This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
File:                     Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json)
Hash identifier:          rhMJhW42bjww7bBIqQyaYOEKmR/b7uBeMH8xSeepYMU=
Subject key identifier:   F4:DA:8A:48:1B:26:C6:82:F0:0E:BA:8E:DE:24:A5:55:A8:E8:41:EE
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Certificate issuer:       /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial:       077E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
Manifest number:          0776
Signing time:             Sat 06 Dec 2025 20:37:02 +0000
Manifest this update:     Sat 06 Dec 2025 20:37:02 +0000
Manifest next update:     Sat 13 Dec 2025 20:37:02 +0000
Files and hashes:         1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: lGw/HRxwTsWdjMcKpH3Om5F8mF2OCr4h9NNW0MFqwRk=)
                          2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: +6eYgOq04WhTg3h8FMeOxvxeZ5FD+RCHy2rKYTsWlYc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
                          rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1918 (0x77e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
        Validity
            Not Before: Dec  6 20:37:02 2025 GMT
            Not After : Dec 13 20:37:02 2025 GMT
        Subject: CN=693493ee-ccb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:3e:3f:1e:e9:1d:ee:d7:06:0c:7b:26:cd:
                    fe:fa:eb:a9:96:22:18:84:af:cc:f6:db:da:d4:68:
                    90:92:42:a8:4b:99:d9:b2:77:eb:eb:cb:ae:1c:fe:
                    68:2a:d0:4d:24:12:56:05:57:b0:0d:ce:dd:a0:e5:
                    94:bf:2f:01:a8:16:09:88:51:ea:d4:75:f9:66:48:
                    3e:de:21:6d:19:0f:dd:58:ff:6d:e7:32:a8:39:7d:
                    34:4f:0a:24:27:f0:93:bd:17:f5:9f:00:1c:7b:c0:
                    4f:30:a9:0d:1c:ba:62:c4:a6:38:58:5a:5d:00:05:
                    6b:ff:0c:38:0c:65:1e:20:3a:29:b5:02:46:8f:e1:
                    b2:65:1a:f9:f7:4c:bf:a0:f2:34:7e:bb:7a:9a:76:
                    b6:61:10:8f:13:c1:83:06:ed:21:b7:90:0f:d1:eb:
                    cc:56:18:f5:43:86:d2:fd:0c:e9:f3:98:43:dc:eb:
                    4e:ee:48:82:66:3e:22:cb:22:ff:f0:58:9f:6d:63:
                    d8:f7:ce:92:90:ac:6a:6f:b1:76:31:d5:15:ac:a0:
                    b1:b9:0c:d6:9b:a2:bd:46:32:9b:74:79:b5:e1:f2:
                    a0:f9:64:f8:12:ac:4d:52:3e:75:76:e5:8b:74:3b:
                    71:a9:78:5c:8e:bb:31:fd:7e:02:11:2d:5e:df:9e:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DA:8A:48:1B:26:C6:82:F0:0E:BA:8E:DE:24:A5:55:A8:E8:41:EE
            X509v3 Authority Key Identifier:
                keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:2d:01:a6:e5:f7:fa:df:e2:be:89:71:17:17:3c:1e:f8:77:
         46:0c:43:e6:0d:1a:2f:a0:ec:4b:7e:44:93:53:0d:9e:5a:b0:
         bf:87:c9:7c:74:1a:c4:8d:6e:cf:8e:37:1c:d2:ae:e6:76:a6:
         9a:29:78:89:d7:17:0c:15:e1:1b:14:60:15:1f:b2:da:3f:9b:
         49:2c:6e:91:fc:c0:1b:ad:6d:ba:dd:f8:2a:63:d9:ef:cf:e8:
         cd:44:5f:91:2c:5f:0a:4f:b5:f0:f3:9d:e8:73:bd:dd:4e:9a:
         a6:7b:87:53:eb:bd:ad:ea:f4:c3:5e:00:46:62:f0:67:b0:04:
         50:39:6d:84:f1:86:04:41:28:a7:f1:1e:58:bd:56:4f:67:37:
         e9:cd:bd:3d:3e:0d:12:ab:23:a0:d5:ee:de:f4:9e:d8:f6:36:
         e1:55:57:a3:59:16:ec:81:55:8a:77:f8:09:e6:24:e9:25:e6:
         25:ca:97:ae:1b:27:c5:0b:16:9b:62:9e:59:24:07:24:8f:1f:
         4f:aa:c2:5d:28:00:59:c2:02:ed:5c:1e:d1:9d:2b:54:49:44:
         f3:9a:fb:d3:02:f0:75:a7:47:8d:a3:85:ae:92:2f:f9:7c:bf:
         3f:27:be:12:fe:a4:cb:c0:77:8e:86:0b:b4:73:65:04:ba:c1:
         86:08:e9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:53:55 2025 by rpki-client