This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
File:                     _D34EL_Cm_HPvwqvpWOX65tMq3c.mft (raw, json)
Hash identifier:          C3xTEe1uDuoQiotE38vfd+HhmKklyl6+Y33z+fVNCDQ=
Subject key identifier:   0D:29:F8:9E:35:EE:72:3A:3E:3F:59:04:09:70:8A:C6:CF:D8:61:A7
Authority key identifier: FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77
Certificate issuer:       /CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
Certificate serial:       0BBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
Manifest number:          0BB8
Signing time:             Sat 06 Dec 2025 18:14:42 +0000
Manifest this update:     Sat 06 Dec 2025 18:14:42 +0000
Manifest next update:     Sat 13 Dec 2025 18:14:42 +0000
Files and hashes:         1: _D34EL_Cm_HPvwqvpWOX65tMq3c.crl (hash: NLwFQEa8abPoUHGQAEhubRZC+uMqeOz98Nmgx/PaNz0=)
                          2: EDA2987A32A211EA87A1561DC4F9AE02.roa (hash: v4jt1ZjQNLJGtpWh7ObVJNt/5KBfDnWWuYACdukBsQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl
                          rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3007 (0xbbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916269D, serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
        Validity
            Not Before: Dec  6 18:14:42 2025 GMT
            Not After : Dec 13 18:14:42 2025 GMT
        Subject: CN=69347292-0feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:eb:97:07:87:58:57:1f:ba:2e:fc:f7:30:
                    79:11:d2:e6:fc:ca:96:1d:f5:41:9a:77:b2:2b:e1:
                    69:bd:e5:c4:ef:56:6e:7e:c1:2b:b0:9f:20:67:29:
                    72:e8:9f:2e:61:4a:08:0c:b6:3d:e4:a7:78:2a:c6:
                    d3:df:47:dd:65:31:e5:0c:b5:cc:17:43:ad:00:dc:
                    a4:af:79:53:ff:ad:0c:a7:6d:1a:99:4b:ec:4d:77:
                    d4:37:8a:12:a7:c4:1a:13:97:2a:fa:4c:e0:4e:8d:
                    46:06:bf:b2:f2:97:ed:64:43:37:0a:26:1e:54:1c:
                    27:5a:0a:59:45:76:90:30:7d:48:68:1b:33:ac:b0:
                    85:27:3c:7c:54:45:85:d0:78:79:66:3b:5a:2e:cb:
                    0b:fd:19:6f:df:af:57:0d:3a:35:01:72:81:b5:5e:
                    46:e0:44:1f:72:bc:8e:70:c7:41:5a:9c:e0:dc:f7:
                    38:2a:c1:dc:c1:ab:80:7d:c1:fe:30:b0:e5:c2:0e:
                    69:2d:e8:b6:b2:d2:8e:6e:c6:3c:8a:48:cb:27:30:
                    a3:b5:3e:ae:2f:09:8a:d6:31:26:cf:b1:8f:4b:d4:
                    14:0e:4b:af:48:97:ff:78:f0:68:99:9a:80:e2:d6:
                    db:5f:6b:7a:c7:49:1e:d6:52:64:26:a7:e5:16:30:
                    6f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:29:F8:9E:35:EE:72:3A:3E:3F:59:04:09:70:8A:C6:CF:D8:61:A7
            X509v3 Authority Key Identifier:
                keyid:FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:e9:f9:45:09:bf:09:7a:4f:96:e4:20:7b:45:51:ea:24:
         0d:4a:8f:06:77:e0:b2:38:3f:08:03:5e:1e:58:2f:6f:5d:bd:
         8f:04:87:92:a8:35:8c:2e:56:b3:97:3a:5d:4f:af:97:0e:8b:
         f0:d0:1d:cf:d4:a3:7c:94:aa:4a:11:74:97:ba:c3:9e:ad:80:
         90:c2:d4:99:47:e7:a5:8c:78:9d:22:d8:4b:ea:10:8a:3e:bb:
         79:e6:7b:32:c7:eb:ae:6f:50:6f:42:98:ca:01:f2:62:3d:0a:
         8e:27:ec:45:02:0d:c3:e3:89:8f:25:8e:5d:56:c3:e8:0e:fd:
         5b:e5:76:07:f2:61:4a:3a:dd:be:4e:7b:82:3d:6b:50:03:17:
         da:ca:20:ec:1e:49:f0:8a:b9:eb:49:6c:b7:af:a6:dd:d1:e0:
         84:98:21:be:4f:69:9c:b9:41:a3:ea:83:d6:42:b3:76:6d:56:
         23:0c:c5:bb:c3:93:18:cd:d3:a2:49:9c:78:17:2c:c2:45:f6:
         9c:d9:07:fd:77:2d:6a:9a:5d:aa:5b:75:2b:a1:ae:03:fc:be:
         af:3d:0d:93:cb:41:ac:51:d3:d7:6c:52:46:30:2f:c6:bc:b7:
         60:d5:f4:5d:4b:79:08:df:b3:16:16:5e:a3:0e:8f:f4:d8:29:
         9b:20:dd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:38 2025 by rpki-client