This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
File:                     _j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft (raw, json)
Hash identifier:          QFehDC+sbU1xw9hGJ6YQNsRIL3B+q6eXYMTEUftqfKU=
Subject key identifier:   B6:1F:54:19:52:F2:8A:A0:58:93:89:40:54:6D:D7:EF:72:89:54:32
Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
Certificate issuer:       /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Certificate serial:       04B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
Manifest number:          04A8
Signing time:             Thu 04 Dec 2025 22:33:21 +0000
Manifest this update:     Thu 04 Dec 2025 22:33:20 +0000
Manifest next update:     Thu 11 Dec 2025 22:33:20 +0000
Files and hashes:         1: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl (hash: bbXRLTCQpCLrafXADKTHxkZ0eh4SxZBFo9py1IoafVc=)
                          2: 3615B9806CB911EE91852F72C4F9AE02.roa (hash: oX7iVEw87PxrlXLRiZsATHbTumAb9Jcb4paecAnP08M=)
                          3: A46DD938EF8D11EEAF47227BC4F9AE02.roa (hash: ySDLsUnA1Px9ZdN4Rj4bZJvdBUg6R7IdLHrHlc350Os=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
                          rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208 (0x4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FF2C, serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
        Validity
            Not Before: Dec  4 22:33:20 2025 GMT
            Not After : Dec 11 22:33:20 2025 GMT
        Subject: CN=69320c31-d40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:fe:13:bf:92:09:1c:4a:80:0c:6a:de:ce:
                    bc:2e:6f:57:51:91:d1:5f:1c:82:44:21:a3:4d:cd:
                    48:fa:fd:d2:63:44:4e:21:47:38:1e:28:c4:2e:44:
                    b3:30:b2:c8:74:f8:8f:a2:2d:a1:b3:e2:d2:80:10:
                    7e:00:e0:89:d7:63:ef:55:b7:24:e8:db:58:a9:86:
                    d4:be:f4:ce:3f:17:69:37:16:3f:3b:c8:26:7d:86:
                    d8:b9:21:cd:5a:46:69:7b:9f:fe:c8:8b:29:ec:fb:
                    d0:6c:07:bc:94:e1:fe:0f:5a:dd:cc:ab:18:47:7a:
                    f6:33:67:81:96:e4:bd:93:13:ee:0f:37:e5:05:28:
                    b4:10:26:c2:67:8e:38:a5:8d:dd:29:cb:5d:0b:ae:
                    92:c8:25:d1:77:a6:dc:41:fc:0f:99:5a:83:23:d4:
                    32:26:78:d4:b8:e8:2e:08:6d:ab:94:17:5d:8e:b9:
                    b6:96:dd:09:3f:55:e7:e0:6c:c1:12:4d:42:a6:26:
                    bf:03:e2:0e:8b:82:11:25:f0:a8:63:4e:96:3c:d5:
                    44:9e:7e:73:3c:77:28:0c:bc:8d:ce:c9:a9:34:e5:
                    15:82:ab:ec:b0:ad:97:1b:cb:87:dd:50:58:05:a7:
                    91:66:6c:6d:46:46:fc:15:4b:b4:27:5e:03:44:6e:
                    16:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1F:54:19:52:F2:8A:A0:58:93:89:40:54:6D:D7:EF:72:89:54:32
            X509v3 Authority Key Identifier:
                keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9b:9b:5b:d4:33:d7:62:60:5f:24:fa:dc:dc:e6:04:e2:6d:
         f1:05:3f:e8:4f:ee:6a:cb:1a:ce:7a:16:14:d2:75:93:50:0e:
         6c:34:92:b3:6a:52:27:e3:34:f2:30:8d:4d:03:67:00:05:77:
         69:ff:cd:dd:cc:87:15:7c:5d:24:fd:eb:94:57:48:2c:72:d0:
         0d:7e:bc:83:3e:79:56:7c:9b:61:8d:69:dd:b9:8a:0d:df:5f:
         d7:d7:66:c2:de:dc:0e:0e:fc:ba:1b:df:d4:58:26:14:21:64:
         93:dd:5a:30:83:29:6f:0e:e7:41:7c:f9:76:09:cb:b2:fe:14:
         d7:98:45:15:8b:68:fd:60:88:2d:f4:94:f3:ae:79:d7:04:18:
         f3:33:8f:05:fa:10:5e:99:82:ba:59:2c:7a:6c:9f:28:fe:e5:
         d3:f2:77:c5:83:76:3b:98:36:ab:4e:25:9e:10:c9:9a:4c:5f:
         e2:d0:34:ec:63:cc:06:75:a3:42:7d:70:4e:ca:08:74:c8:c4:
         eb:dd:ca:68:ab:28:0d:f6:4e:f2:66:8a:cb:3e:93:c1:a8:5a:
         57:a7:72:88:26:55:dd:40:a7:6f:0c:c2:e0:2f:21:ee:ff:a0:
         03:46:30:3a:7d:4f:e5:fc:fa:52:d5:09:51:5b:bf:6d:3b:fe:
         5e:96:80:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:28:26 2025 by rpki-client