This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
File:                     SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json)
Hash identifier:          mUSMjC6c5NL2rMxeBOPznLBqsE1fvrldsT9QZ4u9yII=
Subject key identifier:   26:3A:52:53:4E:EA:33:D7:23:FB:CC:28:70:91:92:CD:9C:26:F8:C7
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Certificate issuer:       /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial:       0270
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
Manifest number:          025A
Signing time:             Fri 05 Dec 2025 00:06:00 +0000
Manifest this update:     Fri 05 Dec 2025 00:06:00 +0000
Manifest next update:     Fri 12 Dec 2025 00:06:00 +0000
Files and hashes:         1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: fWlt9G6thArWTKVI5VbDBrkYRCOEOnuIdGIlFpgVQ/8=)
                          2: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: n/PvsW9zebDkTZCp50BwuzM/P+LxZ4UecYhiS0C/Z2s=)
                          3: A4B9732E372211F088B77741C4F9AE02.roa (hash: 0dSvCmKLef9Oa4TUk6FVx6l4EnK1M32ajCwnmpc9ysE=)
                          4: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: TDnPqTOeUPSwecuAJae6VdxJudb0os3v67TLQq2OSMs=)
                          5: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: QKPxnsl5W/cKLCZuMQFferj3l2oedmhBT9kPnPZhJg4=)
                          6: C1ECF984D07411F0B0B35C27C4F9AE02.roa (hash: Zx7rYsejQ1YlFVO9cuwtdX2i5qCKmmBnnVOVbWpVt7A=)
                          7: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: o8g8BiOgmVHVzswzRKLrO3Y0f0RfD3gZqIklITdkjzE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
        Validity
            Not Before: Dec  5 00:06:00 2025 GMT
            Not After : Dec 12 00:06:00 2025 GMT
        Subject: CN=693221e8-aa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bf:13:92:9c:16:49:0d:43:9d:77:31:68:e1:
                    4a:f7:6f:ac:85:96:e0:7a:df:d4:82:13:ff:62:cb:
                    b5:c7:b2:0d:0b:8d:93:56:56:6e:71:19:63:3f:32:
                    08:42:51:92:02:5f:69:77:54:c7:2e:0f:5d:0a:f1:
                    34:fb:dc:68:05:7a:a5:0e:03:e6:93:c2:4b:ae:9b:
                    2c:d3:dd:5a:84:84:09:c1:00:04:f2:48:d0:1e:4a:
                    14:7e:82:39:db:da:01:f1:07:8f:87:d9:3a:96:e1:
                    78:e5:8b:5e:6e:37:9d:30:3d:c5:38:99:a7:e5:af:
                    7b:e8:b6:7c:3e:6c:aa:47:86:f0:80:df:cb:f6:47:
                    e1:d2:53:7d:1b:10:9d:f4:ed:fd:f9:0e:ba:ca:af:
                    77:e3:e7:67:fa:ec:49:a5:8d:da:70:ac:e7:a2:30:
                    14:48:29:5f:3a:6d:17:06:23:f4:9f:4f:58:e8:a1:
                    b3:66:dc:b3:39:68:9f:88:56:65:d6:78:a2:52:56:
                    93:6d:11:e4:6d:66:23:21:19:aa:8d:b7:57:04:fb:
                    98:fc:e9:ea:e1:34:74:ac:cf:fb:d2:2b:b8:d4:52:
                    c2:76:c5:05:09:2b:d8:73:49:a7:66:5f:00:7b:79:
                    b4:4f:e6:43:0c:9e:93:d8:50:b8:6e:63:b6:12:43:
                    16:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3A:52:53:4E:EA:33:D7:23:FB:CC:28:70:91:92:CD:9C:26:F8:C7
            X509v3 Authority Key Identifier:
                keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c2:d7:b9:3b:7a:ab:c5:4e:77:a8:3b:40:61:bd:eb:c2:22:
         13:9c:aa:2e:39:80:2f:fa:42:01:27:10:12:b9:5b:82:23:1c:
         39:6b:81:bc:c3:dc:d8:0b:5f:19:74:23:a2:b3:84:f1:77:fc:
         06:29:68:88:39:3d:fb:e9:ed:5e:4b:8e:c4:63:ab:7c:4e:77:
         9c:c3:ad:3b:63:04:96:4c:8e:fe:79:73:35:90:a9:48:24:c6:
         ff:f0:7b:29:31:d2:59:b7:c8:e6:6b:77:bc:7e:3c:d5:7e:3b:
         44:ec:6e:e8:9a:53:65:99:49:0e:f5:46:e4:8c:f5:62:45:42:
         a9:7b:02:ef:f2:13:92:49:5b:df:02:60:10:f4:80:c8:58:85:
         b2:89:76:b7:29:a3:59:56:7a:19:85:64:5d:98:ae:f0:22:33:
         f6:96:4e:61:5c:43:b0:c5:13:a1:f2:53:90:2d:ba:0b:2f:ad:
         66:01:74:c9:2f:71:04:6a:04:76:e2:2f:15:75:a1:0e:65:98:
         00:0c:88:08:75:53:95:fe:87:cc:ff:5c:5f:f1:ac:08:f8:60:
         f2:c1:c8:4d:04:d2:61:b7:7c:29:cd:ce:3b:2d:54:b9:e7:e9:
         50:a3:23:8b:11:48:79:fa:01:20:ad:b8:60:bb:e6:a5:a5:66:
         0c:a0:6e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:35:20 2025 by rpki-client