This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File:                     2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier:          9FoWw55Hl226X5evT78v/seb/N+lZkCAZmXMQdEBCUQ=
Subject key identifier:   4B:53:59:F8:21:A5:8D:1E:AB:E2:B2:02:30:33:AF:39:32:A1:A0:D1
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number:          018C
Signing time:             Fri 05 Dec 2025 01:47:46 +0000
Manifest this update:     Fri 05 Dec 2025 01:47:45 +0000
Manifest next update:     Fri 12 Dec 2025 01:47:45 +0000
Files and hashes:         1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: 8wYevEc2WGirxYHXSjvwrJqysrBqBw25URjYdvlifIQ=)
                          2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: EiqR8ceEyotPW7mTenGqOUmU7tOEINSndqPS9QrRxbg=)
                          3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: QC3Es2zEONKxVGX898XgjJkGnVmiNLJUauLLvYvYOYw=)
                          4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: XP3+VtULxNMC516dv5hcQ2JtVHA6oyJ/06WzO92KEp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: Dec  5 01:47:45 2025 GMT
            Not After : Dec 12 01:47:45 2025 GMT
        Subject: CN=693239c2-edd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:8f:6b:24:4b:b7:ae:52:e2:d8:24:64:58:
                    2a:85:21:1a:2f:68:f4:fb:f4:5c:e1:bc:6e:c8:f9:
                    d3:03:dd:d2:d9:e5:5c:7b:61:4d:84:72:16:b6:dd:
                    14:98:b6:0a:51:6a:a6:5a:22:10:a7:65:f0:fb:7b:
                    22:96:84:92:16:8f:b1:16:8f:5e:48:82:45:45:b0:
                    ab:c1:3a:de:a8:4f:69:9e:f7:bf:20:a0:1c:ea:7d:
                    4b:54:8d:3e:62:e9:eb:e9:56:a3:54:2c:ba:86:27:
                    2f:cb:c2:c5:25:b3:79:36:23:c0:d2:4d:ca:83:85:
                    cc:2c:05:80:a4:f2:ed:74:65:6c:81:c1:d5:20:8e:
                    8c:1a:b9:61:24:49:fd:a3:96:98:c9:ec:8c:69:6a:
                    db:3a:a7:89:85:37:27:50:49:1e:eb:4b:c8:a9:2a:
                    cb:4d:13:1b:f7:3f:b9:f1:32:2b:c9:2f:21:5b:2f:
                    6b:a0:5f:d2:33:58:07:46:0c:5f:d2:f7:e2:ac:3a:
                    46:e6:6e:d7:6d:47:02:90:35:6a:bb:9a:83:92:26:
                    d0:98:f1:fb:21:c1:d8:93:98:ef:2d:7c:16:a7:ee:
                    89:a0:1b:0d:62:e5:3c:98:a6:ac:19:07:62:bc:b1:
                    40:d3:48:a0:0e:a1:66:4a:ec:95:cd:08:24:6d:e1:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:53:59:F8:21:A5:8D:1E:AB:E2:B2:02:30:33:AF:39:32:A1:A0:D1
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:32:24:15:ff:8d:42:33:c4:b5:d8:33:92:7e:a6:d5:84:
         f5:b1:b9:3c:6f:e2:34:34:74:38:3b:5c:39:60:1f:95:8f:28:
         76:55:a9:57:69:c6:91:47:aa:f8:c0:0e:52:93:b4:d1:24:7a:
         7b:e7:5a:ce:58:9d:35:c3:12:20:a3:04:b7:86:15:67:af:49:
         43:90:d0:f0:7c:f5:c4:90:53:55:40:8b:e0:40:16:86:54:90:
         64:98:e1:f9:26:cb:fd:d5:d1:80:9b:b0:23:82:44:22:28:c7:
         84:3e:b3:c2:04:ed:a3:ce:03:1c:a4:9b:60:a0:11:5e:85:7f:
         51:46:eb:02:1a:de:7a:2e:b9:b6:72:19:e9:3c:df:f4:ca:f9:
         30:0f:5c:60:f7:ae:13:50:de:b2:48:2a:4b:42:84:f5:76:7b:
         8c:5c:70:b0:df:c4:65:af:a0:0d:c8:a1:f2:fc:58:fe:3b:48:
         02:8e:2d:e6:7d:37:2e:6f:0a:bb:1a:ba:6f:68:d0:1d:df:9f:
         7e:bb:0b:cc:c2:25:41:68:fe:00:1d:76:69:81:06:0d:09:30:
         03:d2:5b:36:63:28:15:59:51:d4:7e:55:fc:b8:89:18:88:1d:
         06:11:fa:9e:14:1c:9b:8b:38:0b:8d:78:8a:92:7f:fd:b3:f6:
         bc:0e:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:10:35 2025 by rpki-client