This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File:                     rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier:          G3JBTmLkPoiU1Vyc05eFl5+H6Gd4rGTJ+d8YRL5Nd/Y=
Subject key identifier:   96:37:05:CE:1D:B9:18:FE:1F:49:2F:9B:5C:45:17:BB:CD:FA:8E:23
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number:          01C8
Signing time:             Sun 07 Dec 2025 01:24:47 +0000
Manifest this update:     Sun 07 Dec 2025 01:24:46 +0000
Manifest next update:     Sun 14 Dec 2025 01:24:46 +0000
Files and hashes:         1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: baZ2UH2SE8xIrBAV3BTCy9boNsA6ARj1EzouybUnWNk=)
                          2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: p81EH8N+mq+tuXFMTqadpbhtGnx8x8sovmy9swXxzCM=)
                          3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: GGQZQXITbCi35kDi1cszvpoNDF4GQHNFV1AYsPL4NFA=)
                          4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Dec  7 01:24:46 2025 GMT
            Not After : Dec 14 01:24:46 2025 GMT
        Subject: CN=6934d75e-967d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:ed:5a:ca:b2:13:dd:62:82:a3:e4:b9:e7:
                    6b:f0:28:40:b0:23:f2:64:ae:69:f0:a1:4d:1c:5b:
                    96:9f:00:b2:f6:4a:b1:1c:cd:59:40:fe:8c:bd:09:
                    0e:f1:9d:97:3f:04:dd:d0:2d:32:ad:1c:0c:a4:b7:
                    e6:18:0d:78:f3:48:b1:64:37:e2:1f:91:9b:59:ac:
                    6a:c9:51:94:f2:96:f1:29:4a:c8:fe:ba:80:9a:cc:
                    1f:8b:c5:7d:05:5f:c4:2a:07:fa:07:32:e3:f2:87:
                    00:ce:9b:02:fa:3b:06:d2:e4:3a:cd:37:2d:41:ed:
                    2c:68:de:72:80:09:48:e5:09:9e:4e:ee:71:2b:23:
                    ac:5e:eb:c7:ef:ed:0c:69:7c:37:f2:fb:82:a7:33:
                    86:3f:18:9e:4a:56:ae:f7:8c:a2:09:bc:f9:fa:87:
                    ce:6f:c1:ab:cc:06:83:54:ae:5a:0d:e8:65:55:bb:
                    bd:67:13:72:df:a3:8a:54:02:9a:13:0f:31:15:48:
                    fd:c7:50:dc:ef:67:4b:3d:62:92:46:4a:35:37:8b:
                    2f:a8:b6:6f:77:2c:fe:e8:38:12:0e:85:ee:ea:2c:
                    6a:fd:d4:00:af:58:d9:c2:16:40:01:0d:73:1b:7e:
                    f9:98:1b:70:dd:69:3d:57:5f:e7:48:b4:17:11:61:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:37:05:CE:1D:B9:18:FE:1F:49:2F:9B:5C:45:17:BB:CD:FA:8E:23
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:f4:af:77:ba:cf:b1:f5:8c:ea:4a:1d:d4:12:df:e3:98:57:
         38:a8:70:ed:40:81:8d:70:1d:d5:86:e2:5a:2c:0a:2e:e5:3a:
         40:54:c2:c5:53:fc:63:5f:9e:c9:06:fa:ed:df:5b:e1:a5:d2:
         4e:97:24:9a:60:3d:8b:50:e5:91:2d:32:b5:78:81:82:4b:6e:
         6a:54:50:20:56:bf:be:5a:ab:22:0f:59:d8:d5:02:14:39:43:
         c6:e1:d1:80:80:9f:fb:f5:ba:3d:1c:f3:ce:a9:a8:c2:58:b8:
         67:1e:26:68:f1:c7:38:e8:8b:f0:af:33:93:ca:2c:24:1a:fd:
         a8:23:c6:aa:22:2c:a9:03:47:58:ca:58:2f:ac:45:56:a0:36:
         f0:85:40:59:5a:eb:bd:63:5a:54:91:e0:2e:23:5d:28:dd:94:
         2e:d8:8c:88:7a:ce:78:81:cc:56:d1:82:84:a9:d9:63:03:52:
         c6:05:ec:fe:26:35:4f:85:28:1a:21:77:56:c8:dc:b5:60:ff:
         3a:9e:80:42:40:54:b7:fb:f2:3d:79:69:4a:16:23:20:d5:cc:
         05:b0:02:12:dd:9f:71:ea:d9:2f:8b:d6:d8:aa:47:87:c4:82:
         8b:13:a4:fc:6e:3a:c3:fc:43:f6:2f:cb:b2:b3:a6:60:e0:cd:
         b0:76:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:56:54 2025 by rpki-client