This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
File:                     8gl4uKIsE6CwK586X8LUiKuovtU.mft (raw, json)
Hash identifier:          mm9yLqKXo1c4ZuDMpopH9EAKg7L9Bd7yZomK/JwxyN4=
Subject key identifier:   BD:02:60:D4:9B:D2:4F:62:86:8C:6A:C6:88:83:F4:E6:AC:DB:48:41
Authority key identifier: F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5
Certificate issuer:       /CN=A914653C/serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
Certificate serial:       0A50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
Manifest number:          0A4A
Signing time:             Thu 04 Dec 2025 18:58:13 +0000
Manifest this update:     Thu 04 Dec 2025 18:58:13 +0000
Manifest next update:     Thu 11 Dec 2025 18:58:13 +0000
Files and hashes:         1: 8gl4uKIsE6CwK586X8LUiKuovtU.crl (hash: 6ZDn6j9wQqH+LtdY8h7oSrr2YEyV92vJqmgkb1KEP2w=)
                          2: BD7E578079E011EA8DD5907FC4F9AE02.roa (hash: iYxIY6VXdTf7gHnwepU+/VGZkh/V1c1cIjc+gsTh8TE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl
                          rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2640 (0xa50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914653C, serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
        Validity
            Not Before: Dec  4 18:58:13 2025 GMT
            Not After : Dec 11 18:58:13 2025 GMT
        Subject: CN=6931d9c5-9826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:ce:00:03:8c:2b:b8:72:9d:c2:9e:66:e6:
                    a2:26:24:ad:42:56:4d:1d:d6:4e:a1:ec:5a:a9:04:
                    ef:df:3e:f3:fe:38:12:6d:08:7b:84:e6:14:44:cf:
                    e3:0e:c2:36:1d:f9:a4:cd:70:1d:6a:fc:54:1c:2e:
                    32:80:32:90:02:37:99:90:94:0f:f0:7d:83:58:cc:
                    6e:cf:8c:52:aa:27:cb:75:43:74:ee:04:47:77:2d:
                    37:ee:9e:a4:af:69:1d:fa:a8:00:23:5a:36:ea:e3:
                    1b:07:aa:b4:66:41:be:15:95:6b:1b:4f:80:c7:2f:
                    95:5e:02:64:5d:c8:1a:8a:a1:50:26:00:61:e4:6b:
                    e9:48:16:f4:29:fa:68:14:db:d1:7d:7e:8f:aa:55:
                    8b:21:a5:57:77:01:35:63:ce:e5:cb:f5:97:cc:cd:
                    c6:9b:05:d2:11:ae:16:f0:35:52:8d:f8:89:b7:8a:
                    05:0b:c2:d6:be:4f:51:e8:e1:78:a8:a6:fd:ae:8d:
                    f2:28:34:b7:d9:b5:12:39:f1:01:d5:90:93:c4:ce:
                    71:95:36:9c:63:29:b2:d9:ca:76:fe:58:87:66:78:
                    1f:1f:b7:b0:1e:12:16:ab:78:38:a1:e3:7b:d1:97:
                    6c:ab:21:da:e4:05:50:a5:95:28:bd:ec:f6:94:a9:
                    51:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:02:60:D4:9B:D2:4F:62:86:8C:6A:C6:88:83:F4:E6:AC:DB:48:41
            X509v3 Authority Key Identifier:
                keyid:F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:99:26:00:1c:cc:2f:70:85:2a:af:08:39:b4:d2:db:f3:30:
         97:ff:5c:51:de:09:26:1e:11:32:e2:89:43:ed:11:09:de:42:
         55:7d:cd:c6:4b:99:bf:52:f3:e0:b3:84:28:b3:b0:f6:84:60:
         c2:bc:42:45:ca:22:d2:62:5a:13:97:46:c7:92:ce:53:70:ab:
         eb:9a:b9:a3:b7:5d:55:28:01:9d:9a:aa:93:22:fa:61:d3:3b:
         bb:55:e6:fc:c4:a6:2b:61:93:f9:ec:d6:a8:02:91:e8:0a:81:
         b8:e0:58:cf:39:f8:52:62:e4:91:30:d7:cf:a0:bd:58:4e:a6:
         73:a8:3f:0f:6e:15:a9:bc:8a:d0:2a:ed:9f:9e:a4:61:bb:58:
         e7:1a:57:f1:cf:1e:e3:a5:af:88:9a:89:31:69:73:88:e9:d8:
         22:8d:02:21:26:99:c7:68:f5:65:85:0e:4d:44:c2:72:65:f5:
         fc:31:a6:07:70:5d:43:1a:ea:e7:55:bc:2a:5b:1e:39:ce:6c:
         6b:69:0a:fe:38:22:fd:4c:80:d9:f7:2a:14:d3:ae:17:3a:23:
         1f:00:4c:fd:77:3a:17:f6:44:1a:a3:21:bf:9a:5c:e0:a4:62:
         41:e1:c2:87:73:6e:1f:0d:b9:85:78:10:25:ea:d5:09:9e:3e:
         40:eb:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:49:09 2025 by rpki-client