This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
File:                     An8FUlFPJEqU7j8GVypK9zNWVzc.mft (raw, json)
Hash identifier:          j1I2iPG56uUAbKCaP1JNHORz27qNQ+T0MPaHiMyBY3E=
Subject key identifier:   07:85:B5:51:19:99:34:B9:63:EF:FA:28:B3:0F:A3:C5:2E:84:04:5E
Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
Certificate issuer:       /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
Manifest number:          0266
Signing time:             Sun 07 Dec 2025 00:11:25 +0000
Manifest this update:     Sun 07 Dec 2025 00:11:25 +0000
Manifest next update:     Sun 14 Dec 2025 00:11:25 +0000
Files and hashes:         1: An8FUlFPJEqU7j8GVypK9zNWVzc.crl (hash: bIWGF1Jf5zeI7VbAWegOLR1tv0QuEGdVxEtEtXGZWR0=)
                          2: ED55D842ADB111F08582AD1BC4F9AE02.roa (hash: X5emtbwXDf4X/Pc0/iC1xxRCaFhoeR4CVG5IQrobByQ=)
                          3: BEDFF33EAD8F11F0B669681EC4F9AE02.roa (hash: 4YDRwgWfjN1vzby5e89LZ7NBG042AaPIPiBWwyrl3v0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
                          rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737
        Validity
            Not Before: Dec  7 00:11:25 2025 GMT
            Not After : Dec 14 00:11:25 2025 GMT
        Subject: CN=6934c62d-dc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:71:fd:b0:ca:55:57:98:8a:29:1d:25:e9:
                    9b:19:c3:ca:33:23:95:6f:21:f2:3d:7e:5c:d1:03:
                    30:10:fa:1c:d9:9d:c8:eb:90:56:50:b2:ae:07:24:
                    df:6e:04:f8:7f:c8:88:89:06:6c:7b:fa:bc:51:a0:
                    06:e0:a9:b0:61:9c:fc:f7:80:ea:d8:a3:53:9d:24:
                    54:f9:6b:be:68:1e:71:d3:be:48:d1:91:d1:36:a2:
                    b1:eb:4e:64:14:4f:96:e1:80:98:b5:c1:37:b9:db:
                    ce:25:53:96:71:dc:33:9c:3f:22:ae:2a:a8:a3:41:
                    b1:ad:c3:91:56:0e:9e:54:43:dc:e4:50:3d:59:27:
                    4c:6f:cb:46:95:f3:01:34:4a:33:1e:46:c8:d9:14:
                    ab:e7:05:2a:38:20:b5:18:cc:13:a5:46:35:53:5b:
                    65:3e:1e:01:50:57:a4:38:7a:91:b4:47:44:11:6b:
                    1e:10:4b:22:a1:22:db:05:0e:e1:2e:89:0f:c9:74:
                    45:aa:63:c1:d6:04:5a:db:62:89:7b:cf:b9:be:88:
                    86:99:a0:74:2c:26:f3:e3:d1:00:65:04:16:4d:05:
                    b7:54:01:1c:97:d6:c6:91:85:c0:d2:b0:06:8f:11:
                    da:bd:26:65:cb:4d:4f:38:40:ec:37:c7:5d:19:2e:
                    70:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:85:B5:51:19:99:34:B9:63:EF:FA:28:B3:0F:A3:C5:2E:84:04:5E
            X509v3 Authority Key Identifier:
                keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:36:d1:f8:8c:91:30:5d:11:5c:39:b8:75:a0:33:83:3d:30:
         84:bb:4e:63:6d:7b:50:3b:36:26:bb:85:a8:30:91:67:11:24:
         8e:77:5d:0d:ef:47:db:a3:bf:3e:32:01:99:b7:90:e6:04:f0:
         d5:95:58:32:aa:f6:46:67:94:33:af:6d:79:16:45:d0:70:30:
         98:39:e3:a5:a0:8a:2c:2d:99:59:dd:e6:fb:4c:e9:06:49:2f:
         a1:36:37:87:3e:8b:62:bf:05:55:18:b5:cc:ed:e6:bd:80:4a:
         68:de:88:38:58:13:09:1b:34:e0:c2:c7:e4:0a:ee:e4:fd:9e:
         04:0a:7d:1d:f0:f4:30:40:1a:ea:f8:57:91:93:96:af:03:a7:
         12:0f:6e:ce:0c:fc:0e:3d:9c:7f:8c:65:4c:da:19:c2:70:c0:
         0d:02:ce:a5:27:da:02:87:ae:d1:c1:85:4c:df:c0:c4:82:0d:
         1f:0b:64:a9:ba:d5:3c:45:d4:c1:fb:b5:0d:8f:4c:7f:43:24:
         2e:ad:08:6a:32:a3:d5:73:a8:c1:25:bc:5d:58:7f:fe:c0:7c:
         15:aa:14:e7:46:e1:3b:4f:f8:0c:d4:a2:b0:bc:54:44:81:31:
         32:3e:9f:84:6a:3f:5e:d7:63:d7:de:c9:dd:84:77:2a:8d:d3:
         11:4f:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:36:00 2025 by rpki-client