This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
File:                     52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json)
Hash identifier:          OBpMkc2y5QUAAS7Tguzd0fHuOX+lbjWk0pDXwIk/JZg=
Subject key identifier:   D6:9F:55:78:C6:E4:C2:75:62:5D:9C:AD:0E:12:7C:F7:60:6E:CA:61
Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
Certificate issuer:       /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Certificate serial:       03C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
Manifest number:          03BD
Signing time:             Sat 20 Dec 2025 23:53:36 +0000
Manifest this update:     Sat 20 Dec 2025 23:53:35 +0000
Manifest next update:     Sat 27 Dec 2025 23:53:35 +0000
Files and hashes:         1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: UEuQxa9t4bd3m9Gx4ejcW1RyheiWMLFpOmOVjzH/VpU=)
                          2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: 3vF76S8iWJW8vHG1MAht+7FYZNQsdje1uuqCEx57cyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
                          rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962 (0x3c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
        Validity
            Not Before: Dec 20 23:53:35 2025 GMT
            Not After : Dec 27 23:53:35 2025 GMT
        Subject: CN=69473700-61ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:68:93:e0:ab:ce:eb:06:d3:d1:1a:42:72:
                    02:d1:70:1d:c5:2d:ff:bf:e3:f8:ce:67:50:2c:25:
                    7d:25:ca:ab:12:51:bb:ac:d3:31:ef:3e:f9:17:85:
                    a7:3e:40:c5:23:3e:2e:0a:ee:b2:42:66:b8:05:a8:
                    e8:27:3d:55:e0:b4:3d:1b:49:ab:dc:ce:27:52:9d:
                    6d:17:ca:58:33:34:84:46:96:d4:02:18:b3:a5:bd:
                    f6:df:1a:48:6f:39:88:16:d2:41:f2:fa:f6:17:5c:
                    8f:ce:a7:45:f0:d8:67:d8:cb:25:7c:dc:10:46:ef:
                    15:31:5d:c4:d0:9a:87:c7:e6:51:b8:59:af:1b:0f:
                    f3:fe:48:9b:36:8d:90:e1:a6:d3:d3:26:1c:31:d6:
                    5b:f4:74:28:db:52:8d:e7:fc:de:96:dc:89:68:5d:
                    53:cb:39:4d:b7:54:19:84:12:33:b8:e0:9c:06:ba:
                    34:d1:86:bb:c3:91:45:75:f3:21:19:ef:87:db:1e:
                    a3:db:6b:cc:9b:c8:44:ec:c4:d3:70:e9:e2:95:27:
                    40:ba:0c:70:78:fa:86:07:0b:49:1a:47:dd:34:e1:
                    fa:80:dc:a5:38:5e:4f:8e:53:2b:d5:8e:46:c7:93:
                    82:98:90:e6:16:07:3b:86:96:b5:17:5a:d6:66:80:
                    27:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9F:55:78:C6:E4:C2:75:62:5D:9C:AD:0E:12:7C:F7:60:6E:CA:61
            X509v3 Authority Key Identifier:
                keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:90:f8:3c:58:59:c8:7c:ee:d5:71:cd:fb:e5:cb:f3:50:12:
         04:ca:e9:60:d7:d2:dc:df:96:b9:09:f8:fc:b0:57:0a:0c:b5:
         71:da:f9:ce:90:52:17:73:3e:df:2c:9f:6e:57:c4:bb:5f:f5:
         51:49:91:58:28:93:30:4e:d1:92:68:7c:c9:b3:65:44:bc:cf:
         b8:f3:f6:be:6e:b4:81:c2:11:43:b9:f7:af:54:76:47:07:b2:
         6f:5a:43:68:ea:7d:57:78:87:8b:0a:af:5c:05:97:61:19:de:
         ca:23:d9:61:38:45:bf:20:97:8b:60:46:ea:4e:9f:74:b5:34:
         c6:67:9a:bc:5b:0e:79:f6:c6:ad:8e:18:5d:7b:e6:67:0f:84:
         66:9c:8c:50:43:4b:a4:a5:bd:b1:76:d8:93:f8:54:6c:54:91:
         78:51:9f:f2:3b:53:99:89:40:26:d0:26:a6:ef:42:5e:a3:60:
         c7:20:a5:56:10:57:85:6e:a1:6c:ff:5a:58:a3:ca:a0:73:72:
         07:16:cd:e5:4a:f0:0d:14:84:1c:5d:d0:7b:e2:36:5f:d3:e9:
         03:1f:ca:68:37:a1:b0:90:50:c8:0c:b8:4f:58:ac:a6:ab:ba:
         f7:0c:00:a6:c7:05:e7:30:5c:88:d2:6a:76:3a:35:b9:75:cd:
         41:9b:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:18:30 2025 by rpki-client