This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
File:                     ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json)
Hash identifier:          fFGbqaX4PNs2FBc0YNhk7RNpWaZRjc3X+f641lG/7kg=
Subject key identifier:   8E:C5:BB:9A:09:DE:E0:81:3F:E3:FF:FA:75:D2:3C:AA:CB:91:12:3D
Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Certificate issuer:       /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Certificate serial:       0C12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
Manifest number:          0C01
Signing time:             Thu 04 Dec 2025 18:14:43 +0000
Manifest this update:     Thu 04 Dec 2025 18:14:42 +0000
Manifest next update:     Thu 11 Dec 2025 18:14:42 +0000
Files and hashes:         1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: BiL2bcrCi0vNmLzRYGnYvjZxsPLT7fxj3dn8IRkHVGs=)
                          2: 7AC6992E655411F088401528C4F9AE02.roa (hash: uIcNx9LJmFIiFy1R//MYnp48SjiCyMS3BH2WDp6mT4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
                          rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3090 (0xc12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
        Validity
            Not Before: Dec  4 18:14:42 2025 GMT
            Not After : Dec 11 18:14:42 2025 GMT
        Subject: CN=6931cf92-41cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d0:30:e7:43:c5:b7:27:8e:a4:48:ae:3d:90:
                    4f:4b:c6:1d:b1:e5:71:ad:6b:ef:24:b0:b8:9d:91:
                    b6:04:32:42:ce:dc:e2:4c:60:44:4f:33:c1:c7:6a:
                    63:7e:23:9d:f4:11:8b:28:e8:11:83:d2:11:26:90:
                    c7:e4:a6:c8:50:bb:91:a8:d6:63:83:7e:78:b3:45:
                    66:d6:1f:05:d1:f4:8a:ef:33:09:73:12:7b:da:27:
                    d8:da:04:82:05:79:79:42:f4:ba:ce:5f:6e:fc:a6:
                    4e:39:16:cc:8b:d3:b0:4b:09:52:e0:b2:90:e3:04:
                    ca:fe:27:4a:34:11:cd:b1:5c:56:fc:a0:a3:85:47:
                    b1:ca:08:c7:e9:69:ca:86:ed:3d:2b:21:39:b6:37:
                    82:e8:21:f9:43:68:c0:16:22:68:70:23:dd:79:30:
                    58:92:38:90:2b:a7:c7:e9:23:14:f8:5f:d6:dc:d6:
                    2c:18:87:44:cb:42:c2:40:3a:4e:88:c4:61:0a:ad:
                    86:3f:fc:46:3b:c5:19:dc:d9:17:60:11:a9:58:ec:
                    aa:cc:22:19:c8:da:83:b3:fb:51:6b:b4:8b:36:9b:
                    81:51:27:7c:ab:8b:57:fb:8b:f6:78:7a:bf:3c:9d:
                    7b:30:e7:c1:e5:92:2e:88:15:15:34:f4:2b:52:c9:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C5:BB:9A:09:DE:E0:81:3F:E3:FF:FA:75:D2:3C:AA:CB:91:12:3D
            X509v3 Authority Key Identifier:
                keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d6:ff:c4:aa:55:dd:50:b8:2d:14:54:9a:3d:49:88:8e:e2:
         c1:a2:e8:52:7c:f7:a4:a6:37:0f:09:42:e7:52:2f:5d:45:32:
         18:4c:05:d5:f9:d7:34:3e:f1:7e:65:a1:80:74:60:a4:77:37:
         72:b7:77:2c:6d:87:ec:bf:f5:c1:64:ec:d9:3d:8f:51:e1:25:
         74:08:ea:a7:b5:9e:d9:7f:5d:e2:af:83:85:ee:fc:89:75:b4:
         a3:93:de:94:5d:c2:d7:41:43:f4:43:26:e7:b7:2b:23:6d:11:
         78:63:69:59:9a:c5:03:6e:0e:98:94:b4:d9:49:ec:2d:37:a7:
         af:a1:77:43:b2:c6:1c:6b:be:a1:26:77:2b:d0:4b:41:7b:8c:
         3e:24:f5:fd:ee:23:c0:71:46:e2:29:9c:e2:f6:29:e2:81:87:
         91:b5:0c:3c:48:1b:a0:6e:f2:a7:6b:a0:ef:40:7a:ee:bc:80:
         ff:f0:31:45:1c:c6:af:bc:50:9c:44:39:e9:46:53:4a:f1:67:
         aa:41:74:98:05:73:42:4e:b9:bc:00:83:cc:6f:a2:60:76:df:
         6d:d2:01:eb:72:cf:3d:13:bc:28:76:6b:78:bd:7b:47:21:14:
         fd:fe:d9:bd:12:f1:67:f2:54:1b:41:f7:a9:ee:f7:eb:b0:1b:
         97:fd:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:35:12 2025 by rpki-client