This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
File:                     DGlwyrnfjpvRDhw-kYkaCafojCA.mft (raw, json)
Hash identifier:          b3pU1UakHV+TMOvB/8Qtodr237ioJn31dwHGxhl6cEY=
Subject key identifier:   12:01:AA:61:5E:79:34:82:D3:39:C0:19:C6:AB:BF:26:17:9C:B7:60
Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
Certificate issuer:       /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
Manifest number:          AF
Signing time:             Fri 05 Dec 2025 03:19:09 +0000
Manifest this update:     Fri 05 Dec 2025 03:19:08 +0000
Manifest next update:     Fri 12 Dec 2025 03:19:07 +0000
Files and hashes:         1: DGlwyrnfjpvRDhw-kYkaCafojCA.crl (hash: zND9ERX7tvarp9SYBbnHzj/gI91dXeQHlNNuKBT8t+Y=)
                          2: D1C1AFB2135511F0976BA50CC4F9AE02.roa (hash: xHWD/+6Z6mOfeTNp4+pdNaNQc1T99Xc2O7Zqfmln3YE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
        Validity
            Not Before: Dec  5 03:19:08 2025 GMT
            Not After : Dec 12 03:19:07 2025 GMT
        Subject: CN=69324f2c-e172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8f:34:f9:44:9b:e3:1c:1f:7e:c4:a2:2a:79:
                    5e:aa:ab:00:6b:c4:33:b1:14:f0:75:37:82:0b:c4:
                    2d:47:24:4d:c9:c6:37:ca:6a:bd:28:dc:46:d2:a3:
                    5c:5f:39:11:67:b9:ab:3a:2f:f1:d5:01:3c:8f:0b:
                    fa:4e:6f:d2:a7:8f:17:75:44:d4:c6:47:59:da:26:
                    ed:59:e7:6a:84:96:fa:77:00:42:04:cc:61:e5:df:
                    e7:88:fb:61:78:8e:b0:8d:9a:ad:bf:4d:42:f5:ec:
                    17:5b:fb:6a:1d:d1:5d:7d:0f:de:2b:fc:ef:62:49:
                    10:d6:0a:a6:2c:d0:96:24:3f:0b:55:18:91:cc:3d:
                    b3:91:e0:ff:19:a6:47:14:c7:76:08:0b:27:b8:26:
                    c7:9a:37:1d:49:6c:7f:3b:21:14:3d:1e:59:ad:7f:
                    fc:a5:c9:e5:db:a5:b7:3b:4d:14:4c:75:bb:e7:b2:
                    68:cb:f9:a4:7d:b3:34:ca:2b:0e:29:3e:1e:be:e7:
                    3f:d4:5a:35:14:d0:d2:f6:94:84:6c:45:c8:b1:ea:
                    fa:4c:f1:13:54:ea:73:25:79:cc:e5:dd:99:70:37:
                    aa:7f:59:ee:51:a4:3a:80:5b:6d:45:3c:e6:7f:28:
                    2a:c0:41:07:6f:c4:86:0b:8c:6f:96:a0:f7:37:dd:
                    f3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:01:AA:61:5E:79:34:82:D3:39:C0:19:C6:AB:BF:26:17:9C:B7:60
            X509v3 Authority Key Identifier:
                keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:61:59:98:7d:4c:67:e1:37:db:03:c6:0c:94:2e:f9:5d:49:
         74:77:ff:4d:ae:f5:39:b9:4a:4c:8a:e6:1b:91:e9:53:53:18:
         71:0c:72:f6:5a:96:6a:3d:21:19:c0:52:05:36:5c:fb:69:86:
         ab:df:7f:2a:aa:53:2d:32:78:7f:b4:b2:0e:f5:2e:2b:7d:13:
         7e:c6:36:56:d5:f5:e2:c1:cd:a8:67:27:fc:7a:d5:fa:5b:4e:
         67:2f:8c:15:0b:f0:8c:6b:23:f2:c4:9e:15:e6:73:de:2e:8d:
         cd:75:66:63:90:20:55:6f:06:f6:5c:5a:80:61:b1:ab:9e:49:
         42:5f:41:14:a0:94:c6:4e:fc:3c:23:f3:e0:6d:a9:6d:3d:7e:
         86:52:94:f8:15:ca:a3:c8:57:b0:fc:3e:63:0c:2b:a7:12:3c:
         0b:e6:54:f8:4b:f1:55:de:52:da:7c:bc:53:39:66:03:39:78:
         53:12:c7:41:cb:db:e7:19:f0:36:7f:73:e3:4a:13:40:ac:38:
         e4:5f:68:8b:36:91:7d:fa:75:aa:f1:5c:1b:cf:9c:26:6e:37:
         7c:59:ab:20:8c:4d:be:22:86:30:74:e2:7e:17:5a:71:2c:8c:
         5c:18:8a:e2:c7:89:57:42:0e:26:8e:52:bc:4a:da:21:6b:23:
         fe:66:0c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:47:01 2025 by rpki-client