This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
File:                     tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json)
Hash identifier:          /mh7wTry1G7Bmd1rdOeCuDWFFtshs3kkz9rhdQh7BE0=
Subject key identifier:   77:5D:EA:8C:87:FC:FE:81:90:15:DC:2A:2C:E3:3E:26:77:DB:E6:96
Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
Certificate issuer:       /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
Manifest number:          0194
Signing time:             Tue 23 Dec 2025 02:31:09 +0000
Manifest this update:     Tue 23 Dec 2025 02:31:09 +0000
Manifest next update:     Tue 30 Dec 2025 02:31:09 +0000
Files and hashes:         1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: bhuv6MgZW+LncW0WKzpq0UfIgGm91TUOutrS/N22Z4w=)
                          2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: pB1reIfyHdxeUfXs+919CuRxWhrieVaoumr+2A452aM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl
                          rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
        Validity
            Not Before: Dec 23 02:31:09 2025 GMT
            Not After : Dec 30 02:31:09 2025 GMT
        Subject: CN=6949feed-2c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:1f:bb:38:40:c3:79:c4:cd:2b:cf:46:4b:
                    fc:1a:8c:7b:e0:df:aa:7a:17:5d:f7:4c:f6:33:3d:
                    70:23:f2:ad:f3:ac:6d:4d:fe:5d:50:19:c1:54:4e:
                    74:46:14:4e:28:13:0f:34:3f:d1:93:f1:b9:62:bf:
                    88:ea:0a:74:bc:ef:44:1a:d5:d6:53:74:86:29:4e:
                    77:7c:73:e3:b3:dc:7f:2b:dc:a1:0d:7e:b6:94:bf:
                    6c:b3:61:13:65:cf:32:12:be:64:a0:14:b0:84:cf:
                    6f:63:39:9f:50:ad:3e:9e:8c:ba:c0:51:f3:14:b7:
                    d7:72:9c:0c:44:45:8f:89:fe:cb:7a:cb:d2:a2:91:
                    46:4b:fd:2d:49:c8:78:d2:c4:12:06:77:90:04:5e:
                    7c:64:6d:05:cb:35:21:a7:61:78:60:ee:55:ec:5f:
                    e4:9e:db:20:21:8f:6f:6c:53:e0:9a:32:37:ca:af:
                    e7:62:fe:c1:a2:a4:30:26:20:f0:75:38:4b:33:7b:
                    75:33:16:81:c5:d6:3e:4d:1e:96:be:51:6d:95:41:
                    e7:ab:b9:67:6c:3f:cd:c4:7b:16:55:88:d2:1a:46:
                    46:9b:58:3a:4d:f8:5d:0f:2c:aa:b7:c1:2a:85:7c:
                    ee:37:1c:0d:ad:fd:ec:45:d5:05:9a:c9:57:23:11:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5D:EA:8C:87:FC:FE:81:90:15:DC:2A:2C:E3:3E:26:77:DB:E6:96
            X509v3 Authority Key Identifier:
                keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:16:31:81:0c:86:11:38:0b:67:51:d9:48:b7:9e:4c:61:8c:
         63:be:b9:7b:20:b7:3c:41:7d:77:20:ce:cb:ff:bf:89:cc:cb:
         c7:ba:67:a4:f2:9e:b8:c0:b1:8c:20:d6:1c:4a:a2:1d:e7:3e:
         ff:89:ab:ec:1f:1d:04:04:be:88:9e:81:2b:51:ae:cd:82:98:
         41:cf:9b:79:10:d2:3a:4d:fc:1f:48:bb:8c:c6:22:97:20:38:
         ee:ec:af:72:4e:1a:ed:ce:ad:88:60:7a:a2:1c:81:f1:b9:27:
         7e:23:6e:81:99:c4:19:10:53:87:7e:ca:52:f5:af:a9:71:47:
         ec:76:b4:81:48:73:9a:bb:87:33:25:64:5b:23:64:59:5a:a3:
         45:54:38:32:23:8c:35:e0:b8:94:2e:38:a8:ad:f3:c3:78:95:
         50:b4:38:28:d2:9a:82:55:c4:ee:78:50:d0:9f:4f:94:1f:19:
         0d:34:e7:77:77:90:49:45:bd:bc:a2:1e:d5:ef:c1:7e:5c:00:
         26:a3:b5:16:58:f3:1e:6b:14:50:55:4a:ec:99:7a:a0:ec:fa:
         72:39:69:0a:c7:0e:80:b2:f8:bf:ff:4e:29:34:9f:ad:75:23:
         ea:53:80:5a:4e:c7:c5:21:7c:db:97:e8:f6:96:66:30:28:8b:
         10:cf:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:44:02 2025 by rpki-client