnqfco.mft (raw, json)
Hash identifier:          3GDthTs4kyElKeoiKiArSqxv2cfhvDyXxsa2+lL9Pso=
Subject key identifier:   4D:F3:E2:9E:19:7F:0D:52:6B:99:A1:E2:FC:A7:1E:15:25:81:A1:31
Authority key identifier: 0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA
Certificate issuer:       /CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
Manifest number:          014F
Signing time:             Fri 05 Dec 2025 02:20:34 +0000
Manifest this update:     Fri 05 Dec 2025 02:20:33 +0000
Manifest next update:     Fri 12 Dec 2025 02:20:33 +0000
Files and hashes:         1: DmJr6z1CBZMzO_tMhYMHqJnqfco.crl (hash: E8OgT3MymfItfOwKT+Z/S8LXuMmDf/gctMzQwQvGGlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl
                          rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912981B, serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA
        Validity
            Not Before: Dec  5 02:20:33 2025 GMT
            Not After : Dec 12 02:20:33 2025 GMT
        Subject: CN=69324172-8eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:34:da:d1:f8:68:01:0b:a2:52:60:d3:4e:
                    b4:36:b0:2f:0f:1a:dd:85:01:51:96:a9:40:8e:19:
                    8e:aa:39:76:30:70:87:90:3d:d5:65:1b:dc:9d:7f:
                    19:f1:43:34:4e:0b:1e:2f:86:6f:38:f1:cf:67:b6:
                    6d:74:96:78:56:24:3f:d6:50:50:7b:80:fa:ed:0d:
                    2a:fd:c8:3b:43:72:6a:df:4a:ca:8c:cd:bf:2b:85:
                    4b:ff:51:fa:dc:d5:2f:23:77:b0:b6:64:91:22:55:
                    6f:e8:5e:8b:72:45:69:d0:a8:5f:cc:0b:67:db:84:
                    54:82:93:b7:7e:4e:0b:43:79:88:52:4b:0e:60:55:
                    62:c2:d6:09:ca:53:72:d8:a7:25:8f:ef:a6:7d:5d:
                    b1:95:54:ea:d9:30:28:2d:ce:3e:63:1a:1a:11:fd:
                    e2:ea:99:7b:41:a8:d8:3f:ba:2f:40:a8:c7:ce:6e:
                    72:4c:ad:fb:ae:86:97:81:81:d9:8d:b7:d7:ca:f3:
                    38:28:00:5e:97:0c:aa:2d:2f:46:6d:ef:f7:e6:86:
                    98:6f:a2:2f:99:6f:0e:16:a8:c4:fc:c9:5a:53:cb:
                    2a:46:d5:76:b5:5e:33:48:a3:17:14:5a:d1:05:33:
                    05:87:58:91:aa:2c:99:dc:24:1f:34:c1:bd:2b:c4:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F3:E2:9E:19:7F:0D:52:6B:99:A1:E2:FC:A7:1E:15:25:81:A1:31
            X509v3 Authority Key Identifier:
                keyid:0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b3:0b:c4:77:fe:4f:46:61:e5:7f:a8:a7:a0:3c:33:ce:55:
         50:8c:08:a2:ef:28:a1:4f:3d:1b:5b:c5:3d:8e:9f:44:f9:1b:
         b7:7b:8c:9f:ed:45:c0:4b:47:08:2a:1e:f6:f9:0b:cf:2c:30:
         00:ec:a6:19:c9:cd:23:e9:93:d5:0f:4e:aa:b3:91:34:96:36:
         ce:c9:a6:02:fc:42:0b:43:a0:26:81:79:c8:89:3a:da:bb:52:
         39:cc:f8:2b:a1:4f:64:bd:a1:4f:d1:69:4c:74:fc:4e:27:a6:
         be:55:21:45:0d:55:6b:46:77:0e:45:76:f0:ef:c9:36:9e:0e:
         e8:5e:69:53:50:d0:17:76:6b:99:4b:a1:0b:7d:1e:65:d9:ab:
         ce:85:50:7f:a3:ae:23:f9:34:04:1a:8e:28:c3:66:5a:2f:65:
         df:79:b8:69:44:fa:1e:06:ac:e3:0c:68:9f:90:39:94:36:12:
         55:af:ae:5f:b4:01:3d:54:7a:4e:29:da:c7:34:85:37:ed:33:
         b0:80:fd:9e:15:5b:ff:25:fb:df:30:d3:cb:60:b8:65:ee:73:
         7b:b7:7e:6a:70:53:e4:5f:dd:04:e0:5d:00:90:20:c8:da:92:
         36:e4:4a:3a:fe:fc:95:ba:23:64:05:80:96:d5:57:dd:42:0f:
         87:76:a4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:42:45 2025 by rpki-client