This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
File:                     aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json)
Hash identifier:          viW3uA1HxSbfH8g6te2PtIz/L0OSoBC6hOt9140zVyw=
Subject key identifier:   A0:6C:C6:B7:8F:81:FF:BC:55:02:31:A6:E5:D3:15:8C:13:8A:77:97
Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91
Certificate issuer:       /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
Certificate serial:       0846
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
Manifest number:          083B
Signing time:             Sat 06 Dec 2025 19:55:34 +0000
Manifest this update:     Sat 06 Dec 2025 19:55:33 +0000
Manifest next update:     Sat 13 Dec 2025 19:55:33 +0000
Files and hashes:         1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: 5B5PTYDMrLEbDXlsyHwJdPzjLcNa0cqsjtVjpCcj2/E=)
                          2: F9C379F2674F11F09FFF0F5BC4F9AE02.roa (hash: LcAbunDijFcAPxaxvvLn15sAYA8KilXQ0gSd3Vwnavw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl
                          rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118 (0x846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
        Validity
            Not Before: Dec  6 19:55:33 2025 GMT
            Not After : Dec 13 19:55:33 2025 GMT
        Subject: CN=69348a36-7c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:01:a0:0c:f4:ad:cc:01:fd:b5:60:6c:0b:
                    4c:2a:f7:f5:68:4c:77:5d:35:18:84:aa:89:e9:c9:
                    ad:cc:55:19:a1:fa:de:e0:5f:d7:7c:c3:dc:5d:9a:
                    df:68:44:d4:9d:6f:9a:7c:85:9d:c3:3e:9c:d5:4d:
                    4a:c3:97:ff:9c:e3:6d:f5:40:2e:86:74:64:0c:d1:
                    e0:27:bc:6d:e3:34:75:9c:a9:df:ab:d5:f1:72:60:
                    20:b3:2e:36:57:19:92:dc:38:a0:f7:ee:de:37:ce:
                    90:d3:1b:5c:49:ee:ff:f0:34:41:8c:44:4f:18:27:
                    12:b1:7b:c6:cc:fc:28:c2:b0:da:96:3b:13:2b:fe:
                    a5:11:62:09:e1:20:8d:88:6a:65:b8:c0:1e:89:60:
                    d6:fc:8d:87:93:f3:32:ac:91:ca:77:79:50:b8:44:
                    9f:34:60:15:27:f6:92:70:be:a3:fa:03:a3:86:c9:
                    7f:4f:bd:4d:ce:42:05:74:99:ab:e7:da:d5:f1:97:
                    d2:1d:35:05:7d:7c:c3:44:f2:f2:d9:c0:4b:bb:8a:
                    e3:8e:d2:9f:79:99:d5:46:69:4b:36:cd:40:38:ca:
                    93:09:d6:c5:ee:5f:4e:05:92:bf:c8:67:97:18:e5:
                    09:18:d2:cc:5c:5c:28:0b:34:04:03:2a:2d:21:9a:
                    cb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6C:C6:B7:8F:81:FF:BC:55:02:31:A6:E5:D3:15:8C:13:8A:77:97
            X509v3 Authority Key Identifier:
                keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:8f:0d:54:4e:4a:9e:e1:9f:68:bb:1f:b5:28:79:5f:e0:c0:
         8f:74:47:5c:7e:35:c2:02:56:35:3f:fb:bd:df:5f:cc:d0:fc:
         44:17:59:82:18:99:a9:7b:66:30:cf:b6:fd:87:a8:d5:54:43:
         2e:d2:fb:41:e8:ae:e8:2e:bf:17:ed:26:bf:d3:54:bd:fc:11:
         37:ff:e2:48:09:43:cc:c8:d4:d3:42:cf:20:ff:39:0b:66:78:
         64:e1:6a:ca:45:9e:c8:67:a2:ce:48:38:7a:e0:fb:96:80:92:
         93:cf:7a:8f:c6:0d:00:55:3e:14:e8:f3:65:09:48:be:6f:bf:
         ec:51:69:db:4e:7f:d1:7c:39:54:86:f9:4a:fb:08:a2:c3:e4:
         b2:7e:9e:2f:91:f3:5d:0e:ea:98:bc:16:93:d0:89:8a:ab:28:
         08:82:cc:52:91:cb:ac:7a:5f:ab:35:e3:8c:0e:6e:30:09:7d:
         c1:b6:b3:a2:db:aa:c6:c4:05:8f:c9:33:e9:18:7c:11:55:2d:
         6a:ca:ed:cd:bd:27:2a:18:2e:08:8b:30:70:f3:8f:fc:9f:1c:
         bb:ae:ef:28:a9:7e:72:40:31:6c:7b:bb:8a:02:b7:d0:47:56:
         d4:80:a2:69:01:6d:bb:3b:3a:7d:f1:9e:12:42:29:7b:c4:c8:
         00:54:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:43:43 2025 by rpki-client