This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
File:                     9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft (raw, json)
Hash identifier:          QuVK6UstxQkwh7GEmT4LUGSF/U3FS4BjG2JhBacLiF4=
Subject key identifier:   C6:5B:89:05:F9:2C:02:17:E0:3B:65:8F:52:6B:8A:20:51:63:10:95
Authority key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
Certificate issuer:       /CN=A913CE18/serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
Manifest number:          11
Signing time:             Tue 23 Dec 2025 06:46:42 +0000
Manifest this update:     Tue 23 Dec 2025 06:46:41 +0000
Manifest next update:     Tue 30 Dec 2025 06:46:41 +0000
Files and hashes:         1: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl (hash: wtp6w5RgM6ivyIs9k7AghAFsSUymq04u5G+Tf51okzE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
                          rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
        Validity
            Not Before: Dec 23 06:46:41 2025 GMT
            Not After : Dec 30 06:46:41 2025 GMT
        Subject: CN=694a3ad1-5636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:b9:03:70:45:80:4b:f0:c9:33:38:33:65:
                    0e:05:f9:90:9e:65:af:ab:55:20:c6:e2:52:d2:b9:
                    30:2c:24:76:24:fc:f6:60:80:83:a9:79:66:d8:e7:
                    d2:c9:a6:fc:30:64:34:ed:83:52:37:a1:48:f8:70:
                    5d:77:e8:a1:89:2f:ea:01:2c:48:a7:46:68:c1:55:
                    28:69:45:d7:52:86:3e:dd:36:9f:25:f3:5b:b3:77:
                    7c:c7:86:5c:93:2a:4a:af:b1:ee:14:78:09:ff:f4:
                    55:27:f8:66:a6:44:de:4c:7c:96:2f:17:99:5f:30:
                    ba:41:fc:40:8e:20:7b:5b:ae:11:37:e2:47:0f:4e:
                    1f:59:36:81:ff:d5:79:3b:b1:ac:7d:62:f4:86:61:
                    40:f3:ab:bb:19:6d:d9:12:bd:58:ed:70:c7:a1:c6:
                    8c:18:be:fb:73:04:78:2b:fb:bc:eb:56:97:09:57:
                    ac:fe:02:dd:4c:2b:36:8b:48:43:6e:c3:3b:10:da:
                    3d:48:b7:ba:51:a2:1a:4e:2e:42:e8:38:1f:2b:af:
                    d9:73:03:55:b8:97:e0:8e:5b:dc:2f:f6:bf:94:6b:
                    f1:a4:8b:ee:0e:aa:92:b4:ff:7a:ff:4c:20:13:fd:
                    f6:de:ac:ed:c2:f0:03:2c:e3:5a:ce:b8:05:a1:ae:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5B:89:05:F9:2C:02:17:E0:3B:65:8F:52:6B:8A:20:51:63:10:95
            X509v3 Authority Key Identifier:
                keyid:F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a8:74:b7:be:8c:5c:ca:28:99:fd:2a:b7:f5:85:04:f2:44:
         d6:16:0a:c0:5a:69:a3:67:c2:77:c7:af:09:d8:8a:8d:55:87:
         dc:65:73:e5:c9:cf:e3:b1:fe:8e:f7:b9:1a:29:60:84:9b:dd:
         7c:fc:05:56:27:45:78:75:45:8a:dc:a8:88:dc:2e:e0:60:63:
         c4:f2:a7:79:26:ff:ce:ab:6a:ec:b3:5e:df:dc:1a:ff:19:39:
         18:a0:94:40:f4:9a:58:18:f8:0b:2d:61:e5:94:9c:db:a7:6d:
         b8:e4:64:27:bd:5e:3a:75:b7:94:55:89:7c:f9:20:69:a5:95:
         93:67:99:b8:84:bd:4c:56:a2:a6:61:c5:05:b5:4e:76:cb:70:
         a8:c2:79:a7:39:a0:9f:76:45:f5:c5:d4:ca:7e:b8:46:fa:6f:
         b2:df:9b:e8:7b:e8:f7:9b:a8:85:ef:0d:16:8f:ab:0d:82:9e:
         8a:a5:33:f6:46:77:32:3a:5e:33:16:29:db:88:74:f1:ee:74:
         a5:ae:0d:20:30:1a:da:53:13:e1:10:de:8a:af:7a:da:52:a9:
         6b:65:92:b4:c0:41:bd:15:3b:b9:99:2c:5a:0c:89:e4:6c:2b:
         14:31:28:00:17:ff:2d:44:db:c3:1d:d1:28:31:77:23:0e:df:
         0e:d4:3e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:02 2025 by rpki-client