This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft
File:                     agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft (raw, json)
Hash identifier:          EU4v/ruhN27nA2qKtJgO6QiNDXshicwNagxuhoHEaJw=
Subject key identifier:   F2:CB:EC:0D:AC:86:00:E4:F3:1B:1C:C1:C7:40:EA:10:FF:5C:7B:6A
Authority key identifier: 6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67
Certificate issuer:       /CN=A9127898/serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867
Certificate serial:       059C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft
Manifest number:          0753
Signing time:             Mon 22 Dec 2025 22:20:33 +0000
Manifest this update:     Mon 22 Dec 2025 22:20:33 +0000
Manifest next update:     Mon 29 Dec 2025 22:20:33 +0000
Files and hashes:         1: agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl (hash: iSlH+e0nKFgF3ILLhC/2N6X1Kqb/dVyGZKEkdF+69C8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898, serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867
        Validity
            Not Before: Dec 22 22:20:33 2025 GMT
            Not After : Dec 29 22:20:33 2025 GMT
        Subject: CN=6949c431-0e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:11:f6:e5:5e:5a:25:67:73:fb:c6:d1:9e:
                    23:58:6a:d5:a4:f7:2b:62:c0:47:05:8a:3a:cf:e4:
                    6c:02:63:c1:76:70:b0:9f:78:00:f9:b6:eb:45:f4:
                    f5:b0:7e:35:6d:98:b3:5e:aa:6e:ed:be:19:f1:01:
                    aa:6d:06:7e:c4:7b:23:14:ee:e8:80:47:73:18:f6:
                    2a:ef:98:f3:a5:e5:0b:87:87:17:6d:1a:39:cc:a8:
                    57:b0:10:bc:e0:c8:0e:13:22:1d:82:8a:b8:5f:66:
                    1c:4c:c3:e1:ea:31:cd:85:f3:34:a2:5f:a8:50:52:
                    18:f3:44:a8:92:af:96:8e:ea:dd:79:b6:6b:a2:e7:
                    70:26:2d:ab:c7:58:6b:c7:a8:e3:18:c9:26:c5:40:
                    fd:ce:eb:cd:b5:3c:29:49:08:b3:96:a6:37:08:7a:
                    94:bb:e9:e9:10:f6:60:3f:2e:77:7c:b7:8d:8e:79:
                    e0:c4:48:7b:10:97:79:03:36:7f:eb:09:7b:fe:0c:
                    3d:7f:d4:66:e8:7d:5c:dd:d5:83:7b:d7:ca:2d:28:
                    68:7b:76:31:b3:1a:7e:64:90:6f:b4:52:ca:1d:9a:
                    c7:11:bd:fd:98:c1:30:a1:5b:b9:c8:36:b2:06:aa:
                    4f:9a:9a:a8:1d:cb:05:74:d6:45:34:d5:1c:3b:d9:
                    cd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CB:EC:0D:AC:86:00:E4:F3:1B:1C:C1:C7:40:EA:10:FF:5C:7B:6A
            X509v3 Authority Key Identifier:
                keyid:6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:7f:14:32:99:49:2d:9b:b2:df:86:1a:54:4d:cf:cd:06:37:
         50:c1:35:62:25:ee:5c:03:58:e8:47:7c:87:10:3c:37:2e:0e:
         b7:7b:0b:66:5e:b6:b4:b9:36:74:7f:b6:17:fb:75:f7:11:54:
         3d:e2:d0:a6:1f:62:64:39:e7:87:32:a2:4b:9a:7e:5f:92:4e:
         cc:fc:14:1e:a3:11:19:db:84:f4:09:00:8d:7f:e4:f4:2e:6b:
         64:6d:39:fa:d9:48:a7:7b:48:bc:8e:ac:08:9e:2f:ba:66:8a:
         91:21:c1:4f:1f:38:f3:59:44:d1:ae:65:50:b2:9b:57:14:87:
         fe:f8:5a:c2:44:a3:f8:0d:b5:63:38:cc:69:74:95:69:d4:80:
         ae:90:7f:9c:25:8b:fc:27:e1:66:9a:a8:77:83:df:72:5b:c5:
         06:ea:cc:f3:9f:86:73:07:9a:67:db:58:82:61:cb:e7:21:54:
         4b:d9:37:4b:fb:e7:b8:5e:fe:f6:9f:53:f2:ce:5d:34:6f:c2:
         2f:d9:8e:80:60:dc:a6:42:53:61:07:b3:74:2a:15:ae:be:72:
         c5:21:78:f1:1b:59:3a:3d:ca:c2:a2:0c:89:22:b9:fd:6b:97:
         c4:cb:a3:d3:4b:c1:84:7d:18:be:ab:59:f8:7a:06:bc:74:2d:
         cb:e3:c3:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4OTgxMTAvBgNVBAUTKDZBMDhERDBDNkE2QzQ1MjJBQTEwMThDODJENjhCNDYw
RTJEOUU4NjcwHhcNMjUxMjIyMjIyMDMzWhcNMjUxMjI5MjIyMDMzWjAYMRYwFAYD
VQQDDA02OTQ5YzQzMS0wZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2kR9uVeWiVnc/vG0Z4jWGrVpPcrYsBHBYo6z+RsAmPBdnCwn3gA+bbrRfT1
sH41bZizXqpu7b4Z8QGqbQZ+xHsjFO7ogEdzGPYq75jzpeULh4cXbRo5zKhXsBC8
4MgOEyIdgoq4X2YcTMPh6jHNhfM0ol+oUFIY80Sokq+WjurdebZroudwJi2rx1hr
x6jjGMkmxUD9zuvNtTwpSQizlqY3CHqUu+npEPZgPy53fLeNjnngxEh7EJd5AzZ/
6wl7/gw9f9Rm6H1c3dWDe9fKLShoe3Yxsxp+ZJBvtFLKHZrHEb39mMEwoVu5yDay
BqpPmpqoHcsFdNZFNNUcO9nNNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLL7A2s
hgDk8xscwcdA6hD/XHtqMB8GA1UdIwQYMBaAFGoI3QxqbEUiqhAYyC1otGDi2ehn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD
MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JTS3FFQmpJTFdpMFlPTFo2
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FnamRER3BzUlNLcUVCaklMV2kwWU9MWjZHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JT
S3FFQmpJTFdpMFlPTFo2R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtfxQymUktm7LfhhpUTc/NBjdQwTViJe5cA1joR3yHEDw3Lg63ewtm
Xra0uTZ0f7YX+3X3EVQ94tCmH2JkOeeHMqJLmn5fkk7M/BQeoxEZ24T0CQCNf+T0
LmtkbTn62Uine0i8jqwIni+6ZoqRIcFPHzjzWUTRrmVQsptXFIf++FrCRKP4DbVj
OMxpdJVp1ICukH+cJYv8J+Fmmqh3g99yW8UG6szzn4ZzB5pn21iCYcvnIVRL2TdL
++e4Xv72n1Pyzl00b8Iv2Y6AYNymQlNhB7N0KhWuvnLFIXjxG1k6PcrCogyJIrn9
a5fEy6PTS8GEfRi+q1n4ega8dC3L48Pt
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:19 2025 by rpki-client