This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
File:                     tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json)
Hash identifier:          2bMdmgcyNQEwGKYB1L9j7rIMtubzNDE15yKfwJRKhiE=
Subject key identifier:   8D:44:E8:D0:F0:E7:F9:8B:2F:4F:3C:8C:4E:02:1C:53:E8:1A:19:21
Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
Certificate issuer:       /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
Manifest number:          01C8
Signing time:             Sun 07 Dec 2025 01:24:09 +0000
Manifest this update:     Sun 07 Dec 2025 01:24:08 +0000
Manifest next update:     Sun 14 Dec 2025 01:24:08 +0000
Files and hashes:         1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: KN3LKISetiUnuJYI2Xbzkw4EmFfYlNs4jZJMmU/GNow=)
                          2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: Lb0hJu9MZe6wLWtHrKtqcwpP08rypBWIlAZybLR4Lp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
                          rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E293, serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
        Validity
            Not Before: Dec  7 01:24:08 2025 GMT
            Not After : Dec 14 01:24:08 2025 GMT
        Subject: CN=6934d739-6c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:46:10:ff:7e:2f:d3:be:fa:3b:6e:88:e1:
                    e4:2d:6e:12:0c:79:07:3e:ad:c3:41:c0:7a:58:14:
                    27:91:e1:45:8a:f6:db:72:1f:fa:eb:00:90:94:03:
                    44:38:d0:ea:fc:87:16:1a:a7:a9:04:d3:5a:51:c7:
                    8f:44:f7:bc:6c:15:ae:f3:b8:55:a4:3a:4d:87:76:
                    f6:e6:50:c4:da:3e:25:36:26:aa:45:a5:dc:44:89:
                    ae:04:68:0d:d0:d0:e4:1b:06:3b:aa:df:23:72:05:
                    ac:6f:e8:c6:96:a8:ff:38:bd:87:39:bf:f9:63:2e:
                    c0:78:57:f3:b2:c7:e7:3d:4a:d3:a8:98:c7:8a:71:
                    f0:18:b5:11:ea:80:e3:7f:16:8c:b7:2a:45:49:78:
                    ac:4a:69:7b:0d:24:85:cc:c5:0e:4f:b5:11:66:30:
                    ef:62:92:ae:37:53:d6:9b:92:b9:5d:f3:17:f3:d1:
                    e5:aa:44:c1:c3:d4:da:02:fa:d6:62:f9:7e:cb:04:
                    a6:26:96:f1:98:d1:be:89:a5:b3:10:5c:5c:8c:d0:
                    81:0c:1b:6d:6f:32:0d:7e:1d:82:73:35:c7:0a:d9:
                    0e:c1:a0:96:61:ac:04:f0:58:c6:a4:ab:fc:a6:02:
                    e0:f4:12:77:82:ca:91:e2:c9:61:79:c0:49:82:02:
                    25:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:44:E8:D0:F0:E7:F9:8B:2F:4F:3C:8C:4E:02:1C:53:E8:1A:19:21
            X509v3 Authority Key Identifier:
                keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:5b:7e:91:e5:8a:e1:49:81:64:d1:ae:37:aa:27:64:cc:75:
         1b:22:64:7c:c6:7e:ca:af:47:ac:12:38:f3:cb:49:15:99:cb:
         7d:98:a3:ab:45:73:64:e0:ea:59:66:43:cf:01:62:aa:ea:68:
         63:fc:6a:ca:04:2c:74:c7:05:37:ff:47:b1:75:5a:ff:be:32:
         46:f5:52:c9:b0:0a:3f:78:1c:c6:18:77:a3:60:c0:03:29:10:
         9c:ed:3e:0f:2d:71:d8:32:83:34:aa:dc:39:bf:bc:35:3f:5c:
         27:98:63:bf:ba:70:c8:27:73:49:8d:f5:da:29:93:fa:f5:fc:
         a0:34:7e:1b:ae:6c:a1:c4:c3:54:1e:07:3e:78:84:47:d6:13:
         2a:44:83:b7:9e:e4:a5:ac:22:2d:5d:2c:53:0a:8b:cf:f8:12:
         5e:af:c1:67:7d:d7:dc:00:16:0e:27:13:65:64:92:c6:a0:48:
         0e:9f:02:de:fb:2e:89:61:52:3a:5f:a1:c8:02:d1:70:5a:df:
         d6:d1:5d:71:a5:28:80:af:64:9a:38:b6:ab:cd:98:1a:14:54:
         0a:c7:7f:07:47:a1:97:ef:9c:07:f8:d2:f1:01:cb:3d:96:1b:
         b3:a1:1c:55:02:45:f2:91:67:f6:f2:46:33:d2:0d:e7:ed:ef:
         a9:4c:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:59:02 2025 by rpki-client