This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
File:                     ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft (raw, json)
Hash identifier:          hMtxgowMoip2uZdIM3Uq0FDEwYbFgeHpDJ/6NbqW29E=
Subject key identifier:   65:C4:3F:AE:60:21:7F:23:F3:6F:C9:FE:13:32:A1:D9:F4:BA:B0:AA
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Certificate issuer:       /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial:       0574
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
Manifest number:          0559
Signing time:             Thu 04 Dec 2025 22:06:43 +0000
Manifest this update:     Thu 04 Dec 2025 22:06:43 +0000
Manifest next update:     Thu 11 Dec 2025 22:06:43 +0000
Files and hashes:         1: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl (hash: +iOU7bHpKDaHNHMWsU/1yCFI8JwvzanhfaBE6orlxLw=)
                          2: 2D197F6E52E611F087152212C4F9AE02.roa (hash: HtdDWksRE9EXpPvJGC8WIJPPFpxiVku2kdT+gGfaXRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C0C6, serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
        Validity
            Not Before: Dec  4 22:06:43 2025 GMT
            Not After : Dec 11 22:06:43 2025 GMT
        Subject: CN=693205f3-7ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:fc:7d:b1:f2:ce:f2:b2:fc:57:6d:b9:d4:
                    7c:46:de:86:70:3a:99:5f:76:6a:d4:e9:37:07:ad:
                    b1:db:40:4c:17:4e:8c:af:13:5d:57:e3:ed:01:a2:
                    5d:fc:f1:9d:83:6a:d5:31:b3:14:98:db:69:d3:31:
                    a9:70:ad:00:90:1c:d3:6b:7a:3c:ef:2d:04:a2:7e:
                    75:bd:e8:47:10:48:58:bd:ef:c8:b3:08:23:67:19:
                    a2:56:3d:07:55:4c:34:68:bf:c4:e2:b6:a3:10:1b:
                    6a:16:c4:b7:32:3a:b4:1f:22:82:84:e9:6a:4d:e8:
                    d7:9d:05:d4:9b:84:fb:17:42:b0:c1:93:99:b7:ee:
                    71:b3:9f:f4:7d:db:25:80:5c:1e:2d:51:7f:81:bf:
                    d1:20:d7:73:02:2f:24:52:ea:e7:ee:46:8b:98:53:
                    85:e5:d8:92:6a:ba:a1:b5:ff:d6:33:9c:1f:4e:c2:
                    7d:70:9b:c0:2d:c1:9d:d5:e5:6f:40:1f:c4:75:f4:
                    99:ec:c6:2c:81:4e:45:67:ef:bc:b1:83:46:da:1b:
                    bf:d5:c5:f4:50:a2:66:60:3d:28:18:68:f1:50:3f:
                    ce:f6:11:a7:e5:9c:5a:d9:c2:f1:87:8e:16:a1:55:
                    e8:d1:64:e2:f8:3c:56:d7:51:3b:fd:3b:0b:87:e0:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C4:3F:AE:60:21:7F:23:F3:6F:C9:FE:13:32:A1:D9:F4:BA:B0:AA
            X509v3 Authority Key Identifier:
                keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d6:51:06:96:52:4c:28:91:f6:c9:a1:8f:b5:d6:99:ed:5a:
         db:88:dd:57:83:0e:95:9b:f1:cb:9e:e0:94:6b:ff:c8:b8:72:
         79:04:3b:a0:1c:59:7b:82:0e:5d:44:d8:7c:e5:8b:ce:4b:81:
         c6:b1:37:d6:e6:c0:4f:e8:d4:76:17:37:b0:9c:f3:52:42:f4:
         34:d2:b3:58:81:38:3f:0f:75:4e:28:64:30:7f:8a:b3:69:23:
         29:7d:61:08:e6:68:ad:52:15:11:64:7f:7a:c0:47:2c:60:46:
         06:4b:01:53:20:19:dc:42:09:71:9e:75:79:ed:28:f5:d2:c6:
         17:62:7f:73:ff:36:ba:73:58:26:14:76:aa:03:83:3f:e2:6a:
         88:b9:7e:73:ca:01:ec:f4:3a:2e:77:df:69:b8:db:39:31:6b:
         c2:23:41:53:df:5d:b8:25:3a:27:f6:3b:be:25:32:90:0f:7e:
         8b:84:16:56:9b:0e:a4:4f:1d:a4:4c:23:81:4a:5d:66:ee:b2:
         b7:9e:da:32:1c:49:17:f8:3a:fd:53:bd:46:0a:9a:c4:fc:7b:
         15:95:6e:4a:fa:c8:a0:c2:6c:6c:07:36:19:34:ab:6f:08:2a:
         16:1b:27:ea:cb:45:94:4e:f7:c5:b9:6d:b7:bb:e5:fa:07:c6:
         db:f6:cd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:42:18 2025 by rpki-client