This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
File:                     ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json)
Hash identifier:          ZLI80BrcQL7o+5ALfIVfaivhX4/ztRS0nLyXE00Fwjs=
Subject key identifier:   3B:5D:D2:8C:4F:FA:34:1C:06:00:9D:49:95:99:DE:D0:5E:3B:49:D1
Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
Certificate issuer:       /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
Manifest number:          0183
Signing time:             Fri 05 Dec 2025 01:50:05 +0000
Manifest this update:     Fri 05 Dec 2025 01:50:05 +0000
Manifest next update:     Fri 12 Dec 2025 01:50:05 +0000
Files and hashes:         1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: N9y2+FMhQmX4DDN2fs2uBr6LrGjDQu3Gp6QTQa+pYkE=)
                          2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: gkpGu4s3lw8zurLXdvn6Zq+w59lx0+P+q37arJjTECg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
                          rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
        Validity
            Not Before: Dec  5 01:50:05 2025 GMT
            Not After : Dec 12 01:50:05 2025 GMT
        Subject: CN=69323a4d-2959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:ae:d9:d2:71:b6:ba:b0:c0:83:26:a6:05:
                    de:2f:8f:93:1f:c9:05:dd:41:8a:14:b6:56:35:09:
                    6e:c1:6c:c8:36:50:e2:82:04:8a:fc:5e:e0:0d:bd:
                    24:be:8e:e4:1c:3e:65:d2:4d:f5:2c:32:c0:d7:6a:
                    d7:1d:23:c7:27:25:9b:83:14:01:a8:2b:19:4d:bc:
                    97:db:1a:75:b5:a8:6d:fb:31:49:8b:85:db:94:d3:
                    a4:8c:4e:2a:55:2a:be:96:bb:d6:52:c3:6e:6d:58:
                    29:f7:d3:39:ca:c3:40:46:9a:8c:61:54:aa:3d:fc:
                    be:b2:70:e4:14:c1:b8:20:ed:5d:8b:73:6a:3c:c0:
                    07:50:cf:ce:22:3a:e4:27:9f:38:b9:65:60:da:7d:
                    66:97:31:c8:01:66:06:bd:a8:48:e0:76:3c:39:c8:
                    d0:5a:a5:e6:b0:b4:0c:57:5a:1c:1c:1c:a1:97:d6:
                    44:c2:e4:96:89:79:6c:cf:92:12:6d:12:76:51:d1:
                    4f:4a:8e:b7:79:e8:90:16:33:5b:53:1d:36:25:9c:
                    dd:af:d0:88:84:a7:29:cb:3c:2e:98:34:8b:d2:7d:
                    11:b2:0d:1b:eb:4d:87:a3:50:75:76:9d:50:90:4a:
                    85:bc:ea:cd:cd:41:84:16:a6:03:0b:95:b3:a2:c6:
                    a1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5D:D2:8C:4F:FA:34:1C:06:00:9D:49:95:99:DE:D0:5E:3B:49:D1
            X509v3 Authority Key Identifier:
                keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:6c:c7:5c:a1:5d:9a:f4:9f:be:d3:f1:28:e8:34:e5:88:
         75:d2:b4:db:ec:96:57:88:55:04:b5:7f:9f:09:16:b4:81:07:
         4e:af:cf:3d:5e:16:23:34:d1:af:be:c0:e7:b9:a4:04:11:84:
         67:56:07:bc:3d:64:38:cd:df:06:e5:6b:aa:f2:5e:da:28:1b:
         8b:be:6a:98:15:02:cf:d5:15:cd:dc:78:37:06:95:0b:24:09:
         d0:51:7c:ea:96:a3:f1:64:cd:b8:e6:b5:1b:42:89:21:f0:92:
         c4:a3:da:bc:cb:6c:5f:20:98:69:20:23:a2:85:57:a1:12:d8:
         e3:b8:7a:3f:e1:6a:6d:39:7d:d1:14:64:3e:76:21:87:2e:d8:
         3b:3d:7d:1e:56:32:d7:d8:85:47:2d:52:09:53:18:94:84:a9:
         64:35:d9:51:c0:4a:26:23:d9:b5:b4:2b:63:90:11:b3:82:b2:
         b2:c7:07:03:f6:06:85:ec:81:e3:5d:b5:0d:95:51:cc:33:79:
         f0:59:0d:cf:01:76:9f:a3:61:98:57:f1:84:57:56:26:96:69:
         cd:8c:b5:00:c7:bc:fe:a8:28:7b:7d:a0:a6:e0:a0:4a:30:76:
         22:97:3e:a2:bc:0a:24:77:9b:64:fe:a6:99:76:5f:47:4e:52:
         c0:6a:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:50:55 2025 by rpki-client