This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
File:                     t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft (raw, json)
Hash identifier:          zx2DqfmqVjr/IB4P9aSUiXFqyiiMsmfkxs97FKwl5Tk=
Subject key identifier:   F6:0C:3F:0C:20:47:0E:17:35:14:2F:65:AA:2D:2B:21:FE:87:6D:0E
Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
Certificate issuer:       /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Certificate serial:       0807
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
Manifest number:          07FF
Signing time:             Wed 24 Dec 2025 20:27:38 +0000
Manifest this update:     Wed 24 Dec 2025 20:27:37 +0000
Manifest next update:     Wed 31 Dec 2025 20:27:37 +0000
Files and hashes:         1: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl (hash: h9lmZvyWWzbWfwLPJ4l1j30k9xh8WSe1Z93/IvhX0dY=)
                          2: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (hash: BfrlJ/DmsefwZSjV8vfM9JqfEVGXH8+gCgu9wILwOPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
                          rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055 (0x807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149680, serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
        Validity
            Not Before: Dec 24 20:27:37 2025 GMT
            Not After : Dec 31 20:27:37 2025 GMT
        Subject: CN=694c4cb9-91eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:08:3c:af:45:2e:9c:d9:eb:37:f4:f2:c6:
                    5e:d0:42:73:67:84:60:85:13:c2:6b:95:57:57:f8:
                    a9:1f:d5:86:87:fd:72:8e:75:40:8d:fd:18:ef:cb:
                    e5:bc:0b:a6:8a:f9:5d:39:7c:54:6b:34:81:81:a1:
                    2b:94:78:e9:9c:6a:64:3c:44:57:da:ee:2d:35:2d:
                    17:41:a1:85:84:5b:e6:78:0b:19:d4:00:e5:a1:c0:
                    e1:db:ed:a5:a9:6b:62:fd:2c:02:f2:82:24:89:20:
                    42:57:0f:e3:3d:0d:54:5b:36:29:56:f8:94:4d:d6:
                    d3:23:40:13:a5:c0:7a:0b:f3:47:77:44:fd:7e:ca:
                    20:56:d5:9d:c1:2b:74:9d:a2:2d:cd:2b:80:f2:10:
                    5f:16:13:b0:e4:15:6d:e6:40:9f:98:98:41:94:2b:
                    0d:cd:8f:ad:42:a5:2f:2c:46:f2:68:4d:a1:2c:d4:
                    4e:7f:8d:45:ab:47:43:a1:71:5e:81:c2:6c:fc:47:
                    ae:3c:26:6e:4d:9e:a7:f7:68:49:8d:d9:5e:09:30:
                    50:a7:c8:8b:8c:e4:00:bc:2c:54:cd:62:ee:4d:a5:
                    63:24:a2:bf:1f:98:a0:82:ce:65:e8:eb:5c:bf:c6:
                    9b:52:40:45:8e:8b:13:db:86:47:f2:17:54:0b:c6:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:3F:0C:20:47:0E:17:35:14:2F:65:AA:2D:2B:21:FE:87:6D:0E
            X509v3 Authority Key Identifier:
                keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cb:2f:79:08:9d:1b:88:c1:6e:9d:93:98:bf:3e:0a:0a:38:
         65:da:54:05:dd:d1:6e:9f:87:02:4a:99:3c:1d:41:3b:6a:74:
         d1:b7:56:aa:ba:e2:0b:ca:cf:7c:c2:13:9d:95:fd:ca:2d:09:
         94:c5:2d:46:0a:87:d3:bc:77:8e:82:d5:bf:6d:cf:41:a4:9e:
         5c:6e:20:aa:8b:f1:68:20:2e:79:04:15:32:e2:c5:d9:a4:f8:
         38:b0:91:6a:73:20:f3:85:3f:ab:f6:42:2a:f7:20:89:9a:55:
         57:84:56:1e:78:ef:8f:0e:43:f6:52:9d:55:bc:a9:06:a0:c0:
         74:37:4a:a2:7f:41:ac:5f:86:fa:a9:d6:40:fc:77:eb:4f:8f:
         31:3d:16:7c:37:3c:af:d8:40:c6:c5:59:72:13:49:44:6d:ba:
         f0:33:3d:46:78:7c:8a:c7:0c:20:ab:b5:a0:e0:b7:b1:82:db:
         19:ff:83:c2:45:bf:ea:6f:44:46:e7:37:74:55:ea:f5:6a:e6:
         06:b6:fb:64:50:70:64:e2:cc:41:c7:9c:74:99:66:ec:9b:e8:
         47:81:6b:3f:22:99:38:17:79:c0:26:83:63:90:a6:25:51:0c:
         b5:df:ca:62:3f:fa:5e:a1:5c:1d:de:5b:3a:3d:b3:9a:d6:45:
         6a:b0:3b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:24:33 2025 by rpki-client