This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File:                     p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier:          qxxg8LvkHhFPrPCHkmTqs8ZL2FJ4F8JXpTXkVAmEJBA=
Subject key identifier:   1B:77:73:B0:39:64:B7:86:1A:F9:11:D2:A2:E3:75:52:08:76:BC:3C
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer:       /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number:          011D
Signing time:             Fri 05 Dec 2025 02:50:51 +0000
Manifest this update:     Fri 05 Dec 2025 02:50:50 +0000
Manifest next update:     Fri 12 Dec 2025 02:50:50 +0000
Files and hashes:         1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: EittlXLE11nV+4DPKmQKnT9Lw8bExqmHRXjpeH5Q6lo=)
                          2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=)
                          3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QIMDScliq15LdkPQsPXmCzkeCzTbM6NI7el8bqF5qD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
                          rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
        Validity
            Not Before: Dec  5 02:50:50 2025 GMT
            Not After : Dec 12 02:50:50 2025 GMT
        Subject: CN=6932488b-51e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:f5:76:50:a0:f4:87:0a:de:27:77:a7:34:
                    27:b0:b2:5e:e5:60:e7:31:a2:df:4d:d4:da:81:46:
                    97:2a:81:e8:a0:46:78:08:75:bc:b9:27:1a:39:41:
                    18:a2:8c:77:c7:7d:51:c8:d8:de:52:e6:d6:99:42:
                    df:ad:1f:81:05:61:4e:17:91:bd:66:4c:08:2e:23:
                    28:fc:f0:b1:34:e9:d3:5b:65:a6:5f:9d:f2:2e:c5:
                    33:76:87:8e:a6:a0:1b:2a:17:20:73:c4:7f:69:80:
                    40:6f:0d:7e:50:11:69:55:b3:3f:1c:33:02:b5:97:
                    dc:22:92:d9:44:bb:2b:89:a3:d3:22:78:7d:9e:68:
                    7e:51:81:62:c4:f2:26:b4:5b:f8:b4:af:b0:50:21:
                    55:a1:c0:e0:c4:5d:19:a2:de:19:78:db:0e:4c:1b:
                    ba:29:33:89:7c:d7:8d:18:1b:61:cb:0b:59:7d:87:
                    27:50:16:a5:7e:fc:e7:c5:02:cf:0e:fb:1e:8d:b6:
                    dc:97:ce:ba:ff:d5:4d:de:a7:01:f3:9d:de:b1:a2:
                    68:91:b3:c2:86:57:65:c4:55:1d:ae:ca:e8:77:c7:
                    3c:c6:82:54:6b:89:37:f4:71:39:70:4e:6f:3c:7e:
                    af:81:7d:8c:c0:c2:e4:0c:f2:57:26:b3:9f:71:fe:
                    a0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:77:73:B0:39:64:B7:86:1A:F9:11:D2:A2:E3:75:52:08:76:BC:3C
            X509v3 Authority Key Identifier:
                keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:06:fc:a6:20:9e:b0:7b:b4:bf:74:f6:36:bc:58:ae:bf:8d:
         7f:dd:59:ef:ae:33:eb:8f:8d:c2:aa:52:3e:d0:7c:fc:9f:b0:
         bf:79:48:4a:43:7d:09:44:81:8b:ca:4b:44:00:6a:1e:dc:bc:
         de:cf:42:c9:4e:3f:06:04:39:47:36:4b:9e:33:08:69:81:fb:
         3e:c6:36:03:2b:5d:eb:ba:f1:22:7e:6b:47:5b:90:a4:b3:9e:
         41:6d:cd:56:4e:0b:06:fa:da:a0:a0:0b:e4:5d:ef:cd:e1:77:
         51:6d:c5:97:db:b6:17:24:c8:70:8c:e2:df:b1:0b:5c:5b:5f:
         b0:c4:f0:41:2a:66:9c:8a:b3:3e:1d:3e:f6:7b:ad:e3:27:6b:
         63:85:fa:61:61:61:bf:e0:18:9e:3d:8b:38:96:c2:ee:d0:9e:
         42:e4:a6:c4:de:2e:29:09:ed:b0:bd:5c:73:cc:76:35:86:0f:
         b6:3a:0a:2b:92:c4:13:c8:55:5a:81:ae:d7:2c:eb:7d:38:23:
         b0:9a:35:88:dc:5a:4b:43:70:4e:9f:6b:e7:01:57:3f:30:95:
         bd:ed:67:21:0b:dc:2b:e6:52:84:8e:35:ba:7a:28:16:53:e9:
         82:46:7e:e1:34:84:d9:74:f0:7b:0a:e4:1e:36:95:ec:d3:6c:
         39:59:74:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:38:48 2025 by rpki-client