This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
File:                     mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json)
Hash identifier:          qGk7PRqZ7yAXPRnqISvGgQsxZMIainwTFBmoNM0r9Yg=
Subject key identifier:   E5:3E:36:0E:40:A7:44:F9:91:4D:6A:8B:63:2F:E1:17:00:A3:00:EA
Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE
Certificate issuer:       /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE
Certificate serial:       34F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
Manifest number:          34F5
Signing time:             Thu 18 Dec 2025 14:52:06 +0000
Manifest this update:     Thu 18 Dec 2025 14:52:06 +0000
Manifest next update:     Thu 25 Dec 2025 14:52:06 +0000
Files and hashes:         1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: helWOQWS3G2Hk7CPXogqJfiAWn0JsKrZRHe4CjE5vo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl
                          rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13559 (0x34f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE
        Validity
            Not Before: Dec 18 14:52:06 2025 GMT
            Not After : Dec 25 14:52:06 2025 GMT
        Subject: CN=69441516-c329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:6b:d9:39:c1:d3:27:43:36:a1:e6:2a:73:
                    e4:26:fc:eb:5b:b6:42:bc:2b:13:dd:2b:08:de:15:
                    0d:36:7a:ba:39:f4:b5:2a:91:6d:75:25:e8:ff:7e:
                    1a:7b:3a:fe:3b:02:d8:24:e2:c7:4c:c3:54:35:d6:
                    76:c3:35:dc:6c:80:7f:cf:be:67:5d:9b:0b:1e:09:
                    9a:d7:80:fa:48:f1:19:02:9d:86:78:1b:a5:ec:61:
                    8c:97:a2:21:7e:6c:b7:92:4d:df:fa:e1:19:a7:be:
                    7e:c6:d4:74:b1:f4:6e:ef:1e:d3:4c:ee:da:ae:f4:
                    63:a2:1c:2b:f8:d4:ed:83:29:f3:3a:44:73:c6:9c:
                    a6:ca:ff:98:f0:ca:a4:e3:a7:bf:10:f9:f2:a5:20:
                    97:12:56:2e:0b:17:cb:f1:d8:26:d4:01:a5:83:d5:
                    7d:47:06:36:2e:e4:d8:88:4a:99:9b:b6:e4:42:c7:
                    52:1d:2d:b0:c8:ff:c3:d8:78:b8:16:ff:02:43:2e:
                    48:6c:4a:26:8b:10:1d:da:4d:23:6d:2d:89:51:1f:
                    64:89:f7:2e:95:73:6f:a8:7c:a3:a4:3e:b9:2e:9d:
                    e9:b1:02:61:c8:bd:e0:6a:f1:65:d8:77:2d:b1:0b:
                    2e:dc:7a:ff:98:3c:4c:b4:1d:5d:39:61:c7:03:aa:
                    01:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3E:36:0E:40:A7:44:F9:91:4D:6A:8B:63:2F:E1:17:00:A3:00:EA
            X509v3 Authority Key Identifier:
                keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:b2:45:45:eb:d2:8a:59:f2:26:67:05:4e:fd:87:5b:57:
         60:0b:81:7d:58:37:b2:24:04:e7:f2:9c:80:75:f4:35:ad:3c:
         a0:0a:5f:84:65:90:17:f5:e7:e0:f6:96:60:ef:70:e6:3e:4f:
         be:11:f5:b2:52:bd:f9:53:71:4c:31:ba:f3:fa:48:0c:d0:e2:
         9b:03:00:99:04:f9:9c:47:83:b1:8d:56:7d:31:d3:31:b8:f3:
         89:ba:86:26:d2:18:85:9e:9f:f2:66:78:e7:e5:c3:eb:2f:9a:
         70:4f:00:d0:35:74:c2:43:41:a1:1d:be:5a:cd:9d:2a:72:d2:
         53:75:4f:4c:c9:99:9e:de:4b:63:99:64:5d:97:59:66:de:1f:
         36:2e:46:2d:e4:37:17:cb:bd:9d:5d:9e:1d:1f:3d:6a:b9:fe:
         ac:a0:c6:48:4f:84:e6:90:92:b6:05:7c:d8:80:6d:4f:e3:3d:
         03:07:fd:a1:80:f0:f4:20:a6:d3:6f:94:ec:84:b7:0a:6a:4a:
         e5:6f:20:bd:f5:26:7c:7c:b5:d4:7b:53:b0:c1:6e:d7:58:11:
         93:a6:75:3f:69:28:51:a8:c6:d9:1b:06:5d:eb:84:39:ce:b5:
         f6:31:f1:d8:f9:da:ff:d6:dd:c8:06:98:d6:c1:4e:31:a0:3c:
         f9:27:72:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:45:19 2025 by rpki-client