This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
File:                     fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json)
Hash identifier:          bqwEhcuRD9KhmtqXdHYvhoDqLNqnVc3VNaXmYhvxmEU=
Subject key identifier:   86:CD:CF:A5:2A:E8:88:E2:49:6C:62:94:0C:61:EF:DB:EB:F8:9E:23
Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F
Certificate issuer:       /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
Certificate serial:       34E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
Manifest number:          34E0
Signing time:             Sat 06 Dec 2025 15:04:03 +0000
Manifest this update:     Sat 06 Dec 2025 15:04:03 +0000
Manifest next update:     Sat 13 Dec 2025 15:04:03 +0000
Files and hashes:         1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: coaRjogILwyEUWONzevUPrbNdkuBQCRTHiOffcaxKcw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl
                          rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13537 (0x34e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
        Validity
            Not Before: Dec  6 15:04:03 2025 GMT
            Not After : Dec 13 15:04:03 2025 GMT
        Subject: CN=693445e3-2b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:71:a0:c7:da:6e:d5:c8:e5:48:b4:c6:1d:
                    01:d8:9a:70:1f:a9:e9:2a:80:ef:f3:d1:ba:30:5a:
                    a3:fd:b2:65:b5:0f:ab:81:1c:c4:7b:e8:c6:9f:19:
                    c7:33:37:9a:8f:b4:58:15:d5:d3:13:31:02:33:0a:
                    a3:2f:e6:c5:e1:a4:91:fa:22:3e:7e:40:fe:45:1f:
                    8a:4b:4a:6d:df:70:ad:47:53:e0:6c:86:15:c5:26:
                    01:1b:c7:00:4b:7a:34:a7:1e:0b:30:3c:38:35:30:
                    a2:11:dd:e6:b9:75:4b:76:3c:2a:01:80:5b:1a:e8:
                    f7:05:02:08:3a:6e:67:08:23:f9:41:37:82:73:c4:
                    8c:d5:95:24:2d:e5:62:48:6a:1a:eb:65:f0:33:9b:
                    b7:48:c0:be:1a:87:99:a7:d6:fc:f8:28:35:03:57:
                    7b:95:ee:33:70:3e:5b:1e:40:d4:c0:2f:ce:bf:52:
                    cc:80:bb:49:26:6b:c1:25:63:74:9d:3b:c7:e0:c5:
                    6f:6b:9f:6b:7a:8c:2e:ef:73:92:42:eb:0c:82:6a:
                    7c:a7:eb:35:a8:98:8a:74:59:3e:47:98:67:97:02:
                    6a:d8:4c:7b:df:f6:f0:52:82:fe:6d:c3:2e:c1:94:
                    3b:bf:c9:84:3a:6f:86:f2:10:f3:2a:ee:87:2a:f1:
                    1a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CD:CF:A5:2A:E8:88:E2:49:6C:62:94:0C:61:EF:DB:EB:F8:9E:23
            X509v3 Authority Key Identifier:
                keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:54:e1:da:94:03:1f:e1:95:52:b1:f7:0e:f2:5f:af:9d:12:
         b1:b6:a6:3b:08:0b:d7:ed:11:be:87:02:97:48:9c:07:a5:87:
         3a:31:16:a9:dc:3b:97:9e:2c:d9:85:ad:90:95:4f:e3:e0:16:
         99:08:4f:0b:f2:32:3d:85:18:01:c8:01:fc:08:70:a2:ca:f0:
         25:d0:af:57:76:f5:4e:97:2b:5f:52:75:ea:7e:72:9e:07:52:
         9a:cf:2a:dd:e1:df:f0:9b:75:8a:d3:72:68:92:9c:d6:78:e0:
         59:b8:75:f6:3b:12:2d:2b:7c:f7:6d:a0:dc:28:be:25:af:a7:
         9a:a0:8a:df:8f:69:64:82:0b:bf:7a:c6:96:2f:74:18:4d:83:
         a1:b3:27:57:ca:ef:77:3c:3b:8b:c1:d7:54:95:d4:0c:ee:ee:
         31:89:df:80:95:10:d5:84:5b:08:2f:e0:f6:40:cc:18:4f:f6:
         1a:a0:2e:a6:d8:74:71:cb:49:2a:24:3e:7d:6f:8c:f0:b0:84:
         27:91:e1:bc:7c:b6:2a:69:1b:1e:5d:50:b9:42:4d:9d:d8:8e:
         f0:d6:c6:49:24:d0:91:7a:79:d1:66:90:7f:fd:22:f2:81:37:
         ca:27:83:3b:cf:77:db:b1:15:62:12:37:22:82:bd:0f:44:be:
         43:0f:fb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:44:30 2025 by rpki-client