This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
File:                     18TeE2hvQ1WFNoORXlQd7XU66zo.mft (raw, json)
Hash identifier:          TxG0JSYs8m4yJ4WnpnkpCiOijkTgdu8a67U/kB0czEY=
Subject key identifier:   7B:FB:58:CC:94:A3:0C:C1:2E:9E:70:E0:AF:84:68:76:78:48:83:EF
Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
Certificate issuer:       /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
Manifest number:          0139
Signing time:             Fri 05 Dec 2025 02:43:21 +0000
Manifest this update:     Fri 05 Dec 2025 02:43:20 +0000
Manifest next update:     Fri 12 Dec 2025 02:43:20 +0000
Files and hashes:         1: 18TeE2hvQ1WFNoORXlQd7XU66zo.crl (hash: VRVZR6YN+74Nj1n7Ff0x/3KfiblFt5UmjNRrOPp8QOk=)
                          2: 55FE0314581811F09A0AB17CC4F9AE02.roa (hash: lINB4ZwW6CYB53sylS1MrGaiI2L/l8sq0JnVeRgKpuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl
                          rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C776, serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
        Validity
            Not Before: Dec  5 02:43:20 2025 GMT
            Not After : Dec 12 02:43:20 2025 GMT
        Subject: CN=693246c9-53cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:99:a8:36:a0:7e:ca:e2:a5:99:88:01:4c:
                    b0:cd:dd:c0:39:ef:60:f4:80:e6:c9:54:42:5a:dd:
                    a2:25:43:b8:ec:0a:f1:fc:3b:67:39:8a:a0:5d:d5:
                    9d:c3:ee:e7:4b:5f:9d:42:b5:1a:77:6d:8f:54:94:
                    58:39:9f:2f:55:7c:b3:82:e2:50:64:ab:62:c6:d6:
                    f9:89:5b:5c:15:e8:75:f3:17:f1:8d:b5:31:8e:f4:
                    73:ae:72:5a:d6:85:66:30:c1:f8:3b:27:95:cc:ba:
                    64:38:b0:63:be:6e:d2:4f:4e:82:03:2d:d7:e3:b3:
                    fc:24:13:74:b3:1d:3b:fc:42:b1:81:23:21:c7:64:
                    6e:b6:a2:fb:07:da:65:43:9c:04:75:37:03:d1:a8:
                    3c:61:0e:aa:03:22:d7:3f:59:59:e2:91:31:94:64:
                    fd:54:5e:b1:47:c6:13:47:35:bd:41:3e:a1:c2:75:
                    2a:90:5f:12:b5:b8:9f:63:2d:fd:5e:47:b5:27:8e:
                    76:34:80:70:0d:22:ba:9e:24:42:c3:c5:0e:de:75:
                    98:7c:1d:35:54:ba:3c:f3:ad:0c:34:f2:98:09:dc:
                    46:96:1b:fc:ba:02:f6:72:21:20:fb:c0:c6:6c:d5:
                    74:ca:3f:64:06:b8:69:c2:e2:1d:2e:88:7c:22:a8:
                    ca:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FB:58:CC:94:A3:0C:C1:2E:9E:70:E0:AF:84:68:76:78:48:83:EF
            X509v3 Authority Key Identifier:
                keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f9:94:ff:bd:9d:b7:63:c9:39:de:99:8d:52:60:9f:a9:d0:
         4f:e1:7d:e9:5b:7a:0f:88:fb:4b:6f:7b:13:18:f7:de:97:d8:
         07:da:c9:2c:a6:94:ce:de:24:b8:57:52:a1:37:9c:4b:f5:b1:
         b3:c7:6b:95:1c:39:f0:c3:b4:3e:f9:b0:2c:fc:6d:7d:04:05:
         14:5e:07:d3:f7:e0:e7:11:1c:c5:a3:ef:d8:df:a3:6c:5a:9f:
         6e:60:ee:5a:b4:ff:1b:68:26:d8:80:da:27:c2:59:d7:81:51:
         44:41:23:51:ed:ad:50:67:6d:74:31:e5:f9:42:f8:7c:f6:94:
         74:0c:80:e1:07:d9:c2:e4:36:76:db:0a:ae:b5:1e:35:3c:b2:
         4f:0a:02:48:bd:7b:15:8a:22:43:6f:77:7c:e0:70:0e:cd:f2:
         6c:fa:51:05:dd:ee:b7:66:00:53:a9:3e:0b:dd:80:b5:b9:25:
         90:c6:bd:01:f3:fc:52:26:dc:bb:de:31:10:30:d4:88:61:77:
         2a:3e:c0:47:12:57:13:a7:e8:e9:2c:4e:7c:85:ed:c7:ca:20:
         9b:8a:21:f9:59:74:bb:be:f6:42:71:b0:1a:b2:49:35:9d:d9:
         cb:11:ba:59:ef:83:03:4d:67:53:44:23:9f:ef:04:e1:f2:e3:
         32:5a:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:37:10 2025 by rpki-client