This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
File:                     0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft (raw, json)
Hash identifier:          lk9mEMVA/BkISS8UgXEZEo17LhbaLgJWsuOY1BdJgtY=
Subject key identifier:   3B:1A:27:C6:6D:2F:06:47:88:2D:0F:8F:7E:D8:67:D8:6E:97:CB:49
Authority key identifier: D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0
Certificate issuer:       /CN=A9146D06/serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0
Certificate serial:       3276
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
Manifest number:          3264
Signing time:             Mon 22 Dec 2025 15:17:33 +0000
Manifest this update:     Mon 22 Dec 2025 15:17:33 +0000
Manifest next update:     Mon 29 Dec 2025 15:17:33 +0000
Files and hashes:         1: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl (hash: oSvC9KvOsnPF4wM8SEedOl6exL97NTkY0cDvnI6GmD4=)
                          2: F1C9EE68B13B11E5B2D80087C4F9AE02.roa (hash: 1VVuRrqVVTtGHoXa2KKerRIHjhwmzovA9uhLiSgp/NQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl
                          rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 15:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12918 (0x3276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146D06, serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0
        Validity
            Not Before: Dec 22 15:17:33 2025 GMT
            Not After : Dec 29 15:17:33 2025 GMT
        Subject: CN=6949610d-9a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:0c:a0:7e:08:e9:e7:7a:eb:2c:7d:e7:4d:
                    8f:3d:ae:ef:f1:15:15:cc:92:ed:04:53:af:f7:bc:
                    87:f5:0a:72:06:03:6c:ae:7c:3a:88:33:57:0f:e2:
                    1a:64:e5:a1:55:c5:6d:f5:9a:97:02:d9:ea:93:25:
                    47:da:a5:3c:fd:34:be:e0:6d:e4:11:c6:2e:d2:94:
                    bc:93:27:fd:a4:0a:e7:33:77:4c:a5:21:cf:49:02:
                    0b:a3:d1:42:33:99:53:05:6d:fb:0e:4e:91:c8:5e:
                    e4:b7:e0:b5:8c:cb:8c:50:f3:f9:ad:54:f0:e1:05:
                    ae:0b:9a:f5:0b:e1:7a:36:36:77:82:bf:80:18:da:
                    c2:ee:93:ec:e1:22:48:75:d9:96:e5:45:ed:45:a9:
                    e0:5d:14:c3:fc:94:c4:93:e7:8a:2e:31:af:b4:a9:
                    d1:aa:3d:06:b1:39:a8:d5:7e:fd:0f:27:fd:d3:a2:
                    e7:2a:45:75:76:1a:71:11:82:0b:50:bc:e3:07:b3:
                    ec:ea:36:94:3c:da:41:fa:1e:24:6b:0d:47:c1:17:
                    4f:ae:ac:00:81:01:56:52:83:8a:8a:2b:aa:8c:79:
                    83:46:7f:0f:05:48:61:e6:82:25:ce:2d:a5:fd:58:
                    49:f0:94:8d:43:12:72:33:b6:30:ed:23:f2:1e:f5:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1A:27:C6:6D:2F:06:47:88:2D:0F:8F:7E:D8:67:D8:6E:97:CB:49
            X509v3 Authority Key Identifier:
                keyid:D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6e:4b:49:e0:1f:db:c6:3e:83:bd:08:58:cf:9e:32:17:01:
         d2:9b:29:1c:4c:b4:d1:fc:6f:b7:d7:4a:b6:87:36:14:ce:5a:
         30:c5:40:f2:8f:bb:ef:84:25:68:08:cf:fa:85:dc:21:7b:99:
         90:bc:f2:0b:e3:c0:98:ab:29:b7:be:31:91:d8:4e:b5:5d:7b:
         3b:6f:81:fc:a1:fd:b7:51:42:d3:21:18:e9:78:dd:9b:48:cd:
         1c:b5:98:f5:2b:3c:b2:63:93:56:11:ee:b4:f6:11:08:50:8f:
         55:1c:95:d7:13:ac:6c:46:71:93:52:8c:15:9b:f0:e9:cf:81:
         00:34:a3:ac:08:56:5c:80:d1:93:17:18:ab:0a:29:49:19:a2:
         78:b4:03:58:02:6c:20:2b:59:eb:2a:78:ff:2c:df:30:4f:86:
         b5:8a:5c:11:f6:eb:c4:16:5e:36:4b:7c:42:8f:be:10:01:80:
         28:53:cd:75:5c:13:b8:26:31:ca:51:6f:6b:80:12:20:da:90:
         d5:ec:01:34:32:34:0b:e2:84:af:d9:aa:f7:7c:0c:78:cc:44:
         57:d2:34:a3:ba:c5:0e:b2:1d:de:f5:75:19:59:80:0a:a7:f2:
         38:b8:fd:1c:4d:bb:2f:97:a2:fd:c2:16:97:3f:59:8b:35:bd:
         35:75:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:24 2025 by rpki-client