This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
File:                     SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json)
Hash identifier:          rN6337tBhS0W27HVMevYGfpxKdlkcbFwbErHTekXRmw=
Subject key identifier:   90:DA:8C:72:98:17:24:33:FE:B5:01:2C:C8:1E:49:2B:82:20:B3:18
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Certificate issuer:       /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
Manifest number:          01C8
Signing time:             Fri 05 Dec 2025 01:18:12 +0000
Manifest this update:     Fri 05 Dec 2025 01:18:12 +0000
Manifest next update:     Fri 12 Dec 2025 01:18:12 +0000
Files and hashes:         1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: +nYUEc5sll69n+CiyLm5zAwS8SWH9vhKPo1CzqDuTJk=)
                          2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: 1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=)
                          3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: c9nvOfU2KLrLRWXC99EhP9jGlFTmmacQblUfMAlz5U8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
                          rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
        Validity
            Not Before: Dec  5 01:18:12 2025 GMT
            Not After : Dec 12 01:18:12 2025 GMT
        Subject: CN=693232d4-a163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:ba:cf:8d:b6:fe:44:8e:10:e9:1e:4b:68:
                    3c:43:7b:59:66:01:08:41:8f:8a:dc:54:43:82:95:
                    c3:fd:2a:8b:57:4c:2b:96:81:8f:5f:58:be:e9:d9:
                    1a:17:a3:9d:56:f6:17:7c:1d:92:d5:72:85:86:77:
                    8c:8e:15:c3:45:85:13:f5:6d:c4:eb:19:2c:69:01:
                    66:82:28:4e:b5:9e:98:e5:b9:2d:b9:6c:f9:a9:3e:
                    a1:94:7b:b0:a7:ca:95:69:bb:52:6c:21:40:35:56:
                    c1:fd:35:e3:5a:50:45:97:56:c4:7e:0f:ad:18:2c:
                    b9:d5:b7:ce:0c:86:51:80:28:b2:30:f7:4f:cf:5b:
                    17:53:8b:b8:bf:5b:58:a7:42:22:58:1e:78:04:1f:
                    e5:02:c1:af:79:e1:ed:58:1d:b2:97:28:19:7f:b5:
                    2b:ff:5d:a0:d3:2e:b5:28:a8:0d:ae:b1:45:66:fb:
                    84:cc:69:4e:cf:af:34:36:46:40:f8:e8:21:33:a7:
                    b6:7f:e7:5f:24:d6:94:ab:13:8f:6f:6a:df:c5:e4:
                    f2:a4:d6:46:94:e0:01:d6:5f:9b:18:1f:4f:e7:bc:
                    49:03:5c:d4:87:f3:2b:45:cf:b8:fc:39:32:b5:79:
                    d3:89:df:fc:3f:e7:15:c6:d2:ae:98:a6:99:c4:c7:
                    95:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DA:8C:72:98:17:24:33:FE:B5:01:2C:C8:1E:49:2B:82:20:B3:18
            X509v3 Authority Key Identifier:
                keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:01:a3:6d:80:cf:51:9a:07:d1:d1:b8:e3:81:7e:65:96:25:
         75:be:78:10:b0:1b:39:e0:26:83:41:2b:26:57:ac:04:17:4f:
         a4:f6:cb:d7:ee:11:6b:05:c6:a2:49:f5:d5:4d:29:ff:6a:a7:
         5c:bb:9f:ab:51:cd:90:57:f0:e0:b3:91:ce:0c:0e:b9:76:ec:
         ef:59:d8:ab:b6:5f:3f:52:4e:f3:19:80:99:80:71:85:ff:73:
         eb:b3:74:57:3f:d9:3d:24:13:d3:9c:df:e5:7e:ff:9a:05:6c:
         95:83:24:39:14:66:d1:39:72:6a:23:c3:87:25:d7:20:49:b6:
         5e:41:e1:6d:b2:79:d2:61:14:71:73:c0:9f:3f:d0:7f:33:6f:
         2d:e9:c2:43:7e:97:7f:20:f7:39:60:1b:be:71:8b:1b:c8:4a:
         d1:0b:f4:a1:50:56:4b:7d:0f:98:06:40:a8:04:3c:5a:3e:13:
         59:dc:c6:b7:35:76:ef:e7:84:ba:b7:3f:b8:cb:a4:a2:a6:ed:
         76:b2:63:e1:77:77:49:fb:97:d6:f7:83:e9:52:ef:4f:74:fe:
         f1:c0:e4:eb:01:fe:7f:9f:f1:b1:ce:4c:76:38:71:fa:4b:51:
         16:02:2b:3b:1a:22:59:52:2c:45:cf:14:cc:62:d3:11:e5:f3:
         82:08:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:07:41 2025 by rpki-client