This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
File:                     apVIHOj0DdiJXR-3rukOWVm6g8E.mft (raw, json)
Hash identifier:          L1BEOK0w9dejWg0ti8lC623VH+9p/m7VJSjmcWhaFOg=
Subject key identifier:   4C:9E:1D:B7:F8:C7:F9:1A:83:D5:5C:D2:2F:00:AB:17:57:79:CF:68
Authority key identifier: 6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1
Certificate issuer:       /CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
Certificate serial:       05BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
Manifest number:          05B1
Signing time:             Sat 06 Dec 2025 21:57:19 +0000
Manifest this update:     Sat 06 Dec 2025 21:57:18 +0000
Manifest next update:     Sat 13 Dec 2025 21:57:18 +0000
Files and hashes:         1: apVIHOj0DdiJXR-3rukOWVm6g8E.crl (hash: eBu4+89Z6+fI7vb1Xmr139beCgXAIuWZz8F+d+C8BSM=)
                          2: 0C3D8674345511EFA05D0C10C4F9AE02.roa (hash: yBjQ7vTWm7ckP6p1TXPTQpNI7WA0PEdmWLutLObiHrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl
                          rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466 (0x5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DA0C, serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
        Validity
            Not Before: Dec  6 21:57:18 2025 GMT
            Not After : Dec 13 21:57:18 2025 GMT
        Subject: CN=6934a6be-4b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:f2:df:14:a6:9f:c1:1e:3f:2e:ca:62:70:
                    83:33:20:94:86:97:93:72:54:61:91:31:1b:f7:f8:
                    d0:5b:84:2c:79:ac:34:2f:28:95:26:94:ba:0f:82:
                    be:1b:1c:91:40:94:1e:ae:03:bb:19:68:76:04:1a:
                    a5:0a:75:7d:65:52:aa:29:28:64:62:ea:9d:80:f8:
                    16:b2:cf:1f:2d:98:f9:38:23:d0:ac:5d:3c:a5:bc:
                    3d:bf:b6:f3:53:23:46:79:f6:20:d8:de:6d:47:c4:
                    57:91:c3:52:99:72:12:7c:38:66:4e:2d:25:02:66:
                    05:1d:2b:39:52:1e:d6:93:23:ff:fa:75:06:43:6e:
                    0d:47:8b:58:bd:26:d1:e5:49:20:0a:54:06:98:d5:
                    91:14:4b:c8:a2:0c:af:61:7e:24:ec:d7:98:58:b0:
                    91:17:88:2d:74:31:c4:fd:f3:42:2c:5a:06:0e:9e:
                    0c:e4:15:50:57:6a:61:d3:95:14:c3:7e:07:22:98:
                    ed:a2:f4:76:54:27:24:58:19:86:de:b7:a0:7a:0b:
                    9f:fc:74:af:fc:2a:13:7c:54:08:4b:a0:1c:d1:c0:
                    6d:92:03:82:70:8c:9e:30:13:ab:05:4e:48:7e:40:
                    b6:42:72:90:ac:74:c2:ef:e3:c8:d5:58:b6:e8:78:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9E:1D:B7:F8:C7:F9:1A:83:D5:5C:D2:2F:00:AB:17:57:79:CF:68
            X509v3 Authority Key Identifier:
                keyid:6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:27:39:7d:7b:63:1b:d2:d8:19:98:a7:51:a2:0e:51:45:19:
         1b:f2:39:46:31:4f:52:83:b1:a6:70:c0:da:3a:38:9f:c7:c6:
         f5:a9:8b:ec:33:e9:a8:76:85:19:a0:25:a9:61:e5:0c:fa:75:
         d8:b8:5e:c4:f4:fe:51:5d:bf:eb:ba:51:69:b3:5f:f6:5f:97:
         af:80:42:d7:b8:d2:bc:ec:9e:78:0e:56:45:ca:54:9b:01:47:
         be:70:58:27:f1:3a:9b:dc:84:ef:a9:26:96:5d:05:a3:48:1e:
         29:36:1e:67:0a:fd:7a:a6:73:aa:de:af:23:16:79:d4:d0:7b:
         df:2b:7f:0c:c4:59:a1:f7:1c:76:66:10:a2:26:47:40:6f:e9:
         64:79:fd:4b:4c:17:3b:9d:d3:cc:77:42:4d:42:40:b1:36:53:
         c0:ac:9c:fa:61:16:ee:e1:9a:68:64:83:2a:cf:0d:4f:a1:74:
         a8:7e:88:fd:dc:41:50:3f:fb:fc:36:90:26:9b:71:9c:bd:d9:
         30:60:f1:d5:44:e6:d0:95:4d:f8:7e:3f:a4:d0:b5:45:38:b4:
         c2:50:b9:93:13:28:78:d1:c5:9a:8d:b1:64:6c:51:b8:58:f5:
         e1:69:81:f8:c8:a4:ec:e4:25:f2:f7:56:7f:30:e9:b1:34:7a:
         68:cc:4c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:09:10 2025 by rpki-client