This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
File:                     mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json)
Hash identifier:          fqgkngQgwjtY1YUQFliAJ3FElV52BB/F4eyngFpzxKU=
Subject key identifier:   89:46:14:22:B2:20:41:0D:33:2B:1B:48:52:3E:7C:CD:FF:66:2D:C5
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Certificate issuer:       /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial:       031F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
Manifest number:          031A
Signing time:             Tue 23 Dec 2025 00:06:43 +0000
Manifest this update:     Tue 23 Dec 2025 00:06:43 +0000
Manifest next update:     Tue 30 Dec 2025 00:06:43 +0000
Files and hashes:         1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: 2TvBrZS/E2mjf+4ByJ6zifZULKktdBq00us0I+64+Y8=)
                          2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: caDwJbItaMkMbYRFf35kercOFxduC/QaXG95XjbXJ4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
                          rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
        Validity
            Not Before: Dec 23 00:06:43 2025 GMT
            Not After : Dec 30 00:06:43 2025 GMT
        Subject: CN=6949dd13-0053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:8e:d1:f6:17:7f:ad:f4:16:f4:d4:d0:ad:
                    6b:e8:84:ac:3b:2d:1b:03:c1:25:25:d8:7d:a4:aa:
                    36:8f:07:17:8e:da:b1:ba:47:32:39:57:59:8d:50:
                    1c:e1:c1:bc:a1:36:11:ae:92:a6:86:c8:e6:44:2c:
                    cf:9d:1b:42:91:a9:5f:93:ca:ad:17:70:9e:b1:9b:
                    94:88:9e:d1:01:f7:46:fb:04:e2:a9:26:8e:12:d9:
                    a1:b1:14:1b:0c:6c:a0:82:cb:e8:3a:52:c5:11:ed:
                    d4:b2:1c:e5:71:2f:de:25:fb:51:ff:a7:eb:af:e2:
                    de:26:96:ce:83:93:75:dc:b0:64:e2:1f:5f:6c:77:
                    dc:d5:56:fc:54:03:69:28:54:5d:6b:75:cf:c5:ca:
                    f6:7e:e2:0e:22:ca:18:be:d9:fe:d9:cf:26:5f:18:
                    8a:05:17:d1:fe:e6:61:16:7b:b2:ce:20:9e:c1:7a:
                    f2:c0:f0:4e:bb:e4:3c:51:64:e4:d5:f3:36:98:54:
                    97:35:db:8b:7b:55:ed:41:6d:83:4f:67:c4:9d:d1:
                    da:94:fe:c1:af:aa:52:a7:1f:77:b4:fc:21:47:27:
                    d7:2a:6b:db:b2:c8:46:aa:ac:e6:97:f5:5d:83:40:
                    46:89:67:c3:c6:c7:96:06:64:a6:e2:c0:f1:fd:fe:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:46:14:22:B2:20:41:0D:33:2B:1B:48:52:3E:7C:CD:FF:66:2D:C5
            X509v3 Authority Key Identifier:
                keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9b:01:3b:6d:51:44:70:b5:3e:b5:c0:f7:51:cf:1e:6e:ba:
         e3:b3:91:19:49:bf:93:90:27:5e:f7:b3:6e:07:61:24:2e:8f:
         0f:34:1e:2e:04:19:01:cf:49:c0:ff:2c:61:19:85:ad:af:8c:
         9d:26:24:a0:cd:ec:0a:86:01:77:2a:bf:24:0d:f9:49:b1:99:
         5a:95:7b:ec:93:c9:aa:55:fa:3a:9c:5f:66:10:c2:57:55:f1:
         68:91:dd:18:eb:22:e7:f1:40:19:fd:71:75:ca:c9:34:35:cd:
         59:51:43:99:0f:54:25:14:ed:a7:0a:11:af:6f:aa:e8:d9:1c:
         66:71:4a:8a:be:93:3e:a7:e8:ae:ae:8d:db:49:9a:1d:17:1f:
         5c:64:bc:70:35:e7:46:39:d9:c4:d4:94:3f:2e:5f:68:6d:09:
         38:c7:01:7c:a1:d5:b1:a9:42:cd:e5:1a:c6:02:6e:e9:4a:d1:
         6c:fc:6a:ad:43:4b:bd:1b:7c:27:43:b4:9d:99:50:83:4f:c3:
         9f:5c:19:e0:30:64:70:d7:40:86:df:8b:b6:a1:7f:f4:91:b4:
         f3:43:4e:96:a0:e2:f7:e8:c9:96:d6:ca:11:a0:fd:92:e6:9f:
         92:33:49:5b:8a:6f:ff:d4:8e:5f:c8:8c:d4:02:2e:be:1b:93:
         e5:d9:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:08:59 2025 by rpki-client