This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
File:                     aPPOswXHv_fe-qaMB-tBwLjjcWw.mft (raw, json)
Hash identifier:          ayJ3zv4xvHFL5Q23TiioR6+0ypt/U4cdJNN3yvDpYAU=
Subject key identifier:   B9:90:C7:C5:53:45:36:86:FB:10:40:39:DC:DD:E7:9B:07:13:6F:9C
Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C
Certificate issuer:       /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C
Certificate serial:       07F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
Manifest number:          07F0
Signing time:             Sat 20 Dec 2025 20:29:56 +0000
Manifest this update:     Sat 20 Dec 2025 20:29:56 +0000
Manifest next update:     Sat 27 Dec 2025 20:29:56 +0000
Files and hashes:         1: aPPOswXHv_fe-qaMB-tBwLjjcWw.crl (hash: jIDa7wa0l1OwsbQVpCFQz8FM2/FnQr/23JtbDp8PR+w=)
                          2: E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (hash: tku8g/IBMXsDJnLZ5j41i0Ddo6BJiQ1UMhvs9gK1Tr0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl
                          rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 20:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038 (0x7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189EA6, serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C
        Validity
            Not Before: Dec 20 20:29:56 2025 GMT
            Not After : Dec 27 20:29:56 2025 GMT
        Subject: CN=69470744-33e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:00:98:fe:f2:e5:13:ea:5a:a3:be:11:ff:
                    3c:94:ca:71:82:84:47:90:61:55:79:6f:88:14:81:
                    f5:15:07:1c:73:7c:76:56:74:e3:b3:27:d8:7e:68:
                    60:49:26:5c:1e:eb:77:bf:76:ac:66:eb:9f:5c:23:
                    cb:37:bf:bd:89:fa:3a:4c:9b:c0:e9:ea:b5:0a:b9:
                    b1:a0:16:82:7d:cf:f7:2b:ff:9b:c8:62:5c:3f:1b:
                    3b:3f:96:b9:72:5b:29:1f:82:68:3d:56:d9:c9:5a:
                    e4:95:4a:38:18:7e:a2:25:fe:f0:29:e7:24:9c:2c:
                    97:2e:cc:c2:36:08:c3:fc:38:5a:49:f7:c8:6b:4f:
                    f9:42:7c:bb:50:43:0f:b7:6d:dc:d8:e0:e2:c6:ea:
                    83:0f:e7:9f:50:f5:ca:ed:66:49:c1:18:57:d8:62:
                    93:3d:9b:eb:80:51:52:93:ae:80:b1:c9:fb:8b:a6:
                    05:8a:86:9f:15:5c:0b:95:4b:7c:f5:ef:f9:cb:e6:
                    b7:63:94:18:ec:55:e5:5c:9b:a4:7c:f8:db:ad:f0:
                    ef:38:af:1b:95:87:80:d6:7c:3e:b1:27:bb:dc:c4:
                    38:85:bd:b6:9f:d7:36:61:d8:d1:29:c3:c0:38:0a:
                    98:59:e4:ab:5e:91:29:d5:12:53:59:fe:09:f4:36:
                    a8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:90:C7:C5:53:45:36:86:FB:10:40:39:DC:DD:E7:9B:07:13:6F:9C
            X509v3 Authority Key Identifier:
                keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:94:01:6e:0b:7b:02:2f:6a:5a:10:68:43:61:54:4d:b7:5f:
         77:8e:3f:c1:7a:fb:64:3d:67:6d:13:d7:1d:4c:87:a5:03:ff:
         aa:a7:13:d2:48:21:f9:85:1d:d0:dd:eb:6b:69:c4:de:34:8c:
         83:bd:62:0a:53:b9:d0:3f:ad:7f:2f:a4:87:62:9e:da:9b:c4:
         ae:24:67:f2:28:f4:68:d9:a6:b9:53:ab:8d:aa:b2:15:8a:e9:
         fb:98:7f:c2:fd:bc:8b:11:a0:0b:0c:8d:61:26:04:64:1e:1c:
         ed:80:1f:09:79:01:55:76:d4:05:e9:11:cf:27:c6:3f:dc:03:
         0a:4b:a4:d3:29:33:0f:66:99:f5:2b:cf:be:56:bd:20:a2:e5:
         c5:30:32:93:b0:e0:f3:15:06:c1:a5:20:02:4e:f5:4c:d7:9d:
         bf:2c:11:b4:61:3f:c1:00:14:fb:bd:46:5d:22:50:a9:d2:c3:
         38:75:0d:1f:c2:3b:2b:d8:d3:95:ae:33:73:47:3b:0f:8a:08:
         47:ea:c5:41:d1:f9:d1:49:44:61:c9:7d:38:d3:d0:fe:b7:01:
         a3:7b:6c:fd:9c:3a:7e:8b:f2:56:3d:f0:df:34:e9:a0:d3:68:
         2d:eb:52:c9:75:73:15:e8:0d:91:76:77:b8:64:8c:20:cc:a9:
         f0:47:03:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlFQTYxMTAvBgNVBAUTKDY4RjNDRUIzMDVDN0JGRjdERUZBQTY4QzA3RUI0MUMw
QjhFMzcxNkMwHhcNMjUxMjIwMjAyOTU2WhcNMjUxMjI3MjAyOTU2WjAYMRYwFAYD
VQQDDA02OTQ3MDc0NC0zM2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1JMAmP7y5RPqWqO+Ef88lMpxgoRHkGFVeW+IFIH1FQccc3x2VnTjsyfYfmhg
SSZcHut3v3asZuufXCPLN7+9ifo6TJvA6eq1CrmxoBaCfc/3K/+byGJcPxs7P5a5
clspH4JoPVbZyVrklUo4GH6iJf7wKecknCyXLszCNgjD/DhaSffIa0/5Qny7UEMP
t23c2ODixuqDD+efUPXK7WZJwRhX2GKTPZvrgFFSk66Ascn7i6YFioafFVwLlUt8
9e/5y+a3Y5QY7FXlXJukfPjbrfDvOK8blYeA1nw+sSe73MQ4hb22n9c2YdjRKcPA
OAqYWeSrXpEp1RJTWf4J9DaoPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmQx8VT
RTaG+xBAOdzd55sHE2+cMB8GA1UdIwQYMBaAFGjzzrMFx7/33vqmjAfrQcC443Fs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUVBNi9DRDkzRjM2QzBF
N0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZfZmUtcWFNQi10QndMampj
V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FQUE9zd1hIdl9mZS1xYU1CLXRCd0xqamNXdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUVBNi9DRDkzRjM2QzBFN0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZf
ZmUtcWFNQi10QndMampjV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGlAFuC3sCL2paEGhDYVRNt193jj/BevtkPWdtE9cdTIelA/+qpxPS
SCH5hR3Q3etracTeNIyDvWIKU7nQP61/L6SHYp7am8SuJGfyKPRo2aa5U6uNqrIV
iun7mH/C/byLEaALDI1hJgRkHhztgB8JeQFVdtQF6RHPJ8Y/3AMKS6TTKTMPZpn1
K8++Vr0gouXFMDKTsODzFQbBpSACTvVM152/LBG0YT/BABT7vUZdIlCp0sM4dQ0f
wjsr2NOVrjNzRzsPighH6sVB0fnRSURhyX0409D+twGje2z9nDp+i/JWPfDfNOmg
02gt61LJdXMV6A2Rdne4ZIwgzKnwRwMS
-----END CERTIFICATE-----
Generated at Mon Dec 22 10:16:44 2025 by rpki-client