This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File:                     _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier:          jamItX2hiEhI9sw71+VZLPngaw95nO8cMQvcA4ypSuY=
Subject key identifier:   45:CD:1F:61:CF:38:81:D5:22:64:2C:B7:DA:93:1F:B6:30:6B:96:1F
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer:       /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial:       1D5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number:          1D15
Signing time:             Sat 06 Dec 2025 15:50:00 +0000
Manifest this update:     Sat 06 Dec 2025 15:50:00 +0000
Manifest next update:     Sat 13 Dec 2025 15:50:00 +0000
Files and hashes:         1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: E+qr6eAqSYSQ/fZodTtOrIdh7VOqKvikaupue9fbWDg=)
                          2: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: lfXXFKA1BewBY10R96banzWyiiHGZ5/wupAGz1DuT5w=)
                          3: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: qeTmmubtmqrY2/e8m/Tsiuz4+UZv7NeRmzZbrXj/lVI=)
                          4: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: RFFbNib+EOfTMtyfuUsNL0crZ/n9uw59zoxUUo7ALbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
                          rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7516 (0x1d5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
        Validity
            Not Before: Dec  6 15:50:00 2025 GMT
            Not After : Dec 13 15:50:00 2025 GMT
        Subject: CN=693450a8-7fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bf:41:b3:86:df:75:41:46:7b:96:63:7d:fb:
                    ef:c1:25:05:c1:99:1c:eb:9f:76:f1:17:7c:c4:92:
                    48:0c:ec:86:aa:a0:c9:68:c3:b4:a3:a2:be:cf:56:
                    b2:0f:5c:cf:7f:43:08:fc:71:80:5e:dc:fe:5f:8a:
                    07:24:2c:c1:49:a6:45:d2:8f:12:72:8c:07:ad:65:
                    00:7d:91:80:01:55:a4:30:3d:e2:6b:f9:49:ae:0d:
                    5d:48:48:fb:ba:7f:48:f6:f9:0a:6c:75:2c:b8:a9:
                    aa:f2:d3:b8:ec:d3:96:29:bc:b7:71:8a:7e:c0:e0:
                    58:9f:90:d5:87:62:6f:16:ba:63:d8:73:b8:2e:11:
                    03:e6:5e:0f:de:b7:b2:b3:c2:c0:23:c1:c9:50:c9:
                    e6:55:79:30:d8:af:1a:4b:44:52:03:04:1b:f8:12:
                    dd:3c:c4:49:1d:92:9d:02:30:9a:e5:7c:b5:c3:4c:
                    bf:87:89:55:ef:95:22:69:23:7a:de:0f:01:45:36:
                    16:66:19:31:76:b2:41:23:6f:7a:37:5d:86:98:e1:
                    39:f2:fc:13:bd:92:db:a5:af:03:87:30:6d:7e:f0:
                    7e:30:44:18:7e:1a:9d:5a:a6:b1:fd:d4:ef:02:65:
                    09:92:e3:37:0c:0b:e1:f4:8d:ab:c1:af:c5:27:e9:
                    95:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CD:1F:61:CF:38:81:D5:22:64:2C:B7:DA:93:1F:B6:30:6B:96:1F
            X509v3 Authority Key Identifier:
                keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:27:89:f0:15:6e:58:fd:0f:79:02:4b:0f:bb:b4:ea:39:93:
         1b:d8:46:88:f0:8b:77:dc:0f:32:92:29:50:ce:9f:69:c4:3c:
         77:8b:c1:b8:e5:ea:a9:02:2d:ea:00:a5:5b:21:74:02:df:b6:
         7f:27:93:73:7d:54:ad:74:9e:7d:83:7a:ed:8e:74:af:a8:9c:
         4b:46:fa:3a:97:68:f3:c2:37:60:64:ec:a4:73:ce:c0:d8:93:
         6f:21:53:49:a3:01:40:30:dc:2c:49:f3:9a:40:a8:d8:ad:df:
         60:4a:d2:a5:6c:a1:c3:e8:cb:2c:8b:fe:b6:45:5c:f0:63:f1:
         26:10:89:ad:2b:2b:a0:b0:ab:a4:f4:c2:c7:14:a8:d3:52:4c:
         e1:c6:25:f2:21:26:12:77:6a:a8:33:15:0a:c9:a8:ac:88:7d:
         dd:85:7c:56:49:7a:ab:95:fc:62:1e:23:69:ec:dc:32:a1:c3:
         1a:71:03:74:92:48:bc:06:40:41:d3:93:73:74:25:f1:02:4f:
         71:da:c2:b2:76:c1:50:79:79:ce:63:4c:a1:56:aa:62:a7:35:
         fc:e1:c2:68:ae:b6:4e:7b:68:01:47:fa:a0:08:00:66:0a:0c:
         90:b8:76:38:a4:6a:e4:d4:73:f5:22:ca:f5:b1:d6:78:5b:25:
         6f:51:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 11:30:26 2025 by rpki-client