This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
File:                     t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json)
Hash identifier:          mMaD/BkrsZ5geabgArJU94cVKRMZkeqYsWVTBHnUu+k=
Subject key identifier:   D5:F3:F0:3A:40:8E:14:29:AD:19:A1:81:8A:98:F4:6D:26:74:D3:E9
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Certificate issuer:       /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial:       18C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
Manifest number:          18B3
Signing time:             Sat 06 Dec 2025 16:05:37 +0000
Manifest this update:     Sat 06 Dec 2025 16:05:36 +0000
Manifest next update:     Sat 13 Dec 2025 16:05:36 +0000
Files and hashes:         1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: 9QYQiJpoeDxqsvajMieOjvEtO9D0HzncS9+7xaPJ/BM=)
                          2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: Lm98gfuE4nx/90/5gHuI/T5p7zlVxbDFyDvflUZQMdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
                          rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6341 (0x18c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
        Validity
            Not Before: Dec  6 16:05:36 2025 GMT
            Not After : Dec 13 16:05:36 2025 GMT
        Subject: CN=69345450-ca92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9c:ed:fe:23:28:aa:b0:aa:c2:b6:b5:05:9e:
                    3b:f1:79:35:b0:88:00:aa:f1:dd:bc:89:d2:f7:49:
                    5b:b8:e3:c2:23:1a:20:29:d3:ed:e4:84:9b:7f:e6:
                    1a:a5:bb:fe:ac:4b:8b:86:7d:81:ed:ca:e7:da:b5:
                    a7:d8:c8:98:74:9d:e1:d2:bd:9d:2c:95:00:34:d3:
                    44:44:75:44:87:b4:46:4d:f5:12:dd:79:22:a1:54:
                    04:18:19:a7:94:5d:50:86:fa:52:5d:d1:ac:fc:3a:
                    c4:de:af:f1:6a:02:a3:84:06:11:f3:15:42:9c:12:
                    c4:38:7c:83:9a:65:06:20:ec:41:48:c3:da:e3:45:
                    a3:da:58:de:9c:a9:e5:d8:4f:8c:31:81:9c:74:a9:
                    b8:6d:24:87:db:67:6d:c9:b5:db:17:12:1e:42:63:
                    9f:a6:18:a6:6f:d0:87:74:ee:43:c8:6c:90:29:5a:
                    2c:b8:39:34:af:a9:b6:57:c0:a9:5d:65:92:f3:81:
                    bb:fe:c5:dc:60:bd:a6:d1:32:55:fd:24:50:f1:f4:
                    55:cd:a5:63:d3:25:ed:45:d0:80:c7:b1:71:57:ec:
                    f8:90:b7:d8:13:ba:67:bf:3f:ef:d0:3d:c7:74:b8:
                    d9:1b:cb:4a:89:04:2b:36:7c:ed:a9:6a:0f:a1:0b:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F3:F0:3A:40:8E:14:29:AD:19:A1:81:8A:98:F4:6D:26:74:D3:E9
            X509v3 Authority Key Identifier:
                keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:5e:f3:1d:ec:56:dc:d2:46:80:12:10:0b:a9:17:91:3d:
         c1:e6:72:ee:cb:ef:1f:3a:29:f1:98:63:ee:87:50:80:9e:93:
         44:68:28:7b:b7:67:dc:0d:1d:8f:62:26:aa:cc:db:81:9f:61:
         af:2e:af:ad:cd:90:fa:27:ce:fd:a2:0e:b5:13:83:1f:7b:85:
         66:1e:07:79:ac:a0:5a:e4:57:9f:d1:8e:94:90:91:58:61:be:
         69:05:49:1d:75:66:6a:d2:3a:3b:92:a5:f3:bb:af:11:b1:12:
         e4:7a:48:32:27:4e:32:08:cb:4a:d9:d4:5b:a0:d2:9d:00:44:
         f1:d2:fd:2f:14:7c:a1:4f:83:aa:44:fe:ba:aa:16:3e:23:62:
         d1:1e:d5:1f:c4:45:aa:41:3b:5b:e2:9f:0d:c4:6f:35:35:ce:
         56:3e:03:2b:17:6d:50:03:6a:7f:c4:62:7a:3d:f6:31:db:d4:
         76:4b:ae:27:fb:15:0d:91:1c:5a:49:27:70:2a:ae:b4:4d:14:
         42:8d:42:f8:cd:59:9c:92:f2:1e:88:77:07:72:fb:d4:fd:31:
         d4:68:b5:a9:b9:d2:69:f8:a8:29:0f:10:ce:e0:3b:dd:b2:fd:
         54:4f:c6:86:53:a9:e8:d4:33:55:a2:1c:15:d5:a3:d1:cd:38:
         13:85:2a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:43:44 2025 by rpki-client