This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft
File:                     XoJBeVOzWp-LWaQuyUb00CTYd2s.mft (raw, json)
Hash identifier:          phC7RlayitlzvGS84v+iOr16YR6xqPDt+7j1KxW8wuY=
Subject key identifier:   2F:AD:83:53:B9:69:1F:FC:1C:45:D7:D5:29:C6:64:A1:97:49:AB:60
Authority key identifier: 5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B
Certificate issuer:       /CN=A915B2F1/serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B
Certificate serial:       06AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft
Manifest number:          06A4
Signing time:             Thu 04 Dec 2025 21:34:29 +0000
Manifest this update:     Thu 04 Dec 2025 21:34:29 +0000
Manifest next update:     Thu 11 Dec 2025 21:34:29 +0000
Files and hashes:         1: XoJBeVOzWp-LWaQuyUb00CTYd2s.crl (hash: /8LGRvNBcSVjnltDSTXzJL/M9Y7Lv66te8IPYFH0K/Y=)
                          2: 9378220A8DF211EBADEDD212C4F9AE02.roa (hash: dOkXr9s5Nrxus2+Q2/+y8BTJXZxJ08FaBHsyM0GID60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl
                          rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1706 (0x6aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B2F1, serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B
        Validity
            Not Before: Dec  4 21:34:29 2025 GMT
            Not After : Dec 11 21:34:29 2025 GMT
        Subject: CN=6931fe65-3c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:44:19:99:39:f9:f0:41:26:15:a9:78:c7:
                    de:ef:df:74:b4:11:de:a6:a8:2d:54:5e:6c:8a:22:
                    a9:08:50:ca:31:09:04:0e:24:cf:97:b5:7d:d1:f1:
                    b0:ff:0e:6f:f1:5d:25:fa:e5:10:19:f5:b5:96:ab:
                    79:ce:b6:dd:97:df:59:f2:cc:a5:0b:c1:12:6b:f3:
                    95:c9:37:e4:38:86:4e:b2:68:c1:9e:bc:6f:00:b2:
                    1d:02:4d:11:e2:4b:66:d7:66:bd:b1:39:da:67:dd:
                    86:2a:f0:af:4b:06:54:d4:4c:c6:00:4f:cc:b9:36:
                    6e:da:95:6a:6f:9c:08:11:e8:af:92:8c:8a:da:14:
                    21:0c:66:ef:5c:17:2a:7e:1e:2b:3e:81:52:a4:5f:
                    7f:6b:0c:3c:75:d1:b3:6a:41:15:2c:46:ac:c0:38:
                    de:f7:27:89:a0:aa:d7:60:5f:65:c5:4e:a4:13:ac:
                    41:fc:9f:27:bb:1c:70:ff:26:dd:0c:f6:4f:46:f0:
                    5d:60:e5:0c:f7:f5:56:64:d6:9d:ba:f8:14:07:a3:
                    0a:e0:5e:2e:99:f1:08:56:3f:e5:d9:0d:93:5c:ed:
                    a5:ce:f7:62:38:bb:04:0c:74:93:82:58:e0:9e:96:
                    52:0f:15:fc:41:a2:56:4d:d1:62:d1:8c:c9:2a:18:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AD:83:53:B9:69:1F:FC:1C:45:D7:D5:29:C6:64:A1:97:49:AB:60
            X509v3 Authority Key Identifier:
                keyid:5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7e:24:82:6e:06:4d:f0:28:c5:d5:ed:f4:2a:e5:ec:b1:46:
         2e:00:e9:9f:5b:d7:80:7c:d1:04:5d:f1:1e:21:af:db:96:f3:
         b8:e0:1b:47:84:cf:5c:64:3c:08:88:35:8a:e5:a6:da:c0:c7:
         ae:46:ad:43:c1:4a:bb:3c:bf:81:3f:96:fa:6f:58:1a:9d:ff:
         33:d0:4e:77:dc:72:78:f5:52:3e:46:c0:88:ae:cc:6d:5f:ad:
         01:8a:28:5d:48:1a:82:88:de:fd:66:36:3e:53:20:bf:14:ae:
         bd:ff:72:09:9d:5c:8c:25:be:be:9f:06:bc:56:e9:a8:92:73:
         d1:42:47:87:b4:5b:26:88:82:c7:01:52:f7:dc:63:bb:49:36:
         a1:80:c8:fc:61:8e:47:2f:e0:fa:4b:04:9b:0b:8a:ba:92:13:
         6a:5c:8b:7e:4e:5c:15:d1:35:6f:95:02:fa:1b:bf:5e:94:53:
         3c:d8:57:3e:eb:df:ff:15:d9:9d:a8:63:2d:e2:6a:5b:f3:a0:
         2e:d8:7d:ba:6a:51:9e:31:68:3c:4f:08:4d:a5:6c:e5:d8:7f:
         80:9d:19:09:35:dc:58:97:1f:f9:a4:f3:ab:cf:28:4e:cd:b2:
         78:08:a4:4c:c9:46:d5:40:1b:98:97:57:36:34:dd:5c:e4:b0:
         f8:29:71:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:05:28 2025 by rpki-client