This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File:                     xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier:          7AApaklY66zjUAxDIhE62AQf8ZMOq/UqKs+9Mg3LK00=
Subject key identifier:   42:30:22:B5:B2:4B:EC:6E:96:E7:67:08:44:5E:21:B8:97:2C:29:22
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number:          D1
Signing time:             Fri 05 Dec 2025 03:44:25 +0000
Manifest this update:     Fri 05 Dec 2025 03:44:24 +0000
Manifest next update:     Fri 12 Dec 2025 03:44:24 +0000
Files and hashes:         1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: OyBPjgH5+NxpwUZwNUhIxnJ+Z4MRYvXrA8MQJPNVCH4=)
                          2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ijUv0+puTZ+N4j9fhEKBY9wHAWPDCsnAi/IUGHnumK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: Dec  5 03:44:24 2025 GMT
            Not After : Dec 12 03:44:24 2025 GMT
        Subject: CN=69325518-45aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:a4:ef:43:bd:a3:4f:dc:d8:f7:1c:34:09:
                    32:3c:1a:87:be:ed:1c:23:90:a6:1d:ca:7b:06:90:
                    2f:fa:ee:c6:1e:54:9b:eb:2c:9d:9e:3f:52:4b:a7:
                    fc:79:d1:da:e5:fc:bd:4b:da:95:be:b2:d8:a4:0e:
                    29:14:a3:09:aa:57:19:74:39:ef:f1:48:c7:7c:02:
                    24:20:43:cc:6b:3f:f3:67:3b:57:cf:2a:01:b8:04:
                    de:14:00:9d:c6:3c:2e:35:ea:04:54:f1:35:a4:4f:
                    ba:eb:9a:cb:ec:ad:39:0e:3d:b9:bb:12:53:61:91:
                    22:6b:dd:44:30:06:26:30:16:af:2d:08:81:31:32:
                    f0:55:df:34:cf:88:db:e8:23:99:98:c8:7b:5e:12:
                    14:12:25:7b:ae:b9:2d:ac:c2:58:83:36:d6:08:b6:
                    87:59:d7:44:a2:56:c9:af:03:80:93:7f:20:f3:28:
                    fa:01:08:79:88:7b:4e:9a:c6:79:e6:84:62:fb:07:
                    e2:bb:a5:62:09:b0:95:3a:dc:d8:f1:03:28:79:2a:
                    74:3d:1e:c5:04:27:e9:03:d8:02:42:15:6a:c3:4a:
                    d1:0c:ec:0b:2c:ce:eb:b2:57:c9:f7:4d:55:2d:fd:
                    1a:d9:d0:36:e8:4f:7f:fb:b5:93:4c:de:64:24:8c:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:30:22:B5:B2:4B:EC:6E:96:E7:67:08:44:5E:21:B8:97:2C:29:22
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:08:05:2d:c6:0b:7a:7e:8a:1e:a1:51:d1:38:49:c2:33:a0:
         c8:ea:7b:59:53:f8:97:0c:6c:ef:d0:ff:e1:b8:18:2d:3f:65:
         d1:45:67:6f:03:6a:af:80:f6:16:1c:9c:03:e2:a6:b5:68:c1:
         dd:e6:3c:67:59:67:75:f8:72:9d:43:6a:d4:78:09:6d:c3:74:
         85:04:b2:5c:3a:b1:7a:36:f4:03:0a:f9:63:13:31:1a:8d:01:
         f0:db:09:16:ba:6a:73:05:ab:92:37:26:bc:a1:d9:6d:27:ed:
         8d:40:b4:a2:83:9f:cd:cf:8a:a4:24:b9:dd:9c:82:30:a1:82:
         e8:d1:cc:ec:72:ad:8f:69:9c:83:00:10:73:c8:5d:2b:f0:0c:
         1c:15:b1:78:ec:df:b0:10:45:c9:59:b4:26:02:ac:40:b1:0c:
         1b:41:58:57:3b:16:cc:9f:0a:23:6e:c9:03:b3:b4:96:35:b7:
         5e:f2:e9:48:68:71:19:e1:47:38:84:2b:21:45:b5:a2:c7:7e:
         9b:86:5c:f4:ff:71:08:8a:e3:f6:b3:0c:ba:69:52:c1:b5:d3:
         2a:9e:00:8d:31:ae:63:fe:bb:fa:41:c4:64:d8:10:b6:b7:54:
         14:06:25:ac:e1:ac:41:a3:e2:d7:47:3c:93:39:14:98:6d:20:
         a0:7c:ca:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:27:42 2025 by rpki-client