This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
File:                     9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json)
Hash identifier:          fjzqwnTKbMPixwoqmxf8ps6IWTF42ViqUKgsc6dj5wQ=
Subject key identifier:   87:77:C1:81:84:D5:05:46:A3:21:B0:45:1B:C7:20:AC:29:59:3F:75
Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6
Certificate issuer:       /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
Certificate serial:       0696
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
Manifest number:          068F
Signing time:             Mon 22 Dec 2025 21:39:17 +0000
Manifest this update:     Mon 22 Dec 2025 21:39:16 +0000
Manifest next update:     Mon 29 Dec 2025 21:39:16 +0000
Files and hashes:         1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: vrEBiD3U+TkNbOS3SbnXvDc2DGQR6KhLV6LxUVZ3hfI=)
                          2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: j/GF9Fp/8A3iAGqlLey+nPmFjem1hKBzyG3C/3FfPBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl
                          rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1686 (0x696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
        Validity
            Not Before: Dec 22 21:39:16 2025 GMT
            Not After : Dec 29 21:39:16 2025 GMT
        Subject: CN=6949ba85-6bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:1f:83:3f:a3:ba:62:33:33:11:a2:e8:2d:
                    da:6b:76:7a:a0:aa:d5:8f:24:36:7d:d6:7e:f9:71:
                    8b:30:a4:a8:bf:a5:f6:7d:b6:3b:e0:51:cc:e1:c7:
                    51:b1:6d:10:09:9d:d9:9b:b4:2b:42:d0:cc:86:91:
                    ea:34:6f:bf:b7:4a:9e:e4:ee:e1:45:00:eb:89:ec:
                    f4:8b:46:f8:32:11:92:2c:9e:2d:a0:3a:ee:b7:f5:
                    37:91:f7:42:0b:90:0f:31:6c:bf:af:a7:eb:34:bf:
                    70:90:7b:6e:f4:d9:77:4b:5a:74:77:1f:9d:5d:44:
                    6e:4e:4a:35:1b:91:b8:4d:fa:cf:c9:02:31:ec:b9:
                    dd:1a:c3:bb:5e:1f:22:4b:be:20:cc:1e:f5:23:a7:
                    cf:e0:7c:e3:dd:91:99:72:22:d8:13:80:6b:aa:86:
                    86:f6:c5:ab:9f:4d:23:40:dc:47:d5:5b:88:f7:f9:
                    30:9d:a6:26:6e:74:14:96:ef:fb:7d:bf:5e:47:1b:
                    e1:49:7f:47:df:91:53:7c:e6:3d:ca:db:86:42:cc:
                    61:60:fc:df:13:c8:cb:20:88:8b:c1:3c:b4:02:d2:
                    d2:05:77:27:71:cf:bc:84:84:d7:6f:b7:67:5e:bc:
                    5f:82:c5:32:1a:dc:76:38:04:e4:f3:7a:95:7d:5e:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:77:C1:81:84:D5:05:46:A3:21:B0:45:1B:C7:20:AC:29:59:3F:75
            X509v3 Authority Key Identifier:
                keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:53:dc:10:62:86:c3:6a:bb:b4:f8:cd:7e:0e:8e:eb:60:3b:
         c5:bb:36:99:4c:63:47:f3:01:f2:d1:ba:f1:75:15:a7:2d:3d:
         33:81:d5:84:05:de:aa:f1:1a:35:6a:d0:a9:a8:71:b8:cd:21:
         a1:31:33:8e:cd:3b:2a:06:a2:b3:21:7e:ba:71:9d:3c:af:1f:
         bc:ef:8d:1b:88:b0:d5:1d:c3:90:b5:ad:2e:7e:26:0c:31:40:
         42:13:af:38:50:25:07:17:21:db:04:c6:58:6e:38:55:b7:11:
         44:74:5f:f4:55:73:35:06:d7:0b:92:9c:73:3c:14:27:3b:18:
         53:51:b1:75:6d:d3:86:38:9b:de:21:1c:a0:d1:86:38:e5:05:
         8e:c6:7a:c3:0b:9e:e8:c3:4e:30:27:8a:be:84:18:4f:57:55:
         c0:7c:60:9d:b5:55:5d:46:7a:99:18:90:12:fe:16:c6:63:bb:
         fa:ce:25:fb:d6:c7:f0:8e:84:ea:30:a4:d0:99:49:6a:66:7e:
         87:1b:b4:fe:34:96:a6:cb:90:e1:72:65:6b:84:1b:32:3f:0e:
         ea:2c:b3:f2:0e:ff:d7:2a:12:1f:71:24:f5:aa:33:e1:03:33:
         22:9a:c1:83:63:0b:7d:4c:a2:3e:11:18:a0:60:44:5b:ed:98:
         36:95:4d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:41 2025 by rpki-client