This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
File:                     25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json)
Hash identifier:          gNLZwqS2Q56uoTtzmb87CpMlr4u2OGToHkqODgY9i00=
Subject key identifier:   FA:CE:9B:87:CD:32:C9:77:5E:1F:B2:06:DC:C7:9B:5A:D2:F5:06:51
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Certificate issuer:       /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial:       039B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
Manifest number:          037F
Signing time:             Thu 04 Dec 2025 23:20:56 +0000
Manifest this update:     Thu 04 Dec 2025 23:20:56 +0000
Manifest next update:     Thu 11 Dec 2025 23:20:56 +0000
Files and hashes:         1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: MSP20KOGk3qGG8LYdV+qyAA1j2yPsAqM2RuUDN1OdEs=)
                          2: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: MnpTevKrhY7L4cqXUyU9PXlqHjDSUZYAGeApiPXwlBI=)
                          3: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: fuFQR3XBNeUBp3GuT5Rq8XdFNfctvFuOXUDcjAZyCQA=)
                          4: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: Oo/z3Tl848fDTqTqN7CA+y187n0AUvuUe1PsbRy+loY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
                          rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
        Validity
            Not Before: Dec  4 23:20:56 2025 GMT
            Not After : Dec 11 23:20:56 2025 GMT
        Subject: CN=69321758-b482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a1:01:ea:6b:89:49:4a:05:cf:49:85:c4:43:
                    34:a6:c1:93:21:aa:27:3e:68:eb:1b:ef:db:9f:d3:
                    1b:da:5c:fd:be:40:f6:eb:c7:1c:e5:4f:45:7f:2f:
                    cd:c8:b9:4e:20:a4:2a:60:04:78:7d:7e:5e:15:7b:
                    17:0a:77:e6:22:2e:e5:8c:55:62:66:d4:a0:44:04:
                    e3:84:ea:03:7b:51:52:46:6b:9e:a5:eb:4f:04:b1:
                    a1:9d:3a:af:c6:2c:59:f1:e4:e2:02:9d:9f:55:05:
                    90:c2:f1:b6:89:55:07:75:fd:96:06:31:ac:5a:c7:
                    c0:cb:d1:c0:07:4b:67:c6:73:06:12:3c:b0:d7:e3:
                    4c:28:1d:6a:40:57:3f:90:8a:15:ad:e2:e1:d2:0c:
                    c4:8a:39:28:29:33:f8:80:43:05:c1:b8:85:f8:8e:
                    cb:2d:37:8f:1f:29:23:5f:bf:c1:54:8b:5b:21:a1:
                    39:d4:ec:7e:46:f4:c8:6e:93:a3:3a:e9:23:52:7f:
                    d0:b4:d3:26:63:25:3d:ae:a8:a4:71:86:c8:fb:b6:
                    86:86:09:eb:5e:31:84:5c:f9:01:7c:69:e5:b3:81:
                    4d:1c:2c:8c:c3:16:0f:07:1c:22:67:43:b8:ce:ef:
                    a2:c4:ef:7f:d6:a8:e1:43:73:0f:37:87:5a:15:a8:
                    74:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CE:9B:87:CD:32:C9:77:5E:1F:B2:06:DC:C7:9B:5A:D2:F5:06:51
            X509v3 Authority Key Identifier:
                keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:34:e9:1b:9c:b1:04:9d:d6:de:bf:65:01:8f:31:1c:3e:18:
         0c:5e:e1:20:2a:a3:f8:4a:a1:7f:59:20:cf:88:14:8b:e5:f5:
         e4:ad:99:a2:4a:97:58:21:44:f9:3d:a2:c9:54:f9:d8:b0:7c:
         18:bd:c8:df:af:3c:75:e6:30:f8:83:c3:98:61:c5:5e:f9:64:
         cc:47:eb:e6:81:c5:b4:cf:ad:c5:1c:39:aa:18:59:94:9b:d3:
         27:81:eb:f3:77:e3:79:04:21:6f:3d:64:5d:dd:a9:12:b8:54:
         f9:f0:a7:cc:d6:54:c5:ff:1c:36:df:e2:3b:af:14:82:7d:9d:
         40:1a:56:1d:23:2e:ce:98:09:49:33:35:0c:7b:aa:3f:d4:58:
         ef:00:3f:81:54:48:fa:f4:0b:5d:a3:49:2f:ff:19:08:9a:b4:
         c9:67:a1:90:63:24:02:21:46:9b:5b:fd:00:a1:df:8a:c6:d9:
         16:67:ab:97:be:09:b3:40:88:a6:03:66:c2:f8:2d:43:3d:e1:
         c1:0f:03:df:62:cb:a6:82:b1:8e:89:f1:55:65:66:03:6e:0c:
         eb:68:dd:d6:43:54:f4:10:93:11:16:1a:5b:9e:c4:bb:3a:22:
         81:8b:c8:fd:20:af:9d:99:3d:c6:cd:60:b9:65:86:fb:55:ff:
         ee:1a:67:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:46 2025 by rpki-client