This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
File:                     V2eQJEzCknXBEjVv9iDyYg19YV4.mft (raw, json)
Hash identifier:          25Gl9RLoUI0S8+EwuqgAPsyJFl1sLnFN+GAwVn2Ibo0=
Subject key identifier:   47:A2:76:3F:47:8A:DE:34:EA:B9:23:C5:EC:18:91:84:D3:78:6D:F6
Authority key identifier: 57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E
Certificate issuer:       /CN=A916AC30/serialNumber=576790244CC29275C112356FF620F2620D7D615E
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
Manifest number:          FB
Signing time:             Fri 05 Dec 2025 14:43:37 +0000
Manifest this update:     Fri 05 Dec 2025 14:43:36 +0000
Manifest next update:     Fri 12 Dec 2025 14:43:36 +0000
Files and hashes:         1: V2eQJEzCknXBEjVv9iDyYg19YV4.crl (hash: GuE3WpgMy+kfuj3I8rSCoIV68wEEV8/yUucCGDNe/rs=)
                          2: 33A6DBFAD31C11EFA728D52FC4F9AE02.roa (hash: d+2E/HbLJ8pzF6OA60FF562YwoCx7bSVEy6bEbIl4YM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 14:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30, serialNumber=576790244CC29275C112356FF620F2620D7D615E
        Validity
            Not Before: Dec  5 14:43:36 2025 GMT
            Not After : Dec 12 14:43:36 2025 GMT
        Subject: CN=6932ef98-8a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:cc:46:2e:79:0c:45:d9:bd:72:5d:2a:d9:
                    58:05:af:94:06:28:54:87:1e:55:81:55:6f:27:d6:
                    5c:98:99:13:67:08:1d:8f:1b:e7:37:5c:db:02:41:
                    6d:68:82:88:a6:da:71:c2:dd:35:3b:09:75:16:d0:
                    4d:b5:2f:05:1f:da:9f:b1:d3:b2:54:09:c8:61:24:
                    02:e3:44:4f:d1:e5:be:27:d9:ac:82:ca:12:74:23:
                    4e:5b:f6:3c:35:fe:66:8e:8f:30:ca:6e:3b:a5:00:
                    91:3a:fd:39:a8:b6:f8:2e:39:11:a7:96:49:e1:40:
                    3a:fd:32:ff:b7:a4:ba:8a:08:4d:31:b0:14:1b:cf:
                    93:4e:02:dd:74:e4:a6:fc:bd:5b:77:1f:fc:f1:35:
                    b9:3d:69:de:02:ca:f2:db:96:90:0a:0f:62:0a:cd:
                    bc:f1:39:41:e0:81:9f:84:c0:ac:94:0d:63:aa:b7:
                    a4:5f:0b:9a:70:58:fe:11:91:05:e2:ce:77:96:a9:
                    98:54:e5:a5:04:40:99:e5:43:3e:28:aa:53:fd:15:
                    a0:51:c3:d8:9d:65:f8:0e:d5:e3:2a:d3:44:2e:57:
                    64:2d:77:48:22:34:9c:06:f1:6c:98:64:d4:e1:90:
                    09:3a:e3:5f:5b:1a:25:8b:ff:b8:e4:2d:1b:d8:e4:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A2:76:3F:47:8A:DE:34:EA:B9:23:C5:EC:18:91:84:D3:78:6D:F6
            X509v3 Authority Key Identifier:
                keyid:57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:21:e9:b2:1f:f2:67:2f:bc:a5:6f:df:9a:8d:24:5b:c1:05:
         bc:47:20:e3:c2:38:a4:3e:a7:1c:58:be:f3:6f:07:d5:90:64:
         d3:82:cb:c7:18:bf:5f:51:3d:b6:13:f7:40:a5:71:27:68:cb:
         a3:89:3f:82:09:eb:cb:b7:68:2c:22:83:9d:2a:d2:4b:51:36:
         8d:81:79:e6:79:85:ec:92:b3:5e:0c:f0:41:cf:1c:59:ef:2f:
         36:60:2d:96:74:c6:b3:52:34:bb:36:89:e3:05:e7:26:3f:ef:
         4b:86:81:cb:c6:7e:54:6d:f2:1b:bc:56:4d:24:83:69:4d:fe:
         3e:4d:b3:34:bd:66:52:15:25:a0:de:dd:5a:a2:48:c5:c0:5a:
         28:0e:f7:aa:55:4f:4a:ff:48:5c:b8:2f:f2:3f:e6:40:80:61:
         70:0e:b4:70:0f:7b:b4:24:d3:6d:0f:ab:93:ab:e1:ee:25:98:
         92:1d:70:22:1d:0f:b7:d9:d3:8b:98:05:50:80:2d:72:c4:ce:
         c2:20:8e:f8:64:1b:2c:fc:8c:98:3c:11:0a:26:93:c7:a0:42:
         17:da:e8:9f:fa:d6:6f:62:2d:ef:4c:04:3f:34:dc:c6:39:40:
         48:22:14:58:d5:40:5b:2d:1c:bf:97:68:a0:cd:db:a8:95:b6:
         26:f2:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:56 2025 by rpki-client