This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
File:                     n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json)
Hash identifier:          Q7MG+Yzdhx1S6MtvXUvoK+FwKCbJCWJcaQHBny/PF94=
Subject key identifier:   DC:66:A7:21:51:D9:44:08:29:A1:E7:47:26:A1:70:31:04:A2:DE:F0
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Certificate issuer:       /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
Manifest number:          0118
Signing time:             Sun 07 Dec 2025 03:08:54 +0000
Manifest this update:     Sun 07 Dec 2025 03:08:54 +0000
Manifest next update:     Sun 14 Dec 2025 03:08:54 +0000
Files and hashes:         1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: 2vg82lMskCdQmYjO8YPw0JvTxhmM9IEitJZJLbRgtn8=)
                          2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: Lss+xMSjsVW/Iz01A+UAitwGdTNiOgTBuwOADNSWYt0=)
                          3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: Uft/wx6+OSudUAkV6haKL8qwseEuVEVTt0nYwgnQ/Yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
                          rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 03:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
        Validity
            Not Before: Dec  7 03:08:54 2025 GMT
            Not After : Dec 14 03:08:54 2025 GMT
        Subject: CN=6934efc6-6149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6f:3b:21:6e:a7:4b:9e:51:f4:39:b6:10:79:
                    fa:a6:47:ce:92:ec:4c:dd:42:da:d2:eb:a7:fd:6f:
                    8c:24:10:04:05:49:e0:17:7b:ed:0f:de:2a:d6:34:
                    db:85:1e:dd:24:e8:9a:d1:c2:26:ab:05:c5:19:d0:
                    9b:31:87:0a:01:f4:28:6e:29:1d:2f:f4:45:5f:6d:
                    66:bd:bc:54:2b:55:ee:5e:b9:d8:a8:50:d4:02:40:
                    fe:30:26:3d:43:54:9e:31:b2:65:dc:bd:f1:42:e4:
                    1b:e0:40:2f:2c:c6:bc:d9:ef:0e:e2:cb:58:66:80:
                    1f:c5:04:51:7b:45:c3:d8:3e:a5:8b:65:52:d8:52:
                    2b:81:ee:34:92:29:38:f6:80:9f:ac:d0:1b:ef:37:
                    b5:bd:8c:6a:57:9a:6c:3a:2b:db:b4:95:17:3f:a0:
                    2c:2a:af:60:0b:2b:e8:24:9e:b6:ab:a4:ff:4c:95:
                    5f:22:96:16:39:1f:36:0d:de:7a:8c:e0:4a:98:ee:
                    ae:21:fa:61:0d:31:85:ed:77:f1:82:b2:58:ef:b7:
                    4c:b6:bf:ba:db:c9:63:54:f3:bc:c9:45:bc:e7:b3:
                    3f:1f:c3:27:0f:83:30:db:07:64:f2:8b:b1:4f:51:
                    06:4d:61:34:e5:de:23:7c:f4:3a:7b:8f:b8:e8:cb:
                    f0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:66:A7:21:51:D9:44:08:29:A1:E7:47:26:A1:70:31:04:A2:DE:F0
            X509v3 Authority Key Identifier:
                keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b2:c0:d2:fd:ce:d1:d9:26:4f:40:8b:69:2f:37:26:44:37:
         89:fb:f3:d1:00:4c:3f:4d:c8:95:b5:ae:be:e7:fc:02:43:92:
         a6:08:fc:0c:3d:a8:a8:be:27:af:28:e6:4c:48:fc:53:7e:6b:
         8a:80:66:bb:2e:6d:19:63:19:05:78:ce:f5:1a:8e:00:b7:7e:
         94:71:c6:9a:3a:ca:47:ec:4b:45:01:0c:a7:c3:ba:d0:16:e3:
         34:38:7d:4b:79:68:a0:9b:52:76:ad:46:3f:44:8b:30:e4:ff:
         5d:b3:22:af:1c:29:6f:dc:20:c2:79:f2:72:a7:5a:66:9b:0d:
         13:65:4a:2c:02:f0:39:0c:fe:68:59:a7:56:23:dd:2f:80:4c:
         da:c4:21:71:ef:47:07:2b:2c:41:b6:63:94:29:0a:fd:ae:a0:
         81:52:d8:f7:b6:50:ae:a2:30:63:0c:49:df:cf:ec:68:ef:05:
         7d:5c:81:5c:aa:93:fa:f2:ca:b3:68:81:8b:fb:3a:bf:ed:72:
         0b:27:16:8a:36:50:39:c3:82:6e:e4:a1:0c:2d:f1:54:31:29:
         48:bd:37:26:1d:57:e6:2b:11:66:78:f4:a0:dc:fc:74:2e:89:
         1c:a3:51:c6:bd:f1:2d:eb:d6:ea:ce:26:00:cf:b9:5f:c1:27:
         57:45:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:02:19 2025 by rpki-client