This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
File:                     AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft (raw, json)
Hash identifier:          7t1wtBxt6aMUKTD0fhjH2W4MIHhkumIB8cBdiSDNg9M=
Subject key identifier:   8F:61:F6:C2:C2:28:58:D0:CE:B2:45:81:02:A8:A1:18:86:CC:48:7B
Authority key identifier: 02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12
Certificate issuer:       /CN=A919188A/serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12
Certificate serial:       0217
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
Manifest number:          0210
Signing time:             Fri 05 Dec 2025 00:34:42 +0000
Manifest this update:     Fri 05 Dec 2025 00:34:41 +0000
Manifest next update:     Fri 12 Dec 2025 00:34:41 +0000
Files and hashes:         1: AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl (hash: mIggz1Im/4RIo67ICP1pfHhLhPep44IKpl+EoK5y9LI=)
                          2: 12AE9E92AA9711EDAAEB8345C4F9AE02.roa (hash: k3NlozvnlaqSreMbUh2TfHEQDX5Xr4Ukgk/pUkd38rY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl
                          rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919188A, serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12
        Validity
            Not Before: Dec  5 00:34:41 2025 GMT
            Not After : Dec 12 00:34:41 2025 GMT
        Subject: CN=693228a1-3743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:61:1b:93:80:c4:c3:f9:c9:e6:d2:b8:78:
                    8a:c3:6d:a5:9f:ad:00:f4:e4:dc:e0:04:92:4e:e2:
                    2f:7a:58:2e:70:55:85:6e:d7:59:29:2d:7b:7b:9c:
                    c6:54:67:4b:b7:a1:8b:b6:e2:28:0d:a9:70:7d:fb:
                    ba:c5:72:94:21:1e:75:03:75:23:31:18:56:0d:a9:
                    dc:9f:e4:3d:fe:b5:23:13:da:a8:43:9b:c5:af:2c:
                    d7:9d:73:66:8d:b0:5e:b3:a6:a9:6a:d8:12:65:25:
                    68:52:31:ec:c0:25:44:e5:f4:c6:92:d5:46:b0:10:
                    39:db:b2:21:f0:13:10:e9:e4:ed:3d:f3:92:80:f5:
                    46:bc:80:9d:c8:7e:41:84:aa:a3:ed:b6:ad:68:0a:
                    32:40:a7:9a:60:b7:53:d2:69:2d:4f:48:6e:53:1c:
                    25:d9:08:b8:59:b7:67:e1:c3:c6:6e:0e:92:3a:21:
                    ab:ba:bc:72:86:3a:07:b5:ad:d6:e6:c2:ba:99:e2:
                    10:76:07:eb:df:9f:32:cc:91:32:0c:bb:fe:7e:53:
                    12:f0:28:4d:7b:39:ec:a7:34:28:d4:05:c5:0d:6a:
                    08:21:e5:50:dd:60:87:62:ad:ca:43:2a:60:47:ed:
                    49:8e:6c:44:f7:2b:cc:d9:c4:33:01:9b:46:66:a0:
                    31:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:61:F6:C2:C2:28:58:D0:CE:B2:45:81:02:A8:A1:18:86:CC:48:7B
            X509v3 Authority Key Identifier:
                keyid:02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8d:4b:c4:8f:0f:c3:f8:94:95:7a:8b:87:23:fb:2e:60:e3:
         b7:1b:6c:4d:be:1d:5e:32:5c:9c:b0:35:bb:bd:53:9d:0c:c9:
         c1:be:8a:0c:60:3c:df:90:0a:10:15:5f:31:15:e5:7e:d6:30:
         13:07:3a:b5:2e:e0:6f:4a:ee:23:a2:77:be:be:1e:44:5d:d0:
         91:4c:c3:eb:ac:31:ec:aa:08:3a:36:c1:af:bd:af:f1:f3:db:
         95:bd:d5:0e:b8:46:6a:e4:91:b1:d3:f8:b7:88:af:42:ed:ae:
         b2:13:a1:7e:aa:2a:b1:b7:47:04:10:08:91:f4:47:f7:90:df:
         6e:af:4e:6b:51:0b:2f:99:5a:62:f3:e8:3a:9a:3c:d2:67:50:
         20:05:92:28:bc:c8:f4:44:a1:96:41:e7:7d:55:c0:1c:c9:e1:
         ca:fa:71:b9:a6:fa:d8:b5:4a:46:6c:58:be:01:74:1a:ad:83:
         0c:26:c5:2e:a5:fa:ae:11:fe:ab:60:ae:6a:fe:a8:8f:98:f6:
         95:10:be:6d:93:18:e7:7c:56:57:39:af:d1:7f:9c:2b:3a:62:
         3d:35:0e:d2:6e:4c:61:bc:55:dc:7d:02:32:71:85:51:22:21:
         8e:32:84:bd:38:4f:3f:fb:5a:4c:e0:cf:49:0f:e5:fe:16:bf:
         a3:b3:5a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:01:54 2025 by rpki-client