This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
File:                     cM1M0T4uN35eXDervHl-7ea2Yhs.mft (raw, json)
Hash identifier:          lPWCnhjxmTaKBRs0lKCztpGADkvYuzDV+hFVHDnpOBg=
Subject key identifier:   A7:29:20:B4:65:E4:A8:31:55:45:C9:A7:91:89:BB:1D:AC:33:78:BA
Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B
Certificate issuer:       /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
Certificate serial:       02F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
Manifest number:          02F3
Signing time:             Thu 04 Dec 2025 23:37:19 +0000
Manifest this update:     Thu 04 Dec 2025 23:37:18 +0000
Manifest next update:     Thu 11 Dec 2025 23:37:18 +0000
Files and hashes:         1: cM1M0T4uN35eXDervHl-7ea2Yhs.crl (hash: I7S7I4X6Q9iMyHtvlI9pkSJP0wjkNM3D6rU2Hy3Md/4=)
                          2: BA5354A4044211EDBB686665C4F9AE02.roa (hash: Lf0VfH0avpxECSJrg7abpQt5YjeQO5xWcAxZQuKd0tY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl
                          rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F338, serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
        Validity
            Not Before: Dec  4 23:37:18 2025 GMT
            Not After : Dec 11 23:37:18 2025 GMT
        Subject: CN=69321b2e-dd10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:6b:01:77:30:25:b0:c4:1a:b6:1d:0b:3a:
                    cb:dd:46:bc:14:8e:a1:aa:6b:81:d7:28:5b:c4:cd:
                    56:52:80:dd:9a:d7:30:5c:51:c8:c7:bd:e3:f7:31:
                    76:b4:0c:47:9d:47:67:c5:23:f4:40:62:42:86:2b:
                    da:64:3c:aa:a0:64:f5:ab:bd:ad:39:7a:eb:4e:2f:
                    07:86:a2:37:26:15:4f:ed:e0:f4:eb:1f:c4:5f:94:
                    59:e1:e5:91:f5:84:58:99:3b:bf:9e:23:39:6a:b0:
                    2a:1e:d8:0b:70:17:8a:ea:cf:09:cf:05:64:5e:c7:
                    21:66:ac:b8:ac:ee:27:f1:8a:b0:74:73:57:df:83:
                    0b:6f:19:82:01:55:58:bd:3a:02:d2:0e:53:27:b1:
                    3f:b5:12:41:5d:19:e8:c6:34:bc:83:fb:89:ab:fd:
                    2e:6e:33:af:db:49:83:a4:60:e8:89:78:3a:12:d8:
                    3a:08:7d:32:05:5c:92:ff:ff:9e:f8:7a:c1:16:2b:
                    95:f7:e8:ea:c5:b6:24:08:9a:96:93:bc:fe:90:95:
                    85:6b:4c:b1:9e:ca:c1:eb:64:57:8e:ee:d1:4a:21:
                    7e:b6:72:fe:74:44:a3:6c:33:21:d1:c9:47:ad:c8:
                    b7:33:ba:cf:ef:69:2a:e9:02:80:e8:14:84:6f:d9:
                    57:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:29:20:B4:65:E4:A8:31:55:45:C9:A7:91:89:BB:1D:AC:33:78:BA
            X509v3 Authority Key Identifier:
                keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f0:6b:b5:24:54:b6:72:02:1e:92:95:69:94:ed:fb:5c:47:
         23:02:19:ae:2a:3b:3d:e5:a1:64:b4:f3:c4:d7:ad:f7:f6:d9:
         f8:03:bf:78:63:f9:62:b7:e7:c6:d8:b1:2b:af:79:8a:92:59:
         18:63:33:d1:06:21:30:62:e0:6d:34:1f:b6:3a:83:d3:25:26:
         70:5a:12:00:1b:97:a4:3b:a6:49:5c:6d:ec:6a:97:88:f5:49:
         9d:51:f2:f6:20:7e:34:b7:25:68:e0:58:8c:0c:57:88:f7:40:
         8c:23:03:4e:2c:cc:f7:d1:52:6e:c6:bc:c2:c2:1c:40:61:79:
         8c:fc:f3:f2:b9:03:25:93:9c:bf:72:8a:a6:69:c8:7b:83:8c:
         66:bb:a5:e6:e1:de:a4:d6:40:88:2d:b3:b2:4d:9a:d5:73:99:
         76:85:ca:41:9f:79:d7:ba:b4:97:51:30:a5:fb:37:c7:ff:f4:
         23:cd:b1:8b:c2:a7:fc:38:85:90:26:d6:bf:3e:5e:67:85:d3:
         fc:3d:da:a5:64:66:de:17:14:23:8a:c4:61:fa:98:d1:4c:5d:
         ef:b2:7d:54:79:a7:cf:41:71:d0:97:c6:78:f3:48:d2:7e:ce:
         f6:c6:f3:a3:11:94:66:13:1d:98:f4:88:79:f3:a7:64:0d:dd:
         36:4c:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:17 2025 by rpki-client