This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
File:                     _b1MDTRJL1zq5IeeR2J5blJwB-s.mft (raw, json)
Hash identifier:          OnrXK3K+dZmREjrpB3nVEJeThzrVcXfJdiIhs7s8V6E=
Subject key identifier:   40:21:D5:4A:6E:5D:41:F6:30:64:50:6E:14:A8:BF:BB:00:7A:54:B2
Authority key identifier: FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB
Certificate issuer:       /CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
Manifest number:          01FB
Signing time:             Mon 15 Dec 2025 02:23:30 +0000
Manifest this update:     Mon 15 Dec 2025 02:23:30 +0000
Manifest next update:     Mon 22 Dec 2025 02:23:30 +0000
Files and hashes:         1: _b1MDTRJL1zq5IeeR2J5blJwB-s.crl (hash: nANsKm4vo/u0SqGXHKApJ7UJ9oxT41mShEyHlYtgy34=)
                          2: C724415E35F911EE9F140449C4F9AE02.roa (hash: Pc8IQ1ldo5iSgY4Srlo9JYYY24JrbIJTNy/Hk8PPyVE=)
                          3: 208652BA35F911EEB45F8B44C4F9AE02.roa (hash: U9cevaQb64/vV8AH9HQirRbkVBcH0enCs25PMnDjBWc=)
                          4: 86516CF04BE911EE8640FE79C4F9AE02.roa (hash: JOQ3FTCOYnFyVjIC1sbOokkZryNT0nxy6ytkaThHIoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl
                          rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 02:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D53, serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
        Validity
            Not Before: Dec 15 02:23:30 2025 GMT
            Not After : Dec 22 02:23:30 2025 GMT
        Subject: CN=693f7122-9f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:d6:44:f7:59:7c:a2:aa:68:d6:c9:3a:57:
                    02:24:9c:e6:38:27:2b:07:74:0f:d9:f8:e7:ca:9f:
                    70:f4:f7:05:82:03:a3:69:cd:24:92:c2:ec:77:d8:
                    04:71:36:c5:e5:07:bc:f3:4d:4a:b8:c1:5b:6f:6d:
                    1a:1b:ed:b4:2f:3e:a4:66:9a:87:35:42:2a:ac:6a:
                    ae:16:af:79:10:f5:74:14:30:6c:ab:17:75:74:2f:
                    db:c2:85:27:71:65:97:f8:b8:39:76:4c:ae:d8:9a:
                    ff:0f:f1:29:ff:c9:da:45:3e:55:d5:44:92:8f:7e:
                    52:4c:ff:e0:f1:31:ea:bb:97:84:6b:f5:01:f3:b7:
                    c5:22:f7:36:65:27:17:82:41:cb:ad:81:75:25:e7:
                    58:b8:ab:9a:7a:4e:38:8e:3a:3b:39:9c:60:dd:18:
                    e2:27:48:2f:49:37:0d:57:f8:6d:a0:ae:65:6b:ff:
                    5c:5a:c8:7e:1c:c0:b5:d4:c8:d5:f6:4b:6d:62:fc:
                    b2:de:54:c8:9c:b3:58:25:cd:b4:1e:c3:c4:92:c3:
                    6e:1d:0a:3d:36:1f:85:44:15:47:69:93:53:a3:18:
                    08:04:cf:f9:b4:24:7c:33:7c:85:dc:06:98:3f:db:
                    4a:c6:71:9c:a9:38:10:f5:a7:75:90:a5:31:4d:08:
                    8f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:21:D5:4A:6E:5D:41:F6:30:64:50:6E:14:A8:BF:BB:00:7A:54:B2
            X509v3 Authority Key Identifier:
                keyid:FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:16:74:46:c3:f9:dc:8e:ca:42:cf:a8:35:20:f9:1b:4e:40:
         84:ef:ff:b0:f3:b1:bc:69:b8:3d:0e:16:b3:72:77:9b:2b:ee:
         2c:f3:70:9e:ba:a5:5c:82:da:87:a4:cc:34:16:7c:ab:4d:06:
         ca:b8:74:7a:a7:7d:dd:d5:0a:ec:05:62:4e:85:e8:8d:aa:89:
         38:9a:da:e9:14:04:cf:ca:e2:a8:bf:c2:98:dd:1b:4c:ac:16:
         65:3b:eb:ab:b1:0e:11:90:6c:66:37:5f:20:aa:70:f5:67:10:
         49:17:db:ce:b3:03:ab:ab:9d:69:9f:e8:1e:35:c3:09:af:80:
         fd:70:a4:bb:a3:52:5f:cf:7d:b1:21:64:42:d4:aa:c3:7c:c5:
         ba:b2:e7:e1:99:48:d1:f0:bd:0f:14:ff:b6:a3:a1:88:82:ab:
         88:c1:7f:6d:ba:90:53:fa:5e:e0:61:4d:dd:63:e2:a3:6f:d1:
         82:30:84:6a:a4:77:66:aa:e0:95:0b:c0:8e:fe:43:60:2d:b4:
         25:ac:c2:ac:fc:f3:cb:98:ac:b4:a0:3c:7f:6d:7c:e1:f4:90:
         c6:d9:49:0e:2d:42:ab:0d:09:ab:fc:3b:35:6c:23:94:27:fa:
         74:da:fa:23:25:31:a0:0d:84:79:b3:e1:16:18:bb:01:e7:4b:
         be:cb:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 15:03:05 2025 by rpki-client