This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
File:                     51IOJIn_YDiw2HmwRxcPnFGs984.mft (raw, json)
Hash identifier:          pxs0MngAN17XiCVMRjoUcKu9BsE9H3wMjA8cwWHlxmE=
Subject key identifier:   C9:9C:02:7B:39:86:DE:FD:1E:7F:1E:41:77:98:9C:E1:31:96:82:47
Authority key identifier: E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE
Certificate issuer:       /CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
Certificate serial:       0251
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
Manifest number:          0249
Signing time:             Fri 19 Dec 2025 01:03:07 +0000
Manifest this update:     Fri 19 Dec 2025 01:03:06 +0000
Manifest next update:     Fri 26 Dec 2025 01:03:06 +0000
Files and hashes:         1: 51IOJIn_YDiw2HmwRxcPnFGs984.crl (hash: JcbBqvqY5OLt1ZT2W1fpDq5AACsfKFpmamZW8oLVO0U=)
                          2: 27C38AF4C0C111EE84A55128C4F9AE02.roa (hash: wIZlMBid+1P+5GWXEfhaHDavI2pP5RgKD6YPhcbCvPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl
                          rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912127A, serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
        Validity
            Not Before: Dec 19 01:03:06 2025 GMT
            Not After : Dec 26 01:03:06 2025 GMT
        Subject: CN=6944a44b-4a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:83:2d:6e:c3:0b:a4:40:2f:f7:a5:76:4d:
                    b9:53:b8:dc:74:1d:cb:75:0d:66:f9:83:b5:d5:25:
                    3c:4a:ba:5d:30:74:55:9a:be:b8:04:2b:57:ef:16:
                    bb:36:65:7b:87:af:fe:26:ed:a8:6e:0b:fb:91:d7:
                    52:88:a5:2e:54:31:08:25:cc:c8:62:e5:ed:dd:25:
                    7b:e7:2a:ec:a0:46:c0:d8:34:26:ad:8a:61:31:34:
                    6e:a0:28:a6:e6:ad:26:9e:3d:7e:5f:e8:62:03:1a:
                    aa:55:c1:29:37:cb:ff:08:b5:ff:f9:34:73:19:94:
                    20:c0:fc:fa:c4:5e:b3:af:34:14:08:ef:ba:44:26:
                    96:85:cc:ac:1d:a4:a4:e7:a2:65:90:bc:d4:32:ff:
                    58:91:0a:14:ca:5f:78:f5:d2:7a:4e:5b:42:3c:d1:
                    8b:fd:f2:df:90:97:32:c1:7d:7d:c5:c6:db:02:33:
                    40:c1:8c:33:6d:65:7c:6d:67:2b:56:bb:22:71:ea:
                    6d:28:00:f9:3c:fa:26:53:28:26:96:99:8e:14:3a:
                    03:52:f6:0d:2a:a2:7a:a0:b0:c4:76:24:a6:3c:53:
                    98:41:ac:51:45:f9:06:12:10:92:a6:17:59:35:77:
                    46:83:75:6e:49:c8:77:18:ac:de:f3:cb:98:ab:4b:
                    3e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9C:02:7B:39:86:DE:FD:1E:7F:1E:41:77:98:9C:E1:31:96:82:47
            X509v3 Authority Key Identifier:
                keyid:E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e0:e3:b0:1b:a6:70:4f:c4:69:bb:d0:e3:27:b3:93:91:54:
         35:91:57:ac:46:7f:be:53:08:84:9e:53:a1:1f:1b:98:db:0c:
         af:85:85:26:8e:53:27:15:8f:5e:80:b0:1b:38:dc:e6:26:3f:
         90:49:4d:67:09:61:72:39:aa:fb:86:03:5c:c6:5e:1f:d1:04:
         96:89:d5:87:18:cb:74:30:bd:5c:69:6c:c3:ac:37:2a:3e:af:
         e6:27:18:2a:ea:0a:aa:17:f7:20:ba:98:3d:3b:b6:95:15:a4:
         16:3b:f6:e9:8e:06:02:3e:b0:26:6d:12:92:14:37:1b:21:dd:
         3e:d5:c0:51:5d:51:98:15:60:b0:d0:9f:ec:39:ec:61:5f:c8:
         eb:5e:4d:80:ee:03:d9:42:8c:44:6b:b4:2b:3f:ce:15:34:b0:
         18:e8:51:47:48:51:27:e6:93:cd:f7:1c:f4:f7:eb:30:c0:7c:
         60:ec:26:f4:d7:e0:15:ea:06:0f:db:1d:36:10:11:63:cc:7e:
         0f:14:c9:ce:60:4d:93:ac:aa:2f:cf:b7:9a:59:02:9d:be:34:
         60:df:86:c0:5d:d7:9a:ed:d4:d1:3f:8d:ae:15:2b:c9:c7:f5:
         df:3a:e0:97:14:95:03:bd:17:c4:93:63:1e:ae:e7:bd:74:35:
         14:b8:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:11:05 2025 by rpki-client