This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
File:                     _1wQCXXjaGJFyt5XnFdDO7_faBk.mft (raw, json)
Hash identifier:          hjkY+82HLeeE4a+7hf5neVa9fsLJ7mVuxlO9GdsnHjQ=
Subject key identifier:   99:21:81:7F:AF:6E:D8:6E:0C:34:83:33:55:AA:07:4A:EA:33:29:17
Authority key identifier: FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19
Certificate issuer:       /CN=A9144913/serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
Manifest number:          0180
Signing time:             Sun 21 Dec 2025 02:54:25 +0000
Manifest this update:     Sun 21 Dec 2025 02:54:25 +0000
Manifest next update:     Sun 28 Dec 2025 02:54:25 +0000
Files and hashes:         1: _1wQCXXjaGJFyt5XnFdDO7_faBk.crl (hash: e/1Xpj4Gx8CLzC6Fjmpgqh5hkRe+sgWczSgsHVHWH7s=)
                          2: 740BB01A90D511EE816E5C34C4F9AE02.roa (hash: 5OTHdHDCmfuI/ZOanycQLnoktf60OpN1mQqMdmP9U+I=)
                          3: 749936E290D511EE816E5C34C4F9AE02.roa (hash: pUmBGJmyMHEcbY4KaDR5mt/b7cXO616AtPpB4tejaZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl
                          rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144913, serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
        Validity
            Not Before: Dec 21 02:54:25 2025 GMT
            Not After : Dec 28 02:54:25 2025 GMT
        Subject: CN=69476161-be86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ac:26:f4:dc:58:55:b0:9e:88:1f:56:24:d7:
                    0d:fc:45:49:c2:d3:82:28:d1:7e:68:21:d3:72:1c:
                    97:02:74:6f:16:ff:8c:29:c0:9d:b6:3b:74:5e:79:
                    0a:ff:a9:2d:5d:f3:a1:ee:5b:8d:2c:ad:fa:0c:22:
                    85:8f:e3:f0:cf:f2:00:4d:35:a6:31:95:a1:28:1b:
                    d7:8e:68:3a:25:eb:30:8e:a6:5c:a5:51:67:4e:fa:
                    0f:89:c9:0e:c0:90:a2:0b:8a:b5:e9:60:52:ea:ef:
                    b3:22:4b:b4:39:76:aa:47:ff:e7:90:15:22:ea:b1:
                    5c:cc:8b:cb:a4:8d:1b:28:9a:27:d3:79:49:93:02:
                    88:1f:af:09:6d:56:df:c3:c2:87:a0:e6:18:20:4c:
                    38:b4:de:07:c5:10:d2:17:13:1c:6d:8a:17:1a:b6:
                    60:54:4b:99:b3:77:e3:62:09:07:97:39:45:c6:89:
                    8e:2a:e5:2e:13:09:63:90:21:8a:5f:08:81:3b:79:
                    e5:45:f9:65:cb:89:20:c5:0a:8f:00:57:c2:78:e5:
                    c3:25:ed:3a:13:7f:6e:56:ad:d6:05:50:d9:36:d4:
                    02:1a:eb:89:6a:56:f9:60:35:bf:69:aa:5b:89:01:
                    ca:1a:0e:ae:38:06:8e:e1:c5:d1:40:ca:88:e9:ae:
                    8c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:21:81:7F:AF:6E:D8:6E:0C:34:83:33:55:AA:07:4A:EA:33:29:17
            X509v3 Authority Key Identifier:
                keyid:FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:0f:8b:f9:61:ef:75:c6:1c:6f:ea:e9:a2:20:ac:4d:7f:8d:
         c1:a5:4f:0a:4e:49:9f:49:a8:df:e2:0e:62:eb:1c:a9:44:01:
         11:f2:7f:87:97:63:7d:89:37:1a:a4:59:42:af:7e:d0:da:29:
         fc:a9:ba:e5:23:e7:f2:8c:62:7d:13:be:36:19:2c:f7:a5:97:
         bc:31:a0:3f:80:ed:01:e1:a6:27:42:3b:11:8d:c0:fb:41:a1:
         7f:7a:68:f3:9a:e9:7f:eb:93:86:37:37:8e:dd:00:38:21:5d:
         d1:74:06:55:7f:4a:25:7d:83:b1:10:6d:22:67:11:a8:40:f9:
         d6:a2:0f:14:ea:8a:b9:7f:f1:8d:d1:2b:66:b2:94:03:17:c4:
         dd:1b:1b:f4:28:65:f6:7f:19:17:de:c3:03:b9:b7:5e:3a:27:
         df:00:2a:ed:82:b2:6f:2b:ae:79:f9:8d:8c:b4:76:65:9b:9e:
         42:75:ef:d0:34:e2:a2:76:2e:b3:69:6c:78:3c:64:c3:0a:07:
         44:88:b1:c7:a2:e7:08:32:a7:8d:fc:5a:71:35:f5:e4:af:7b:
         3b:5d:02:b4:8c:32:4e:00:00:6d:98:41:a6:d7:e8:35:b6:e3:
         88:dc:48:bc:9a:f8:95:04:b9:13:8a:d2:16:7f:9a:d9:61:42:
         9d:0e:7f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:33:39 2025 by rpki-client