This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
File:                     XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json)
Hash identifier:          2AgM+njlHC0TOsuMUS6PxTv3wv62FwJMornKNL1QXS0=
Subject key identifier:   E1:E3:82:68:4D:83:75:6C:90:FB:2C:BB:62:7E:18:23:42:54:D7:45
Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA
Certificate issuer:       /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
Manifest number:          0195
Signing time:             Wed 03 Dec 2025 02:02:29 +0000
Manifest this update:     Wed 03 Dec 2025 02:02:29 +0000
Manifest next update:     Wed 10 Dec 2025 02:02:29 +0000
Files and hashes:         1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: fvE72bo0e0MZUnAWaogiQXowWw4I4KOkIncET8KfroE=)
                          2: DFE29CB669E511EE92E9E35AC4F9AE02.roa (hash: 1ZszVXnu+oof2agkcsw2N+1e9S9zcssyc5TigB7H1/w=)
                          3: 6821BAB4450C11F0A7A54A80C4F9AE02.roa (hash: cK+N9izYWqB7nJ2gb9CD89n2r86dl3xekNBy66q5a0Q=)
                          4: DF0BED1069E511EE92E9E35AC4F9AE02.roa (hash: e26WrvOpcLVtFLCEGQEyLqc/kWvK3maBfU7Yb9x41Mg=)
                          5: 6911C6C6450C11F0A7A54A80C4F9AE02.roa (hash: XM9Bx/2dvSebxGit5XsfhdOhtq9u4/gFe4PEE8p0hU0=)
                          6: 688DF576450C11F0A7A54A80C4F9AE02.roa (hash: 4F6WXMQnkc6O0hYawZzx3De82Qtz5srkx6WGHHAwdQk=)
                          7: 065143FAB71C11EF9C368D66C4F9AE02.roa (hash: ejDPctxuPr+08V8pahIdV3zpYnFneVGtkqcwrd8I5VM=)
                          8: DF7C0A6E69E511EE92E9E35AC4F9AE02.roa (hash: NbEb3oWP2ceJtb7zrqoj41m3/pXeHDptDVhijrcSdOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl
                          rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 02:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
        Validity
            Not Before: Dec  3 02:02:29 2025 GMT
            Not After : Dec 10 02:02:29 2025 GMT
        Subject: CN=692f9a35-7e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:be:c5:2d:bd:86:28:df:03:ac:0a:d0:5d:
                    43:e7:84:8d:23:b2:cf:48:37:82:27:c4:77:cb:ed:
                    13:98:30:ed:85:fd:43:17:68:b3:09:38:79:85:21:
                    9b:35:c6:c2:d0:1f:c5:9c:24:42:80:7e:38:f8:7a:
                    53:5c:5c:9b:82:38:34:4a:5f:db:18:5f:f3:36:b1:
                    28:e9:3c:8e:e0:01:3a:78:eb:b9:6b:7b:ad:18:78:
                    6c:be:4e:93:13:64:06:68:ee:3d:17:93:c8:d6:39:
                    7f:ad:bb:88:3c:5b:0a:0e:f9:c9:c9:c3:8b:46:a1:
                    c1:53:29:7c:b8:2f:7c:02:74:97:ad:9d:43:e4:4f:
                    90:3b:74:4a:b9:14:53:a4:83:e4:d4:68:bd:fc:e9:
                    3c:f1:77:14:74:cd:15:84:65:57:8f:f7:16:45:20:
                    5b:56:8a:72:7a:0b:c4:10:0b:c1:59:14:b3:9e:ab:
                    96:91:55:c9:dd:33:d0:99:da:0c:28:46:cd:eb:9d:
                    e6:79:7c:06:7c:14:f2:73:eb:20:71:ab:c3:69:38:
                    81:f9:d6:ee:c6:53:2b:b7:28:78:a0:99:1e:79:21:
                    5f:59:66:f2:e6:60:4c:2b:43:18:81:b4:93:f3:b7:
                    f8:14:1c:b5:4a:0f:06:45:f0:90:6a:66:bc:1f:b1:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E3:82:68:4D:83:75:6C:90:FB:2C:BB:62:7E:18:23:42:54:D7:45
            X509v3 Authority Key Identifier:
                keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9c:cf:cb:b2:30:e8:69:5d:fe:72:fc:33:40:19:d3:b6:d0:
         b1:08:af:fc:ad:53:6f:3f:e3:84:8b:6e:a6:03:fb:16:56:cd:
         93:0d:fc:6c:16:af:48:3b:3d:3a:8f:32:e2:7d:47:14:80:87:
         90:ae:4f:07:87:d3:fc:a9:05:cb:29:aa:0b:08:b2:a4:42:73:
         30:2b:37:ac:f7:6f:01:e5:83:50:1a:03:d8:98:2c:db:97:b1:
         25:a8:f8:9a:78:92:01:ae:d6:35:fe:13:d0:43:df:bf:c5:78:
         f4:b5:21:86:d8:39:98:65:ff:af:6c:c6:2e:27:8f:b7:c9:6e:
         e1:bb:09:0f:8a:68:a3:e0:05:64:f0:16:96:d3:86:01:a4:60:
         bc:90:46:c1:92:60:a0:f2:12:1d:64:45:59:2c:a1:05:59:50:
         77:b5:11:9a:8e:15:ce:c0:37:4d:33:25:bf:21:9b:8f:8a:d6:
         da:db:d4:75:a7:93:14:5c:2d:0f:31:2f:a9:5f:ee:93:99:e7:
         87:ac:1f:d6:ec:c1:f8:c9:8e:0b:29:ab:de:d7:45:fe:b0:39:
         cb:20:ab:cc:94:a2:c4:a3:8c:e7:9a:c2:34:21:79:ff:96:7f:
         66:fa:a4:c1:ad:88:d7:cd:30:e4:23:21:57:85:29:cf:a0:8d:
         3d:67:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 00:53:24 2025 by rpki-client