This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
File:                     MjQC2m9aUgggITsu3L_s7DrJEEU.mft (raw, json)
Hash identifier:          NeipEWgRF6R5uIK1IKgIu6mBWHUJEC9LGBh9QtSqBtI=
Subject key identifier:   C2:7E:90:BA:AB:AB:F8:F1:3A:52:DE:7C:1A:E2:6C:2C:3F:34:1E:85
Authority key identifier: 32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45
Certificate issuer:       /CN=A913059E/serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
Manifest number:          0B
Signing time:             Fri 05 Dec 2025 04:17:03 +0000
Manifest this update:     Fri 05 Dec 2025 04:17:03 +0000
Manifest next update:     Fri 12 Dec 2025 04:17:02 +0000
Files and hashes:         1: MjQC2m9aUgggITsu3L_s7DrJEEU.crl (hash: nUQtBqB3iRrV9VcjxGG/7eiv0cnlxrPJNJ3dr9YFEt4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
        Validity
            Not Before: Dec  5 04:17:03 2025 GMT
            Not After : Dec 12 04:17:02 2025 GMT
        Subject: CN=69325cbf-9a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8a:28:fa:17:d2:19:54:9b:1b:f0:09:72:e7:
                    b5:8e:cc:22:5f:b4:17:35:a5:12:43:59:87:cd:2c:
                    08:cf:f3:22:b2:6d:da:40:05:cf:f3:22:7f:fe:62:
                    37:a9:b3:15:79:8f:4f:fe:cd:4d:5f:7e:00:60:78:
                    7a:51:22:fc:c7:e8:77:20:98:6b:d1:7a:6a:06:f5:
                    54:7f:d9:4e:06:2d:1d:3c:b4:b3:25:7d:1b:d1:7d:
                    fa:16:22:2a:1d:5f:13:b7:4e:f1:04:6b:d7:86:3a:
                    c9:ad:0c:f9:ba:1e:4d:ff:9a:9e:08:f1:9e:fc:40:
                    f7:fc:1a:70:6c:d0:6a:cc:60:94:f5:a9:7d:e1:62:
                    c3:6a:75:e6:ca:30:5f:7d:5d:5e:9a:e0:eb:aa:d4:
                    71:16:06:1a:cd:1e:06:b3:38:e9:8f:ea:bf:5d:06:
                    ca:72:87:01:ff:41:5f:6f:e9:4a:a4:52:a0:83:20:
                    68:28:87:e2:8a:b9:0f:c8:38:f7:f7:26:52:de:9c:
                    b6:91:4a:2e:8d:4d:2d:dc:29:e1:dc:97:d2:75:d7:
                    d7:c8:01:bf:9f:66:f8:b9:e3:ea:50:58:b0:7f:a6:
                    37:42:bb:39:52:e5:00:4b:35:dd:07:5f:0a:1a:6d:
                    5c:77:bc:89:a6:77:84:e1:04:94:a2:ed:aa:91:08:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7E:90:BA:AB:AB:F8:F1:3A:52:DE:7C:1A:E2:6C:2C:3F:34:1E:85
            X509v3 Authority Key Identifier:
                keyid:32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:07:9a:a8:03:ce:8d:e0:b4:de:d3:d6:49:99:eb:98:4c:e3:
         7a:47:73:e4:51:78:8f:f4:e2:bb:be:c5:a8:9b:5a:a2:a8:88:
         ed:3c:a7:4b:70:67:f2:fd:46:c8:0f:01:46:ae:9c:cc:0e:17:
         93:37:67:df:f1:d1:ad:34:1b:87:94:cf:35:7d:e9:e1:db:a0:
         d2:96:3b:12:1e:db:6e:70:c4:a9:4c:2b:9b:de:47:ad:38:b3:
         41:5e:5f:d9:64:80:18:f8:2f:8b:5d:9e:fd:95:cd:32:16:05:
         4a:3b:1c:27:cb:14:1a:89:6e:1b:ed:61:e5:17:02:eb:b3:de:
         8c:10:7b:13:27:09:be:82:4d:7e:67:a1:a7:80:d5:18:cf:2c:
         89:70:a9:d4:d5:63:2a:db:b0:27:b6:b7:3a:20:dd:1b:c7:7d:
         c6:bb:77:9e:41:2a:61:7e:bb:69:96:6d:82:f7:98:c8:ae:77:
         b4:6b:a0:88:21:c1:1e:02:7b:47:6f:75:cb:ba:60:6a:dc:b4:
         d6:f9:a8:9d:78:3e:e6:3d:ef:80:cf:9a:81:5d:f8:55:d6:99:
         f5:f2:a6:67:c9:dc:be:23:74:bc:95:ee:5b:b9:cd:2b:7a:dd:
         02:52:b9:f4:ee:aa:34:e8:a3:a2:50:dc:e5:32:cc:66:0c:91:
         04:d3:d6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:50:24 2025 by rpki-client