This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
File:                     exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json)
Hash identifier:          8eseIO9uve62Ngyq3M8MFwgkMb31hfKO7HHhAV+Pj1A=
Subject key identifier:   16:F5:A6:D5:98:D3:6D:B8:26:B5:1B:72:8C:DA:E6:E8:D0:FE:8E:16
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Certificate issuer:       /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
Manifest number:          024E
Signing time:             Fri 05 Dec 2025 00:05:11 +0000
Manifest this update:     Fri 05 Dec 2025 00:05:10 +0000
Manifest next update:     Fri 12 Dec 2025 00:05:10 +0000
Files and hashes:         1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: g5AcP9eRDZ+x1bzUALxhwrGK31JMKKlXxTM1OPkpAXk=)
                          2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: G6Wgfmuf7isN39qtMPKHSSoxC3J+volHlymr2bVvLnQ=)
                          3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: uCYT4lQMur/tG8/It9xxnzgoilgSXb5cLxgwmOVEMs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
                          rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
        Validity
            Not Before: Dec  5 00:05:10 2025 GMT
            Not After : Dec 12 00:05:10 2025 GMT
        Subject: CN=693221b6-127b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:38:94:69:4c:61:9b:4a:4a:61:fd:8f:b4:09:
                    cf:c4:65:5a:50:f7:d8:18:6e:18:ea:1e:14:6c:02:
                    6c:71:85:01:11:86:1e:e7:6d:ee:0a:25:cd:6c:ba:
                    05:e7:c8:11:1c:1d:08:52:eb:41:19:cb:76:cf:72:
                    f1:17:63:0c:f1:af:38:88:19:ad:8c:de:30:13:9b:
                    54:d4:6b:45:08:31:3e:13:48:43:a3:a1:e3:01:82:
                    a4:c0:ae:70:1d:03:37:bc:25:a6:ea:77:a1:63:40:
                    51:43:9d:89:c5:a6:4f:4d:48:32:58:59:7e:43:1b:
                    ad:ae:2a:a3:96:f6:60:8c:31:21:cc:23:dd:81:6a:
                    66:eb:ee:28:08:01:5b:d4:35:7b:c3:4d:2c:a9:9e:
                    b3:b7:d0:11:00:64:76:ef:ef:41:a5:43:b3:4b:20:
                    26:04:72:b4:9a:f2:d4:05:8c:c8:c2:35:c1:81:1c:
                    29:91:35:e6:f5:13:ed:07:7a:27:35:58:79:fd:9f:
                    25:46:8c:68:e6:a3:f9:6f:1b:3e:06:a3:14:3b:82:
                    8a:78:e4:46:b8:11:9a:ef:fc:74:7d:90:73:12:1e:
                    a8:a3:66:27:8b:14:42:67:a5:08:83:ba:b0:10:27:
                    9f:b4:d4:cc:6b:62:58:49:b7:71:07:d8:26:6b:21:
                    7c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F5:A6:D5:98:D3:6D:B8:26:B5:1B:72:8C:DA:E6:E8:D0:FE:8E:16
            X509v3 Authority Key Identifier:
                keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b3:46:50:c1:16:ce:6c:9e:14:6b:63:71:ad:92:36:c1:e7:
         3d:b4:3a:34:ca:50:b1:8d:6f:73:9c:12:79:0b:da:0a:e7:99:
         e8:a4:2b:80:4e:70:0f:37:f3:a2:ed:d0:f1:fe:4a:5f:25:34:
         6a:9a:62:11:63:90:9a:49:4a:2e:d0:f4:96:12:8d:0c:7d:42:
         b4:f3:e0:99:b6:6a:0c:98:b2:41:91:00:f0:d7:13:b5:8e:c2:
         85:39:cc:f0:46:08:8d:a7:6a:c4:5c:0b:f5:53:81:a4:a2:0e:
         c0:65:76:38:8c:d2:41:34:80:68:71:31:bc:4b:43:76:43:8f:
         c8:a8:8d:98:15:c3:bf:b2:6a:c7:cf:53:b4:cd:b3:26:72:c9:
         03:54:11:97:64:0f:6e:a7:e7:74:59:ae:a5:e2:c4:95:56:21:
         a8:49:b3:f3:6e:77:a4:28:69:2b:dc:7e:b4:20:65:40:65:c4:
         a8:4c:52:2e:2b:a5:59:41:be:e9:09:0a:82:d2:84:ee:d3:17:
         16:e8:ae:c0:b6:ab:5e:3c:d7:15:ed:93:07:db:10:b4:39:3f:
         a2:5c:70:cb:2a:88:6e:5e:d2:46:dc:33:df:8c:af:32:a0:27:
         85:95:aa:ec:31:fb:e4:a7:c3:d8:31:ac:17:87:9d:49:99:00:
         7d:e2:a7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:08:07 2025 by rpki-client