This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
File:                     dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json)
Hash identifier:          vjS7f6ZvV1WGxfqvxCgisrziKH6BLxUOgy1jnd8N83o=
Subject key identifier:   D7:F5:7B:2A:A6:59:D8:D3:B8:2F:59:35:97:7D:DA:C8:FE:26:30:DC
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Certificate issuer:       /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
Manifest number:          0153
Signing time:             Fri 05 Dec 2025 02:22:13 +0000
Manifest this update:     Fri 05 Dec 2025 02:22:13 +0000
Manifest next update:     Fri 12 Dec 2025 02:22:13 +0000
Files and hashes:         1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: 5Vpw5YPQxUD22qoerQKBFWfsv603HNqRHwG3dTYf6fs=)
                          2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: /tXzmPJpbFpT9Ng+OXe5R9OW1iH2k8GOdLq7rPEZELc=)
                          3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: C5+FDRdQyQalYR2P8dEPuBXkPFwg+NEWC9TQl/hqp1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
                          rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
        Validity
            Not Before: Dec  5 02:22:13 2025 GMT
            Not After : Dec 12 02:22:13 2025 GMT
        Subject: CN=693241d5-4657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:0f:33:a5:cd:7a:ea:ef:7e:81:cf:4d:2d:
                    43:a3:72:ff:ea:3f:d7:df:98:b1:d3:24:f7:25:8d:
                    be:5a:97:0c:aa:4a:fe:dd:e7:0a:f1:ce:52:ca:65:
                    d2:47:65:33:b7:b8:d9:33:ee:94:b5:93:bd:43:e4:
                    5d:1a:8c:a3:01:82:9e:66:8d:dc:bc:17:6b:e5:78:
                    aa:32:69:0f:df:70:f2:23:fe:5e:4b:d0:30:2a:15:
                    87:44:4b:02:2b:e4:3c:4a:b1:4d:04:30:42:c2:c9:
                    7c:05:dc:c6:9b:09:1a:fe:44:85:0d:19:e1:f1:12:
                    64:c3:7c:ec:c2:5c:e0:28:ce:d2:3f:4c:03:72:17:
                    b7:ff:13:7b:69:51:a2:73:1c:6c:86:d4:65:b7:0c:
                    b9:13:5a:11:32:73:1c:ad:6b:eb:8f:29:24:66:cd:
                    5c:66:eb:ad:d4:2e:df:82:05:6c:51:13:01:c3:85:
                    0e:2d:b9:b4:8d:ec:91:15:3b:a5:14:0e:28:87:e7:
                    2f:d2:e8:29:6a:78:67:5d:62:d9:3f:67:a6:f7:c0:
                    8c:f4:60:3a:92:a0:ff:a7:af:76:de:f7:ac:a8:f5:
                    5e:27:44:b2:ea:cd:54:3e:89:3a:44:74:b3:53:4b:
                    43:22:f0:15:3d:95:78:59:a8:60:ce:bb:64:32:a8:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F5:7B:2A:A6:59:D8:D3:B8:2F:59:35:97:7D:DA:C8:FE:26:30:DC
            X509v3 Authority Key Identifier:
                keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:07:f5:6b:09:ad:95:84:e7:1c:2f:26:35:c3:2e:2e:99:21:
         29:17:20:10:57:6f:a5:dc:84:6d:0c:a4:0f:51:8e:b2:22:0b:
         4d:47:0c:da:23:bb:32:7e:f7:84:a9:78:c3:8f:ce:f3:fc:54:
         0a:24:a5:9a:ab:17:77:bb:61:79:9b:90:f6:b9:89:36:a1:25:
         27:19:d0:00:2f:3b:15:89:6b:1f:45:22:03:39:5e:04:7b:cb:
         dd:8e:98:e6:bb:bf:ac:69:12:53:87:5a:90:4b:73:c4:1e:28:
         25:c1:67:0e:b6:2c:46:fa:2c:e3:64:29:79:87:c8:7a:92:48:
         10:db:ae:3a:e1:4e:e1:f5:6d:5e:16:c1:58:d1:46:33:f2:f1:
         92:63:90:ce:92:ea:3a:be:ca:85:03:71:09:7c:e8:ac:d7:52:
         8f:0e:b7:1c:0f:76:44:06:25:bd:16:ae:73:0a:c9:03:e8:f4:
         fc:b8:25:89:e4:d5:b1:7f:73:d0:5e:bd:50:2b:43:0f:e9:3c:
         2c:3c:e8:51:21:74:ef:38:ae:e5:23:86:64:5e:65:83:6a:dc:
         5c:58:08:11:a3:96:20:8e:a8:c5:ee:24:31:ba:98:5a:b5:06:
         b1:cf:bc:c7:8e:61:f6:3b:10:d3:f4:fa:76:65:4c:56:e7:a9:
         6a:1b:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:21:24 2025 by rpki-client