This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
File:                     _Er4bnAJnaC6rC7dx30b70x1qJU.mft (raw, json)
Hash identifier:          tyZHXN9E8NkLguO92gzgRCoFY6qJo03h5/7yeXrwsSI=
Subject key identifier:   01:B1:18:91:15:0B:92:31:FC:D8:F9:66:6E:75:7E:3A:7B:9D:B9:7A
Authority key identifier: FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95
Certificate issuer:       /CN=A917D31E/serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
Manifest number:          17
Signing time:             Fri 05 Dec 2025 05:43:24 +0000
Manifest this update:     Fri 05 Dec 2025 05:43:23 +0000
Manifest next update:     Fri 12 Dec 2025 05:43:23 +0000
Files and hashes:         1: _Er4bnAJnaC6rC7dx30b70x1qJU.crl (hash: mPig1AFN+m4arxAURQxJH/rGF1Gp9SPJ64+p/h1+IBU=)
                          2: 3505DC88B6E411F090AAA224C4F9AE02.roa (hash: NC1EW44txePxXOncUvp1UoY7Puvst1exL43E60v3h6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl
                          rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D31E, serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895
        Validity
            Not Before: Dec  5 05:43:23 2025 GMT
            Not After : Dec 12 05:43:23 2025 GMT
        Subject: CN=693270fc-faa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:5b:15:73:f2:d7:33:05:5d:a8:65:cb:6c:
                    6d:7e:41:4d:f8:61:67:5d:50:78:51:f6:84:76:d3:
                    ca:90:f5:19:84:6d:89:15:c5:ab:ff:16:0e:95:bd:
                    b0:ed:76:2e:1c:a3:5f:ca:3f:76:53:44:b1:be:cb:
                    ba:00:02:72:5d:1d:37:31:17:b4:82:82:13:5e:63:
                    df:60:ec:c7:54:5b:36:ca:86:9a:17:30:f9:a8:7b:
                    4f:09:b2:b0:0f:82:8d:9a:d5:d3:0d:5f:7e:f1:f5:
                    97:75:c9:22:82:2c:a7:0c:c1:19:70:1d:9f:99:1b:
                    f8:02:48:37:e4:f9:f9:05:e7:90:23:76:c5:91:c3:
                    3e:f3:d7:8a:f0:3a:c0:e1:94:1f:5c:a8:5e:78:72:
                    32:cd:56:47:12:d9:f3:2d:de:e5:0c:be:93:34:18:
                    1e:6e:d1:4a:3a:3b:ba:09:9b:d3:ee:0e:59:50:dc:
                    63:84:33:3f:b3:85:4c:db:eb:f3:7c:bb:46:14:44:
                    5b:39:47:9f:57:51:a3:d0:4d:73:10:ff:0e:b7:53:
                    82:bc:d0:38:c3:68:60:08:0b:1b:85:90:0b:ed:71:
                    21:3c:ed:92:a0:77:d8:cb:e1:cc:0a:30:55:58:d5:
                    24:90:f1:8b:60:6d:3b:d5:25:8f:23:d1:b7:ad:f9:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B1:18:91:15:0B:92:31:FC:D8:F9:66:6E:75:7E:3A:7B:9D:B9:7A
            X509v3 Authority Key Identifier:
                keyid:FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:9b:f0:ff:79:a0:30:1b:ca:d6:6f:26:19:67:c8:2e:ef:0d:
         57:a1:62:32:29:1a:6c:8a:3d:e2:0f:01:b0:6b:e1:7d:dc:8b:
         b2:35:38:58:8a:d1:ee:11:29:98:58:50:8b:35:f7:c1:79:8a:
         e1:46:80:6c:40:c2:7a:cd:5a:66:b6:60:1d:cc:ed:7d:a5:d0:
         72:51:86:67:30:3a:a2:8b:59:e7:d2:67:1d:ef:57:86:10:da:
         0c:be:82:47:30:a8:94:b9:bd:4c:15:87:1e:f0:b7:47:30:a4:
         31:76:36:4a:ae:ac:62:b6:9b:61:d5:37:0f:7d:3a:72:99:74:
         78:77:2b:7f:f7:83:8a:12:e9:bd:bb:01:07:bb:f9:5b:ac:3b:
         6c:df:e2:64:ff:0d:e1:56:fb:e3:5c:7f:19:ce:ec:ca:64:97:
         0a:60:4f:95:4f:49:3a:4d:ee:94:7f:69:ba:a6:bd:5a:1f:9e:
         c5:62:e0:af:ae:ea:1f:db:e3:d3:d7:37:51:e5:c0:6c:e3:27:
         98:3f:32:55:4f:b6:02:ea:c1:71:cd:c4:56:69:55:71:c5:50:
         c5:26:9a:7b:cf:f3:1d:51:c7:b3:7c:71:12:d9:82:51:b5:d7:
         b3:d5:a4:f9:83:55:45:1e:a8:83:a2:0c:71:c6:fb:29:43:49:
         de:23:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:44:46 2025 by rpki-client