This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
File:                     c0XTOFGViQaITYcWQKS-0shG0U4.mft (raw, json)
Hash identifier:          sA5XXL3b+FmUKIZIcfJnyilxPMy49dYF3915DlHJiJA=
Subject key identifier:   D0:7B:9E:E7:B3:AB:73:6D:FD:61:49:C2:6F:E3:03:33:FA:EA:04:C4
Authority key identifier: 73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E
Certificate issuer:       /CN=A912F3B6/serialNumber=7345D33851958906884D871640A4BED2C846D14E
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
Manifest number:          0100
Signing time:             Fri 05 Dec 2025 03:09:23 +0000
Manifest this update:     Fri 05 Dec 2025 03:09:22 +0000
Manifest next update:     Fri 12 Dec 2025 03:09:22 +0000
Files and hashes:         1: c0XTOFGViQaITYcWQKS-0shG0U4.crl (hash: 6hIHwn8/0HQFg05vt+axXutP793WwMGUdajUjFjcDQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl
                          rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F3B6, serialNumber=7345D33851958906884D871640A4BED2C846D14E
        Validity
            Not Before: Dec  5 03:09:22 2025 GMT
            Not After : Dec 12 03:09:22 2025 GMT
        Subject: CN=69324ce2-e1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:62:cd:ef:c0:85:ac:a2:86:01:03:1e:a4:
                    40:1a:10:d0:ec:20:6c:0f:e8:05:ad:8b:96:3c:de:
                    f1:0a:c5:3f:b6:37:0a:ee:83:f6:88:a4:76:ab:b8:
                    a2:c3:c4:80:ed:d5:c5:42:68:f9:9b:49:2a:72:90:
                    0a:7f:92:38:de:82:ac:40:4e:54:3e:d8:54:66:33:
                    7e:17:5f:ae:da:a0:1b:27:f2:c9:48:49:da:1f:38:
                    cd:19:e4:02:ff:66:f2:e3:49:4b:9f:8d:4e:87:b0:
                    22:6e:e6:f0:86:77:1a:e9:10:c7:71:1d:ac:26:fc:
                    ed:17:21:e6:b6:4d:69:6a:b5:20:4f:99:8d:a2:77:
                    87:dd:84:00:35:c7:d1:68:a7:27:0d:f2:37:7c:b0:
                    79:a9:32:6f:59:f6:f0:34:03:3b:80:84:43:fe:31:
                    54:94:f2:83:20:6e:86:b1:64:7d:49:03:2b:18:65:
                    5d:5f:e1:28:99:88:b8:b7:7c:16:2d:ba:fd:5b:7f:
                    71:5f:f7:9e:dc:b0:b7:bd:e6:2f:49:ed:7e:80:01:
                    1d:c8:e5:49:7b:22:4f:c8:0f:f6:29:44:df:cf:8b:
                    85:d2:64:5f:ba:d1:18:c7:26:60:f5:97:bd:49:8e:
                    99:a2:85:c4:e7:d3:5e:e7:79:6a:ce:d0:f2:94:22:
                    47:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:9E:E7:B3:AB:73:6D:FD:61:49:C2:6F:E3:03:33:FA:EA:04:C4
            X509v3 Authority Key Identifier:
                keyid:73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bd:ed:fb:d6:c3:26:93:5b:7f:7d:2f:67:53:d5:9d:db:69:
         a2:43:ac:b3:50:cb:e6:ed:fe:32:71:d7:94:dc:ed:1c:78:f7:
         47:e1:5a:6f:6e:bf:30:41:87:0e:50:a9:cf:24:08:25:44:ce:
         2f:62:6f:13:14:bc:bb:1a:e9:0e:5f:32:51:cd:51:03:b7:0b:
         bb:aa:bf:cd:64:43:44:a0:c4:da:93:2d:7f:f4:39:9d:7e:ee:
         f6:cb:e8:79:3b:d5:52:82:0d:c0:d1:55:de:55:59:ae:2e:69:
         cc:fc:07:3b:dd:75:90:a3:d1:e7:00:28:99:16:97:71:2a:d1:
         c0:10:5e:7f:d7:71:6a:89:34:f4:3d:af:c5:c4:47:2c:03:5b:
         46:66:f7:33:27:39:44:6a:a6:d5:aa:35:dc:fa:1a:3c:99:05:
         86:56:8a:e8:f0:ac:cb:af:28:38:17:c3:17:41:ad:68:bb:a9:
         d6:7c:ae:cd:62:8e:17:dc:54:38:e9:45:ce:83:af:77:f1:35:
         17:c4:ac:84:b3:a7:e4:b4:3a:8d:a5:ad:15:89:92:42:75:85:
         a9:4e:54:e7:30:a7:8a:61:37:2b:c7:5c:72:e7:76:3f:fb:39:
         cc:61:49:45:18:02:28:c5:58:7c:8c:1f:7e:fd:ba:e3:27:47:
         0f:b8:c9:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkYzQjYxMTAvBgNVBAUTKDczNDVEMzM4NTE5NTg5MDY4ODREODcxNjQwQTRCRUQy
Qzg0NkQxNEUwHhcNMjUxMjA1MDMwOTIyWhcNMjUxMjEyMDMwOTIyWjAYMRYwFAYD
VQQDEw02OTMyNGNlMi1lMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArblize/AhayihgEDHqRAGhDQ7CBsD+gFrYuWPN7xCsU/tjcK7oP2iKR2q7ii
w8SA7dXFQmj5m0kqcpAKf5I43oKsQE5UPthUZjN+F1+u2qAbJ/LJSEnaHzjNGeQC
/2by40lLn41Oh7Aibubwhnca6RDHcR2sJvztFyHmtk1parUgT5mNoneH3YQANcfR
aKcnDfI3fLB5qTJvWfbwNAM7gIRD/jFUlPKDIG6GsWR9SQMrGGVdX+EomYi4t3wW
Lbr9W39xX/ee3LC3veYvSe1+gAEdyOVJeyJPyA/2KUTfz4uF0mRfutEYxyZg9Ze9
SY6ZooXE59Ne53lqztDylCJH2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNB7nuez
q3Nt/WFJwm/jAzP66gTEMB8GA1UdIwQYMBaAFHNF0zhRlYkGiE2HFkCkvtLIRtFO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81OUM0QUQ0QTQ4
QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlRYUlUWWNXUUtTLTBzaEcw
VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2MwWFRPRkdWaVFhSVRZY1dRS1MtMHNoRzBVNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjNCNi81OUM0QUQ0QTQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlR
YUlUWWNXUUtTLTBzaEcwVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYve371sMmk1t/fS9nU9Wd22miQ6yzUMvm7f4ycdeU3O0cePdH4Vpv
br8wQYcOUKnPJAglRM4vYm8TFLy7GukOXzJRzVEDtwu7qr/NZENEoMTaky1/9Dmd
fu72y+h5O9VSgg3A0VXeVVmuLmnM/Ac73XWQo9HnACiZFpdxKtHAEF5/13FqiTT0
Pa/FxEcsA1tGZvczJzlEaqbVqjXc+ho8mQWGVoro8KzLryg4F8MXQa1ou6nWfK7N
Yo4X3FQ46UXOg6938TUXxKyEs6fktDqNpa0ViZJCdYWpTlTnMKeKYTcrx1xy53Y/
+znMYUlFGAIoxVh8jB9+/brjJ0cPuMmb
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:26 2025 by rpki-client