This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
File:                     AGzRlAGFL6t1v25TlZr665WsJfI.mft (raw, json)
Hash identifier:          kfNS/xoA2E3SWumYwFW1+XNSpV+rE9FYNeqNc2D/fL0=
Subject key identifier:   EC:F6:72:C5:7B:E4:C5:0D:56:28:97:DF:AE:60:AB:89:D6:10:93:A8
Authority key identifier: 00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2
Certificate issuer:       /CN=A919CE1D/serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
Manifest number:          49
Signing time:             Fri 05 Dec 2025 05:12:55 +0000
Manifest this update:     Fri 05 Dec 2025 05:12:54 +0000
Manifest next update:     Fri 12 Dec 2025 05:12:54 +0000
Files and hashes:         1: AGzRlAGFL6t1v25TlZr665WsJfI.crl (hash: jERffvzPmmXNalze9mI1xRDKXY2byhJqlSNqL1C/EBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl
                          rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CE1D, serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2
        Validity
            Not Before: Dec  5 05:12:54 2025 GMT
            Not After : Dec 12 05:12:54 2025 GMT
        Subject: CN=693269d7-3868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:86:ce:01:5b:8a:95:6f:5d:2f:7d:9b:b5:
                    23:6e:f1:a7:88:67:cc:3a:2e:eb:d6:c8:bb:ac:f2:
                    29:e4:cb:eb:93:94:95:20:8e:20:ea:3f:6e:08:8d:
                    be:fc:48:cc:85:39:da:dc:62:8a:dc:a3:ab:36:45:
                    8f:70:93:5d:9a:43:1c:af:eb:0b:9e:f5:58:da:ad:
                    1b:1c:a6:f5:a8:f3:c8:b4:c5:77:76:de:e3:29:d6:
                    b8:e7:f8:b5:a0:47:6b:2e:a8:68:23:51:4c:d3:3f:
                    e0:79:22:dd:d4:80:db:ca:0c:d1:d7:62:51:79:aa:
                    d4:b4:3b:04:22:64:34:45:67:05:37:d5:3a:ad:14:
                    42:62:b2:95:22:52:5a:f8:49:7c:e5:d9:d3:1c:55:
                    e6:97:45:d4:8b:eb:3f:3e:3e:21:37:2d:ff:bc:0c:
                    12:e8:fd:83:df:8a:10:3d:50:5e:53:16:e5:f0:b0:
                    36:6c:30:cb:18:d1:88:00:a3:55:c9:eb:16:d1:d9:
                    c6:49:bb:40:ee:01:e9:fc:45:c4:de:fd:cb:a3:43:
                    3c:86:ee:d9:c9:b9:cd:b0:df:85:0b:2f:51:7b:ee:
                    7c:e6:15:eb:79:3e:97:ab:11:3a:a5:2e:4d:1d:90:
                    d7:4f:47:89:d6:08:22:0b:97:9a:39:3a:81:82:e3:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F6:72:C5:7B:E4:C5:0D:56:28:97:DF:AE:60:AB:89:D6:10:93:A8
            X509v3 Authority Key Identifier:
                keyid:00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:22:c2:12:de:57:af:8d:0a:0e:80:19:04:a3:da:b1:4f:2d:
         3f:31:1e:04:68:1a:1b:87:cd:7e:38:b3:f0:1d:c5:5b:aa:a3:
         0b:48:e8:2c:20:26:87:4c:7c:66:33:66:83:92:3b:2a:ca:f6:
         69:99:1b:25:d8:65:fd:e1:42:e3:b0:22:21:c9:bb:49:07:ad:
         23:a9:db:1c:41:9b:77:98:5f:ce:ed:0d:f5:4a:c7:88:a3:32:
         9f:15:4d:80:83:12:9b:f9:7d:8a:ba:e9:2c:cd:99:c8:0b:5a:
         8b:11:b9:c2:09:62:db:68:a9:72:1e:9e:d3:e4:38:55:dd:93:
         93:e7:6b:49:28:95:b8:06:77:58:85:f2:9d:40:fa:fa:a5:22:
         4c:d6:ef:69:cf:62:79:35:0a:58:6f:6f:ea:51:f2:27:b9:7b:
         8c:12:b8:c2:a0:e9:65:40:83:52:b3:b1:02:26:38:26:6f:74:
         99:97:6b:9d:1b:af:26:0a:f1:22:68:55:2a:71:a9:0d:e3:c3:
         13:59:18:88:5e:42:76:6a:74:63:04:a8:ed:bb:ad:15:39:dd:
         64:22:69:81:cb:82:53:c5:2d:3a:a6:0e:e2:59:2b:28:1b:25:
         5e:3e:ff:33:f9:41:52:fc:fb:aa:6e:d0:61:f3:a7:16:a2:82:
         eb:3a:05:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:44:31 2025 by rpki-client