This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
File:                     IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json)
Hash identifier:          MjXbVNlRulMsUvqilWQ5gjGWpuChVI622pmB2UacfdE=
Subject key identifier:   43:C2:89:70:FB:7C:9B:E3:CB:03:F1:4E:66:AF:1B:9A:F5:64:14:DE
Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46
Certificate issuer:       /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
Certificate serial:       107C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
Manifest number:          1070
Signing time:             Sat 06 Dec 2025 16:52:23 +0000
Manifest this update:     Sat 06 Dec 2025 16:52:23 +0000
Manifest next update:     Sat 13 Dec 2025 16:52:23 +0000
Files and hashes:         1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: bXsOyyXtglYkqVwh6lxvofV+HIeirW5fN1XNkb8osIw=)
                          2: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: SSjTjiJw3UBo/Mme4Kl37l1zxjxnCDkxVmhI1OR3EOw=)
                          3: 608836D046B111E98B793856C4F9AE02.roa (hash: Ls4h/fmzmMgVY9fuRoj+7ux+D5fYwsPV37oBSFEiAic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4220 (0x107c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
        Validity
            Not Before: Dec  6 16:52:23 2025 GMT
            Not After : Dec 13 16:52:23 2025 GMT
        Subject: CN=69345f47-74e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:be:7c:d3:58:5b:5e:26:0f:5a:c8:97:d2:11:
                    fc:70:c1:86:0d:c0:cc:5d:69:22:2a:40:3b:f7:79:
                    1a:7b:a2:2f:6b:58:10:94:af:54:2c:c7:f8:cf:ce:
                    e0:81:61:0c:28:d1:4c:09:d8:77:00:74:52:11:46:
                    17:9e:ca:ca:e3:05:c0:72:c8:17:d4:ad:2d:ca:fb:
                    d4:60:a9:bb:4a:4a:d8:39:c2:ad:22:d7:eb:a7:df:
                    bd:b1:43:b9:9a:ce:89:05:fa:1d:ac:38:ac:99:0b:
                    80:e1:1c:17:52:11:1f:3b:72:09:5c:19:40:6b:11:
                    df:86:75:a9:db:ae:63:75:2c:aa:2e:18:b2:85:5b:
                    95:34:54:c5:0a:aa:9d:4b:0b:27:ee:b5:ac:52:c2:
                    b8:84:4e:28:ec:7d:25:3a:c4:8e:fb:95:63:4f:16:
                    31:1a:8a:d4:fc:02:81:05:18:91:4b:b0:be:c6:ff:
                    08:3b:a3:08:13:5c:45:7a:01:83:fa:ba:b4:67:46:
                    f2:fd:d0:1b:4b:fd:00:ae:56:df:c2:14:7a:d3:88:
                    1e:d6:d7:90:18:fa:72:4a:03:78:43:78:aa:c5:2d:
                    cb:72:9e:31:f9:4a:89:d1:f8:15:6a:94:33:37:9d:
                    00:0d:31:99:f7:f6:c8:59:d6:2b:5c:67:a4:d4:6e:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C2:89:70:FB:7C:9B:E3:CB:03:F1:4E:66:AF:1B:9A:F5:64:14:DE
            X509v3 Authority Key Identifier:
                keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e3:a9:13:3a:04:51:b4:ea:32:74:75:a3:88:bf:77:d4:66:
         36:6c:13:67:c8:6e:70:cf:58:07:8e:40:20:04:e9:39:a8:ca:
         b7:40:d2:30:df:b6:9e:9a:f6:4f:f5:d7:8d:01:df:80:6a:69:
         82:c4:45:b5:ee:92:09:81:bd:22:a3:7e:49:8a:0f:1b:fb:48:
         9c:56:af:88:35:d3:49:a1:a3:ad:1f:60:9b:95:60:7a:b3:54:
         71:35:c7:2c:0b:16:63:57:91:3b:e6:15:85:b6:f1:8a:be:e5:
         a0:f1:dc:44:09:6b:59:d0:fc:e1:9e:d5:bd:32:36:f7:2e:ec:
         2e:02:08:03:02:34:50:bb:b4:16:26:ea:ad:b4:49:19:3b:e8:
         36:af:56:61:8e:01:db:c7:7d:0c:5b:2b:65:ed:c1:39:1c:ab:
         af:e1:19:f2:74:60:a6:bd:02:ae:42:f3:9c:63:03:fd:88:04:
         24:a6:06:ed:eb:3b:c3:40:19:d5:49:a5:ad:76:7b:03:e5:9d:
         58:64:d8:a0:53:12:b2:d4:ee:16:9c:af:e4:75:87:e2:4b:5d:
         3b:87:3e:a4:c2:67:7b:cb:84:d7:87:f2:b2:7f:e2:29:52:4c:
         cb:1a:11:46:ce:50:35:54:47:33:d5:dc:6d:f1:79:4d:f0:57:
         d5:8b:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:40:20 2025 by rpki-client