This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
File:                     DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft (raw, json)
Hash identifier:          +tZabMG0Qg1H5Ar58kDeudBcFWrYixZ3h28nKofADE8=
Subject key identifier:   C5:64:92:32:E1:93:9D:47:8F:00:B2:DA:69:98:9E:E9:02:B5:2D:74
Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E
Certificate issuer:       /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E
Certificate serial:       0A60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
Manifest number:          0A57
Signing time:             Sat 06 Dec 2025 18:54:27 +0000
Manifest this update:     Sat 06 Dec 2025 18:54:26 +0000
Manifest next update:     Sat 13 Dec 2025 18:54:26 +0000
Files and hashes:         1: DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl (hash: ZscsHDJaYzOLFALc3rrEgOoRQLDkUx7wMZPRogsbkH0=)
                          2: A42489D8799211EAA230E17FC4F9AE02.roa (hash: tQlFLU0/QDy1JWm1WrQnSqEMBi5FKL1OgfRiRvzeWq4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl
                          rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2656 (0xa60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FE31, serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E
        Validity
            Not Before: Dec  6 18:54:26 2025 GMT
            Not After : Dec 13 18:54:26 2025 GMT
        Subject: CN=69347be2-4b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:f3:f6:a8:f5:62:e2:2e:48:79:65:55:f4:
                    9e:4c:1e:10:f7:ba:62:8b:26:8e:91:40:22:79:2c:
                    dd:cd:b0:b7:97:30:c4:52:4c:ba:62:df:21:80:4f:
                    f5:28:79:e9:6d:24:3c:4e:f8:4e:c8:b1:c9:31:4d:
                    41:34:73:14:f4:aa:25:20:ca:5b:85:5d:25:62:2c:
                    19:ec:2f:14:52:8b:a5:21:c7:af:be:4a:4e:e2:c8:
                    eb:71:ae:dd:7a:56:e4:df:fb:d0:66:b3:7b:2e:01:
                    50:64:36:b2:ae:29:fc:41:c7:21:e2:cd:40:9e:13:
                    d6:f4:e8:0b:e5:4c:33:c5:c7:f2:f8:66:0b:fe:42:
                    74:5e:69:36:61:2f:cb:21:1d:55:2e:c0:11:f1:ad:
                    43:7c:d3:33:69:cf:9b:2c:87:70:b6:65:96:66:40:
                    ca:75:9b:e5:12:ea:82:d2:84:6a:76:85:b2:af:10:
                    89:4c:57:3a:e8:4f:fe:f2:47:ca:73:8f:64:a4:84:
                    13:ec:d0:44:2a:66:11:43:f0:a0:2e:48:41:27:7d:
                    96:8d:50:a5:e0:d4:0d:dc:5e:a3:b5:ef:11:41:f0:
                    8c:4d:f2:4e:ca:d2:09:9a:8c:1d:d5:af:be:ce:ac:
                    e1:0c:e4:6c:24:5f:bf:8c:22:f6:2c:97:56:06:bb:
                    fd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:64:92:32:E1:93:9D:47:8F:00:B2:DA:69:98:9E:E9:02:B5:2D:74
            X509v3 Authority Key Identifier:
                keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f8:14:d8:fd:ef:32:9e:d5:29:0d:8d:90:db:d4:4a:41:cb:
         39:b4:3f:2f:32:9e:ba:2f:e6:58:33:51:69:c3:69:25:2e:4e:
         3a:17:99:78:ad:d4:b5:17:5f:a3:58:de:5c:b5:a5:11:fa:fa:
         73:11:02:38:13:84:11:be:9a:02:e1:a1:36:67:14:a5:3c:d8:
         e1:3e:37:d9:99:b4:ec:88:84:c9:59:55:32:f9:4b:b3:63:49:
         f6:aa:15:32:bd:a5:28:68:72:b3:dd:ad:33:1b:54:be:cf:16:
         30:a5:d5:42:a5:ca:82:0e:5a:32:ff:1a:f1:13:c6:54:82:62:
         f9:fc:78:e3:0f:53:92:bd:ce:d6:17:d8:4a:37:27:81:46:8a:
         8b:c2:a8:0e:8a:c2:a9:25:4c:e2:a3:d5:68:b7:ec:45:11:63:
         3c:27:dd:f1:58:c6:ef:5c:a2:4c:31:81:b0:96:9d:6f:cc:35:
         2f:96:87:06:9c:a9:6c:38:e0:7f:1e:b6:d9:b8:c6:19:41:51:
         b7:7a:30:a3:eb:b3:93:89:52:f2:82:50:89:be:f3:c7:ac:39:
         85:6c:5f:4f:24:a6:85:18:8e:4e:ab:8b:ec:95:00:1f:6d:25:
         17:88:21:07:1e:4b:13:80:c2:c0:01:a7:8f:6c:1f:d1:20:99:
         17:11:16:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:45 2025 by rpki-client