This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
File:                     ByXySRgBUFGFyQaaQBNjXDi1a3I.mft (raw, json)
Hash identifier:          vs0WwDNni3rtCbtJz7Dbw/Xw+pG4vNxiQJzRI5TBepo=
Subject key identifier:   79:51:DA:C9:96:08:3E:F4:26:11:EB:23:22:9F:30:CB:DE:81:94:9B
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Certificate issuer:       /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial:       07BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
Manifest number:          16D3
Signing time:             Sat 06 Dec 2025 17:29:22 +0000
Manifest this update:     Sat 06 Dec 2025 17:29:21 +0000
Manifest next update:     Sat 13 Dec 2025 17:29:21 +0000
Files and hashes:         1: ByXySRgBUFGFyQaaQBNjXDi1a3I.crl (hash: UqZY6auiuaCVgaNmIa0hBJ3m4uMnAuN3Zude1KxBXro=)
                          2: CCA402F8BE3811F0B9AAC956C4F9AE02.roa (hash: gtTpVW5LqxqfvKC2N4TARLuSjiGbRhdHo4ieYNHeMFc=)
                          3: 05144A26BE3911F09CB32457C4F9AE02.roa (hash: vSIeAjqd8gDmwAauFKXajPF+c9MKk4xOp3bG+WiS7CI=)
                          4: 970E5576BE3811F0962A6356C4F9AE02.roa (hash: AcviFd+PtnSFvlgNS+BnOoi4dKiwPFo8IVXgK3DA+5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
                          rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1982 (0x7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
        Validity
            Not Before: Dec  6 17:29:21 2025 GMT
            Not After : Dec 13 17:29:21 2025 GMT
        Subject: CN=693467f1-668c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:52:86:bc:93:e9:37:f4:8a:6d:df:1f:cb:
                    2c:2e:76:82:29:fa:f9:13:0d:2c:e6:b9:13:81:ba:
                    8e:e1:3e:97:a5:55:a4:21:7a:c6:b6:b9:ef:a7:e7:
                    56:6a:15:36:26:02:f1:b8:a8:6e:35:25:ae:a4:2c:
                    d8:9e:ce:2b:60:18:3d:e8:eb:02:46:03:89:78:f6:
                    6b:07:0d:5b:ab:b8:92:22:0d:67:7e:b1:9f:3b:dd:
                    d5:32:1c:b2:c9:91:16:d6:01:46:24:6d:70:f3:91:
                    c4:c2:28:2d:04:e1:72:d4:af:3c:d4:66:ca:a5:e8:
                    35:ed:54:9b:72:cf:04:a7:50:6b:45:e5:e8:c2:cc:
                    74:ca:8f:3d:c9:6b:a7:60:06:c3:7d:6f:be:2c:04:
                    e0:3b:75:15:3f:1a:70:14:bc:e1:27:dc:c0:1f:f0:
                    8c:48:b8:c4:22:01:af:57:9f:95:52:93:26:be:08:
                    44:2c:8a:86:48:cd:b7:5c:1f:08:68:d0:46:70:97:
                    00:1d:0a:a5:fe:4d:36:0a:ce:04:1f:b2:af:dc:69:
                    e9:26:cb:04:9c:e6:f6:1c:24:3b:69:d2:05:83:f3:
                    32:65:32:c8:55:8d:12:96:c1:76:35:5b:3d:32:f1:
                    b4:0b:6e:68:c1:c1:08:16:96:4b:15:ac:92:c1:69:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:51:DA:C9:96:08:3E:F4:26:11:EB:23:22:9F:30:CB:DE:81:94:9B
            X509v3 Authority Key Identifier:
                keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0d:50:4a:f7:20:19:53:54:cf:2d:d7:14:37:68:e4:12:ff:
         2f:61:d2:db:30:47:a8:99:47:1f:4e:19:48:c5:b8:c5:af:93:
         a5:1c:89:24:1b:24:40:10:d3:06:35:ae:c9:0b:a6:58:02:ab:
         ec:a6:cb:fc:85:80:98:46:a4:52:9c:56:54:79:6a:9f:3e:c4:
         4c:cd:a2:24:7e:f2:3a:fd:d0:24:c0:d1:78:eb:39:47:50:8a:
         17:0c:af:a0:f6:ed:4b:f7:cf:d9:98:ad:4a:69:90:14:6d:56:
         9d:90:9e:a4:a3:44:0a:06:1d:79:87:d8:9e:6e:68:c6:76:a6:
         a9:43:8a:44:49:d2:75:df:cc:07:8d:d7:45:c6:56:9e:ec:d5:
         be:18:02:b7:85:6a:51:01:5e:df:fd:c2:ea:82:06:72:22:75:
         cc:c5:35:91:41:2f:d3:e2:d8:84:a0:5b:12:be:16:89:db:98:
         32:cb:d7:1c:24:3e:29:62:2d:3c:38:8c:b6:5d:fe:32:d1:1c:
         f8:a3:b4:aa:08:cb:f3:86:b5:9a:13:11:47:2a:c3:6a:b6:3a:
         3f:e1:e8:b0:41:79:86:8a:44:96:4b:c9:88:cb:26:35:86:56:
         ba:31:4e:f9:6d:8e:27:7f:d3:18:92:88:8c:76:e0:89:90:88:
         41:7d:68:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:53:41 2025 by rpki-client