This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft
File:                     9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json)
Hash identifier:          fjhVXNgN37cevaHecpfLihgBTklWJmA3aqdpB7o2tH4=
Subject key identifier:   29:3F:7F:BD:6B:E4:B0:4E:4C:61:3B:36:96:48:44:B4:54:56:23:45
Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03
Certificate issuer:       /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft
Manifest number:          01A3
Signing time:             Tue 23 Dec 2025 02:19:12 +0000
Manifest this update:     Tue 23 Dec 2025 02:19:11 +0000
Manifest next update:     Tue 30 Dec 2025 02:19:11 +0000
Files and hashes:         1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: UlnPNB1prKp5Y8OLg+qxtRjOjAvnaRl5sLkjgZpGyt4=)
                          2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: nyq8KHP8dGY9X8L7b113gFAzdF9IMtkS8NNdIrOA99k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl
                          rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03
        Validity
            Not Before: Dec 23 02:19:11 2025 GMT
            Not After : Dec 30 02:19:11 2025 GMT
        Subject: CN=6949fc20-9d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:a1:68:4b:eb:b7:84:08:32:ef:2d:1f:9a:
                    92:05:c6:6e:bc:42:3c:46:fd:85:12:ae:0d:b0:08:
                    43:6d:9d:4d:5d:fe:b6:ba:32:1f:89:8a:0d:2b:58:
                    61:8a:64:51:99:95:a9:6a:2f:31:46:3c:82:a0:3e:
                    a0:04:93:27:23:a4:ca:31:59:c4:22:8d:44:10:0e:
                    e3:8c:8d:5b:d2:b3:c7:a5:1f:5b:a6:89:77:ce:a8:
                    7d:73:9e:9c:c9:09:8b:c1:bf:5b:6b:55:81:4a:9c:
                    60:ba:77:7c:9e:6a:49:70:ca:6a:cd:66:ac:e3:db:
                    b7:47:ba:03:f2:04:54:b6:cc:ba:dc:bc:60:f4:a9:
                    b3:7f:b2:1a:e0:3f:24:be:8d:65:45:98:64:1c:46:
                    d9:bd:df:ba:f2:53:13:ec:4e:86:07:35:95:f8:ec:
                    e3:02:92:de:22:61:6b:22:76:05:69:3d:00:99:2b:
                    07:29:48:46:b4:f6:01:0f:7a:49:d8:29:13:bf:29:
                    7d:91:e4:88:8a:66:26:36:7f:aa:28:7f:b8:92:3f:
                    14:4b:01:e5:e5:11:21:1f:2e:f8:e0:92:ca:6a:ad:
                    25:80:14:55:17:f2:84:13:54:b9:15:1c:37:3c:f6:
                    9f:e0:62:ff:1a:06:c7:52:56:dd:40:86:a4:cc:ed:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3F:7F:BD:6B:E4:B0:4E:4C:61:3B:36:96:48:44:B4:54:56:23:45
            X509v3 Authority Key Identifier:
                keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:07:1c:70:df:41:17:31:d6:dc:f2:0d:91:f2:9c:48:a4:a9:
         a8:04:24:e0:26:98:9b:92:a1:e1:85:ab:2a:26:db:a7:20:59:
         af:60:03:24:a1:03:f3:a6:af:ea:d4:7a:99:a4:ec:76:cd:10:
         69:bf:10:d7:77:77:2e:1b:38:5d:9c:54:13:6c:61:f9:50:a2:
         f7:7c:dc:79:e2:d2:38:e8:6a:0d:a5:70:0d:d1:88:fd:4e:06:
         d1:d7:c6:09:92:5b:be:94:06:36:23:a4:fe:d4:b5:a0:ef:61:
         35:cc:e3:ce:11:c2:25:ae:c0:48:fc:71:3f:ef:56:d7:8d:1c:
         cf:65:c0:00:b9:35:20:da:66:4e:c7:21:99:02:cb:c8:7a:aa:
         16:31:97:36:69:04:21:17:af:7c:cd:88:f3:09:84:9a:51:aa:
         22:7c:38:e9:b0:ed:1b:f9:02:8e:69:5c:bd:13:56:66:7c:35:
         5b:14:41:85:71:f3:21:43:3e:71:89:72:10:e8:2e:e8:e5:0c:
         fd:04:2a:8d:e0:a5:38:4b:b5:a7:9f:f6:03:9a:3d:c3:e2:31:
         ee:a2:17:00:e0:60:e6:d9:d1:f1:d1:ba:79:54:7d:a1:66:60:
         be:ac:e6:fd:85:f5:60:29:83:39:3b:ce:00:cd:9c:f9:71:39:
         b1:c7:8d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:32 2025 by rpki-client