This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft
File:                     SkhXfqTVPPBfDXTKwBD2q8QVI48.mft (raw, json)
Hash identifier:          TZyJ+zNdHkMPL2eSIxkGloj/BXAUw13IjRv/pV82R98=
Subject key identifier:   AD:C4:49:1E:E3:CD:5F:07:52:B3:00:60:7F:BF:01:1D:5A:31:9E:D4
Authority key identifier: 4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F
Certificate issuer:       /CN=A918C519/serialNumber=4A48577EA4D53CF05F0D74CAC010F6ABC415238F
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft
Manifest number:          3F
Signing time:             Fri 05 Dec 2025 05:17:55 +0000
Manifest this update:     Fri 05 Dec 2025 05:17:54 +0000
Manifest next update:     Fri 12 Dec 2025 05:17:54 +0000
Files and hashes:         1: SkhXfqTVPPBfDXTKwBD2q8QVI48.crl (hash: qcpiyQUOb0VGHopArbhttL/wKDDUeq3LlsWYsPtB04Y=)
                          2: 19BCD4A0728211F081B6E982C4F9AE02.roa (hash: J1KdVLZmGzND3g5GpPJl+STwOF3mvFB15MfnfwB4gJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.crl
                          rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C519, serialNumber=4A48577EA4D53CF05F0D74CAC010F6ABC415238F
        Validity
            Not Before: Dec  5 05:17:54 2025 GMT
            Not After : Dec 12 05:17:54 2025 GMT
        Subject: CN=69326b03-4665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d6:38:73:13:b9:e3:6d:b1:2f:be:9d:cb:52:
                    09:7f:d1:21:ef:be:43:b0:a0:93:90:24:ab:3e:fc:
                    81:08:bc:14:73:1d:b8:19:68:09:f4:60:18:4c:93:
                    04:b3:05:b1:7f:95:46:bf:57:4c:c9:5a:42:cb:24:
                    fc:09:83:44:ab:de:55:ac:42:20:88:c8:07:c6:2b:
                    14:39:43:b5:71:a5:b7:25:fe:01:4d:d8:74:7b:dd:
                    d3:d0:d2:d9:43:ac:be:a9:02:ee:f7:02:6f:3c:70:
                    8c:69:d2:bb:e0:78:f5:c4:90:54:5d:20:02:b5:8f:
                    71:34:1b:29:9e:4b:cd:d6:e1:4c:c8:30:ec:43:04:
                    4f:b2:b9:9a:e2:0e:7b:24:12:c3:6e:d7:fa:bb:be:
                    18:8f:04:5a:14:60:28:87:a8:8d:3f:d8:62:ad:99:
                    45:f7:1f:29:64:28:81:5c:1d:90:93:20:30:4c:bc:
                    4f:c4:f5:7a:3b:3b:1b:d5:6e:58:f2:cc:5d:c0:1a:
                    80:e1:5d:33:ad:3c:15:5f:d9:60:51:e9:fc:58:1c:
                    4c:e1:90:f3:7a:86:be:0c:ed:d9:11:5a:c3:7d:1b:
                    de:a8:c2:08:4e:f0:ae:f1:12:47:79:4a:72:7e:61:
                    56:98:21:6f:d5:ea:27:06:42:69:e4:7c:1f:22:05:
                    cf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C4:49:1E:E3:CD:5F:07:52:B3:00:60:7F:BF:01:1D:5A:31:9E:D4
            X509v3 Authority Key Identifier:
                keyid:4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b1:3a:7d:54:0d:74:6b:df:7f:df:1c:dc:73:bc:bc:27:54:
         65:b2:ef:4d:44:30:23:ee:5a:b4:cf:dd:b1:38:d3:8d:85:be:
         b2:11:ed:11:61:bc:0d:96:91:c8:e4:31:8f:30:45:71:f3:45:
         87:3f:f8:78:ef:6d:c8:3b:1c:e0:85:dd:d4:87:30:bb:7e:6f:
         e4:20:7c:94:de:a9:e3:09:7a:e0:e9:8b:76:44:a5:e5:7a:43:
         f5:1a:44:f6:8c:07:9c:f5:6c:00:e9:11:62:d9:cf:15:59:80:
         2a:fb:22:2c:28:1a:6d:48:0c:f8:ff:12:56:db:c0:62:81:ad:
         b0:aa:cd:35:f2:74:33:de:0d:67:a3:33:ac:52:7f:85:1a:5d:
         21:b7:b7:84:ab:b2:5f:86:6a:75:72:37:be:6e:48:45:5f:86:
         cc:6b:9e:dd:59:e4:5d:f0:21:1d:f7:e0:5a:41:12:5a:0b:76:
         d3:ce:f3:36:16:f2:6b:ae:e1:18:49:76:44:d3:ab:dd:f9:08:
         4c:92:d5:c9:01:cd:53:85:66:f0:36:f6:77:ff:d6:6c:14:2e:
         91:7e:95:fd:38:61:5a:f4:88:8d:2a:38:61:b4:bf:ee:b1:e5:
         24:1c:82:ba:ff:d1:1c:cd:5b:7b:78:08:9f:f7:c1:9d:13:86:
         b2:12:2d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:08 2025 by rpki-client