This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
File:                     18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json)
Hash identifier:          Rv/jiXVlyQaGkiAOS1Eru79+nTLgSFIs3lK+Dj2WMy8=
Subject key identifier:   C8:9A:3F:CD:6A:E2:2D:45:E2:F8:85:78:8B:6F:00:00:31:BF:F8:8C
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Certificate issuer:       /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial:       03A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
Manifest number:          038F
Signing time:             Sat 06 Dec 2025 15:59:19 +0000
Manifest this update:     Sat 06 Dec 2025 15:59:19 +0000
Manifest next update:     Sat 13 Dec 2025 15:59:19 +0000
Files and hashes:         1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: xFAOiYYH68+QRBBIZOLIHYeD8Czey8WFOrEkhI3+6og=)
                          2: 6C330F2C7E3711F0BFE28E3AC4F9AE02.roa (hash: rRV3ULmc3s28UHX3IfHIa+Sp5XP4XAzVw9QLu0Fytsg=)
                          3: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (hash: 03Y5aZgZbiR8AXRbH0v7oX9h0nIRsdQvo8UEKJF+mQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
                          rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
        Validity
            Not Before: Dec  6 15:59:19 2025 GMT
            Not After : Dec 13 15:59:19 2025 GMT
        Subject: CN=693452d7-76b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:7e:e3:7f:4e:bb:d4:54:f0:d1:b7:d9:24:
                    7c:fb:4d:24:a4:38:5e:67:2e:33:64:ec:53:c5:b6:
                    7c:34:d5:96:d7:48:8d:a5:a8:8c:17:0f:da:cf:b6:
                    c1:00:25:1b:f6:fb:19:7b:4d:74:4e:81:9a:8b:98:
                    11:0a:36:98:28:9f:f5:e3:23:b8:62:1a:0b:09:5e:
                    f9:85:15:03:e8:0e:e9:15:11:ed:4b:b5:c1:91:96:
                    0f:8f:af:3d:1e:03:79:8d:42:2b:4b:59:8a:95:4d:
                    66:d2:fa:c5:05:85:ec:e1:ac:a1:7b:ee:95:d6:b8:
                    b1:74:b8:44:b4:7b:58:26:d9:2f:29:d9:e8:ad:6f:
                    0e:e2:ea:70:07:cc:f3:f4:61:2c:95:79:9d:1d:3d:
                    ea:b1:85:67:73:36:b5:a0:3f:67:0f:8a:ea:4a:30:
                    3a:bf:9e:fd:13:57:6c:53:e6:91:d8:30:24:70:9f:
                    b4:14:3b:85:cf:da:09:02:14:b9:a7:98:aa:af:3f:
                    40:79:13:36:4e:d2:f8:d9:b7:2b:49:e6:eb:66:70:
                    5f:9a:00:95:2d:4c:56:d2:7b:11:a0:fe:36:9c:d3:
                    38:7d:48:f2:c2:4d:57:71:d8:9b:ca:05:05:15:d1:
                    db:1b:f8:e2:a6:7d:4f:1f:df:6d:33:cf:8e:75:f4:
                    1d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9A:3F:CD:6A:E2:2D:45:E2:F8:85:78:8B:6F:00:00:31:BF:F8:8C
            X509v3 Authority Key Identifier:
                keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:98:17:35:19:f6:7d:65:45:95:51:a2:0b:10:a0:1e:be:dc:
         b3:b0:a6:5d:ff:46:ac:e7:6d:bc:9e:55:44:83:92:32:dd:38:
         38:1b:66:10:34:3c:b2:9a:c9:82:5e:db:27:d2:d0:bd:2d:02:
         b5:5a:0f:2f:0e:35:90:2f:ef:9a:b3:8c:74:4c:73:b9:f2:a0:
         e7:6e:70:37:27:a0:7b:08:7c:1e:85:e5:61:50:1b:c0:83:25:
         0c:55:29:3f:a5:78:69:6f:7e:c8:a9:b4:c7:26:36:4d:d5:77:
         da:d9:94:e5:0e:52:67:4a:2b:e9:26:fc:4a:4e:29:cd:30:3f:
         b6:fa:b6:c5:05:54:a2:34:2a:fb:9a:ed:48:d0:de:22:25:ed:
         d5:ac:88:35:87:d2:af:99:63:8d:75:0c:33:0e:8a:7a:cf:a8:
         a2:5d:b0:6e:b6:b9:22:d1:04:60:f1:c3:74:a2:14:36:6b:39:
         95:63:cd:bd:fb:30:81:69:80:ac:f8:43:a7:1e:6f:c4:bf:e9:
         e5:2e:c3:13:bb:cb:6d:81:a6:50:fe:cd:3f:0a:2d:f6:81:4a:
         fb:f6:21:6f:fb:aa:ac:c3:38:28:24:76:bb:e4:a0:6f:43:16:
         b1:ae:44:1a:ca:81:8e:7f:81:25:f8:b5:c5:10:b4:af:17:a1:
         01:5a:6b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:54:32 2025 by rpki-client