This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft
File:                     DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft (raw, json)
Hash identifier:          +SPu/k2+oDSaL/PA/GRuE3fKD5kFc6RUhkYnRoA8UpE=
Subject key identifier:   D1:C2:AA:48:D5:70:31:EE:9B:D3:BF:8E:67:83:75:E9:8E:18:8E:45
Authority key identifier: 0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15
Certificate issuer:       /CN=A9153838/serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15
Certificate serial:       03EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft
Manifest number:          03E4
Signing time:             Thu 04 Dec 2025 23:01:59 +0000
Manifest this update:     Thu 04 Dec 2025 23:01:59 +0000
Manifest next update:     Thu 11 Dec 2025 23:01:59 +0000
Files and hashes:         1: DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl (hash: ePoB4xON+NuYLd9M+bL6vWM7nQGgkGIY4AcemE+uBe8=)
                          2: E747F80C6AA411EDB76B7A36C4F9AE02.roa (hash: 6slw6AzF/TBA4zaE5Bi/NQ4GSVCA5A44xBVnLHfu5qo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl
                          rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1004 (0x3ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153838, serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15
        Validity
            Not Before: Dec  4 23:01:59 2025 GMT
            Not After : Dec 11 23:01:59 2025 GMT
        Subject: CN=693212e7-8850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:94:85:f1:fc:75:67:f1:e9:a4:82:ba:ff:
                    5e:94:a5:d3:2f:64:03:04:cc:a1:11:68:ed:ca:60:
                    56:bc:22:c2:cf:77:de:a6:9f:37:1d:7c:32:ee:5e:
                    c4:db:a6:09:2a:d1:83:c0:1c:e8:fb:af:73:01:f1:
                    d4:d0:8b:59:01:db:81:d5:17:13:92:a9:b5:b4:27:
                    71:9a:0d:69:39:53:21:f0:7e:31:0a:50:db:75:cd:
                    b5:ed:54:e1:2d:04:7d:0f:d8:80:95:0f:2e:66:3f:
                    76:42:57:f1:3b:03:9c:cb:1c:98:38:f8:5b:3e:8a:
                    8a:7a:40:8d:85:86:1d:7d:f6:d7:63:73:ca:14:0f:
                    ab:4a:31:de:39:3b:00:09:69:37:34:60:79:af:00:
                    df:27:d2:cf:67:84:83:65:1d:e5:53:ce:84:31:df:
                    a3:70:79:2c:d3:69:6a:37:6d:14:a8:4c:96:2c:3d:
                    17:36:4f:9b:65:68:ff:fe:ee:d1:1c:7b:d2:dc:99:
                    ae:52:e8:33:4b:eb:34:50:91:e4:d9:92:f8:0a:3d:
                    ef:28:9f:d1:cc:bc:f6:2b:a4:30:b0:28:83:b4:59:
                    db:13:70:50:a3:e7:63:de:30:a9:a5:fa:2c:f4:8a:
                    ec:14:53:e7:d4:c8:d5:0e:e9:5d:27:26:8f:45:90:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C2:AA:48:D5:70:31:EE:9B:D3:BF:8E:67:83:75:E9:8E:18:8E:45
            X509v3 Authority Key Identifier:
                keyid:0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:98:4b:68:61:6d:17:5e:f3:07:cf:11:81:50:a6:c4:c9:
         91:e2:3b:b7:6e:5e:c4:bf:57:54:3a:1d:fc:e1:53:40:bd:6a:
         67:1b:f6:2f:c4:76:9b:4c:a6:9d:bf:4b:bb:57:55:ec:ec:1e:
         97:4e:bb:30:23:92:2e:18:9b:b7:8a:72:1b:4b:b3:aa:d7:5d:
         8f:d0:cf:d9:cc:70:cd:19:50:8d:bb:0f:93:fd:25:9d:a5:61:
         9f:8b:c0:65:77:06:66:19:a5:08:30:68:ac:1e:4b:e9:a1:32:
         04:25:a6:09:24:5d:e7:5e:fe:af:4b:92:d6:6b:f1:7c:a7:3d:
         63:90:f1:82:46:7a:aa:74:f4:e1:a6:8f:6c:33:92:8d:fc:b7:
         fc:5f:b2:aa:fe:17:0c:f2:2e:74:7d:4a:fd:a1:9c:d4:98:e9:
         cb:a5:4f:28:fa:8c:71:7c:2a:5c:f9:85:a7:52:41:ed:45:b8:
         ad:17:b1:14:8e:85:4c:6b:98:a4:4b:8b:79:53:9c:81:18:df:
         b5:b9:3f:4c:17:4b:2d:06:2b:4a:a0:8e:49:d2:ab:73:b1:ee:
         80:5c:62:c5:e6:d7:7f:88:b6:4c:a0:c9:34:2f:91:99:07:60:
         15:da:da:a7:36:20:66:5b:b7:75:10:3e:48:5a:dd:6f:09:41:
         d3:86:cc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:17 2025 by rpki-client