This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
File:                     AIsjUb6f1m04sRBQZ5c09E-l2X0.mft (raw, json)
Hash identifier:          VYPdc2a7QTFgO+8SxGeXeOvSLd+MeAU8myBkZ7jP9M4=
Subject key identifier:   7E:DD:27:1A:AC:AB:55:BF:8B:1B:6B:F5:53:39:D0:E9:91:02:7D:CC
Authority key identifier: 00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D
Certificate issuer:       /CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
Manifest number:          0132
Signing time:             Fri 05 Dec 2025 02:38:11 +0000
Manifest this update:     Fri 05 Dec 2025 02:38:11 +0000
Manifest next update:     Fri 12 Dec 2025 02:38:11 +0000
Files and hashes:         1: AIsjUb6f1m04sRBQZ5c09E-l2X0.crl (hash: w2ipN3VW9FYyPyihOR+pFsdlOnS9q5IgcdfMAdUE0hc=)
                          2: 66E93DA2FB1111EE81D7643BC4F9AE02.roa (hash: 8wMwW5uNjWkG/EYhzvD28CGT7P5U8FJODoDJkkfTgvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl
                          rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0D8, serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
        Validity
            Not Before: Dec  5 02:38:11 2025 GMT
            Not After : Dec 12 02:38:11 2025 GMT
        Subject: CN=69324593-6ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cd:4c:d1:36:f3:f6:6f:55:18:10:bb:1d:9e:
                    fe:a1:52:dd:17:a8:f8:6a:2f:72:ce:f7:f8:bf:c3:
                    16:87:6f:e1:fd:8e:42:a8:8c:fb:96:0f:48:5c:24:
                    f6:3c:d0:f4:4f:5b:ed:64:b0:df:56:34:8a:44:7d:
                    07:0b:6d:20:00:2c:57:e5:c4:a8:ce:6d:93:72:18:
                    40:1d:13:f3:18:75:dc:cb:a6:bb:d6:c3:41:0b:95:
                    61:77:46:10:14:9b:6b:04:f6:4c:4f:b6:53:15:01:
                    c7:bc:06:3c:68:e3:f3:d9:b6:5f:ae:10:3a:c4:63:
                    ba:98:e7:53:33:35:e1:2a:4c:2f:a1:6b:96:a4:ab:
                    ea:88:c8:09:5e:84:d5:92:e9:4f:0c:f7:d4:f7:f3:
                    d4:d6:d3:7c:b4:75:a7:64:aa:7f:d8:2a:40:19:e2:
                    81:4b:4e:0b:de:00:dc:24:6d:c1:d8:7b:3c:c7:f0:
                    bc:e2:f8:4b:1b:63:aa:29:a7:01:c3:4c:bc:fc:28:
                    49:24:4a:fe:38:93:80:e5:85:69:db:22:8b:af:8c:
                    ad:8c:ba:3d:45:2e:78:1d:46:84:1c:90:af:95:81:
                    7c:13:66:68:f2:7f:7a:52:6f:8b:77:25:53:11:66:
                    35:92:80:c7:13:bd:f6:9a:b4:e3:55:26:14:41:46:
                    54:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DD:27:1A:AC:AB:55:BF:8B:1B:6B:F5:53:39:D0:E9:91:02:7D:CC
            X509v3 Authority Key Identifier:
                keyid:00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:9a:47:7e:40:13:42:ef:93:ed:e2:83:24:b6:80:48:02:f5:
         9b:21:d3:8b:0b:4c:5b:49:03:85:4b:3c:4d:e1:b8:fc:2d:3f:
         80:cd:65:e6:41:4f:3b:a4:83:4d:46:58:3f:f4:01:10:aa:9b:
         66:ae:f6:ed:7c:7f:18:04:1a:50:06:0a:6f:70:e0:6c:79:ec:
         0f:8e:34:04:94:38:90:1e:6d:ca:e3:e0:37:b9:ee:90:84:04:
         4b:aa:f8:36:bc:ff:95:e2:5d:66:45:e6:6d:40:4f:08:a8:c7:
         ba:2e:f1:22:74:0d:85:fd:9a:b8:30:77:5e:e7:ef:8d:95:17:
         7d:63:f0:18:8b:28:4a:f5:b8:eb:88:30:83:61:37:8c:7c:20:
         39:56:14:99:4e:32:88:10:d3:4f:b2:e7:e2:07:2b:d2:4c:31:
         58:22:d2:dc:40:ba:95:b9:ce:30:39:d4:8c:16:23:42:59:a6:
         57:a9:4c:94:e5:3c:16:8e:e4:71:90:54:09:98:bf:e7:b2:51:
         ee:02:de:32:9b:70:b9:eb:9f:0d:51:72:89:02:2c:79:e5:5d:
         7d:e6:2c:35:68:87:62:88:3b:51:1e:32:f2:e3:16:62:d7:20:
         7c:8d:85:29:55:6e:45:d5:1c:37:95:74:cf:42:6e:e0:b4:c5:
         ab:26:f2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:50:41 2025 by rpki-client