This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft
File:                     r1E53KFl4oTVSmzvYft6CRaJGw8.mft (raw, json)
Hash identifier:          LE0oOf2JQo4rBTEYjsa7p6Wwz9NtyO7ddlK5eSzSn68=
Subject key identifier:   20:C4:8C:BE:66:84:DF:01:38:41:D7:9C:AF:95:20:DA:A4:DA:1C:12
Authority key identifier: AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F
Certificate issuer:       /CN=A918379F/serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft
Manifest number:          0256
Signing time:             Fri 05 Dec 2025 00:01:29 +0000
Manifest this update:     Fri 05 Dec 2025 00:01:29 +0000
Manifest next update:     Fri 12 Dec 2025 00:01:29 +0000
Files and hashes:         1: r1E53KFl4oTVSmzvYft6CRaJGw8.crl (hash: TehHI3d6sl6Q0APo+5Bp9GLwCrCikGL2yNNIBP11ks8=)
                          2: 0B237586453311ED9A3F7844C4F9AE02.roa (hash: ozd7QEWzqSc/ZjTprGcRjOYRAvGoQk7Mxlkn94aKvpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl
                          rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918379F, serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F
        Validity
            Not Before: Dec  5 00:01:29 2025 GMT
            Not After : Dec 12 00:01:29 2025 GMT
        Subject: CN=693220d9-f782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:9e:0e:a7:8b:da:68:b7:7b:f1:a4:87:e4:
                    c4:ee:3d:62:77:a5:13:c9:28:cf:2c:cd:58:04:b3:
                    ab:26:98:3c:34:8b:da:63:10:82:fb:41:39:07:5d:
                    b9:94:31:c9:17:fa:bd:8e:ad:97:19:8c:c8:d2:db:
                    7c:5c:c0:3e:e0:06:73:c9:d9:c9:83:1d:94:fe:05:
                    d2:09:9e:9d:0b:88:37:d9:ea:1f:7d:46:73:cb:de:
                    f3:fe:56:8e:48:86:4e:ae:1c:5c:07:e0:10:7b:3d:
                    ea:dd:2d:21:85:12:c0:00:48:b9:07:7d:2e:5a:0e:
                    b6:eb:02:a1:1b:46:14:c1:65:92:9b:eb:37:20:57:
                    d1:02:38:09:61:5b:14:ca:81:13:70:28:e7:67:fd:
                    4b:cf:ee:70:cc:73:32:80:8d:cc:25:9d:28:92:3b:
                    6c:c2:63:88:04:e7:92:e7:cf:09:91:97:7f:a7:9d:
                    9c:68:b8:32:45:b2:b2:56:79:eb:80:88:7b:60:41:
                    e4:e0:93:be:cb:30:28:40:1e:c3:8f:27:44:41:54:
                    2c:2d:72:2d:51:c0:a4:d9:d2:30:22:f1:61:c2:7b:
                    3d:c5:bd:65:bc:7e:e6:5c:81:88:5b:01:c2:b7:31:
                    70:20:29:a1:e4:c8:94:37:6b:df:df:77:be:0a:ce:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C4:8C:BE:66:84:DF:01:38:41:D7:9C:AF:95:20:DA:A4:DA:1C:12
            X509v3 Authority Key Identifier:
                keyid:AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3b:55:de:53:a1:a5:ef:d4:99:66:5f:ae:f8:c9:83:0d:64:
         f3:2c:b8:82:15:56:45:b1:43:af:ba:a9:4d:54:94:fb:64:3b:
         07:b6:68:d3:55:dc:b3:81:31:a7:29:d0:ea:95:0c:0a:2f:81:
         71:79:0f:7d:ba:3a:4a:4e:5e:d8:a2:ae:fb:3f:7a:23:00:5e:
         d7:32:03:8f:73:4b:7c:3e:99:cb:61:cb:28:94:72:10:db:18:
         37:0f:ef:62:80:d7:cd:07:46:e0:1d:11:ea:49:65:4a:16:d2:
         80:0c:05:01:de:09:df:f7:de:e8:18:a6:ee:e8:9a:b2:55:ec:
         58:de:e6:b8:07:a7:5a:1a:43:bd:5e:59:58:81:b8:dd:e8:59:
         92:15:59:f9:3c:40:28:99:e7:f5:7a:17:10:3d:96:29:7c:92:
         87:ee:81:46:8d:4d:6b:6b:a2:f3:5d:06:d2:42:dd:11:d4:c7:
         8f:a0:3c:16:04:f5:07:89:8a:d8:fb:8b:be:3b:b7:b9:4b:e1:
         9e:18:ff:e6:b5:24:52:72:e8:15:fd:32:31:48:73:9c:3c:15:
         19:d3:57:59:a0:27:34:4f:89:34:b5:dc:d4:9c:f3:ad:30:f2:
         db:6c:95:4d:f3:0f:e3:c1:60:3b:14:28:b5:48:71:7a:00:7d:
         af:47:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:08:15 2025 by rpki-client