This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
File:                     xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json)
Hash identifier:          HU4zduWl1GyMMmvLfz4PPCG/tsvqcCJ50TVGHnAmTNk=
Subject key identifier:   6A:1D:23:F3:E2:29:5E:EC:9B:74:71:15:9E:56:6F:1F:67:02:71:9B
Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
Certificate issuer:       /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Certificate serial:       34FB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
Manifest number:          34F5
Signing time:             Wed 31 Dec 2025 15:06:23 +0000
Manifest this update:     Wed 31 Dec 2025 15:06:22 +0000
Manifest next update:     Wed 07 Jan 2026 15:06:22 +0000
Files and hashes:         1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: 3nMdsFvXObdABW8k6clMTHFe1mA/yBD4Yb+PO43/hFQ=)
                          2: 504CB1588D3911F093856C71C4F9AE02.roa (hash: ifH/esp2rozL1ihWQfG0CzUZFPTxcLRuyP+/JZcu8YY=)
                          3: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: 9Y5yYrTvQYYtyak8703IegO2crTaXwhTRyd+8O5jVlI=)
                          4: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: F5+F1knUPdcPoNngYv7iiLdP0OUGWuUJHtNfOlwZNpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
                          rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 15:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13563 (0x34fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
        Validity
            Not Before: Dec 31 15:06:22 2025 GMT
            Not After : Jan  7 15:06:22 2026 GMT
        Subject: CN=69553bef-80f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:ef:68:4f:01:60:93:3d:56:f7:30:4b:e5:
                    a1:14:12:a6:a1:af:dd:fc:53:5f:d3:cb:eb:c1:8b:
                    d9:87:5b:2a:63:b8:bd:03:22:09:76:37:0e:f2:b6:
                    11:46:83:ab:bb:ec:9b:c5:68:34:66:85:a9:da:94:
                    75:34:da:39:4e:c3:af:fb:a5:19:0d:17:6c:b4:99:
                    fe:7e:53:9f:8c:b6:cc:e7:2b:68:db:ae:0e:eb:15:
                    c8:a6:89:19:76:22:5c:5f:76:18:a5:4e:9d:d8:c4:
                    9b:ee:11:0c:07:18:aa:9c:2e:34:02:51:b1:13:70:
                    8c:4f:28:1b:a2:a7:da:7c:cc:40:cf:68:19:b9:c7:
                    ee:79:45:43:05:40:9a:db:fb:3f:c3:e5:89:c8:b3:
                    ce:bc:d8:ae:c0:49:64:38:fb:80:4b:8f:33:63:f8:
                    0a:82:57:73:ed:f0:03:94:9f:0a:d8:83:d5:6a:d9:
                    14:9f:a2:90:bf:1b:2f:fe:65:2f:c1:25:dd:b2:70:
                    44:5f:43:97:71:23:68:8f:35:7e:00:d3:7d:97:3c:
                    6a:b8:35:35:a2:d8:b9:15:f5:97:bc:a4:96:2e:14:
                    46:06:df:84:2b:b1:71:2f:a6:fb:25:29:f5:59:ef:
                    77:3f:80:ac:36:d8:1a:15:c8:37:1a:1e:ac:4a:f2:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1D:23:F3:E2:29:5E:EC:9B:74:71:15:9E:56:6F:1F:67:02:71:9B
            X509v3 Authority Key Identifier:
                keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:a8:8f:31:c7:c1:d5:da:80:8e:98:a3:79:45:3e:d7:ff:f0:
         25:9e:0f:23:d0:60:06:58:61:c5:ce:54:df:6c:d1:75:ab:ea:
         e3:ca:94:d9:fb:8c:45:28:81:30:f8:83:c8:a2:06:9d:5d:24:
         25:c9:15:47:45:17:14:da:5d:1c:7a:c3:83:67:5e:0d:1e:21:
         2b:a2:98:51:a6:ee:2d:fa:79:19:85:fc:7c:a2:dd:e5:87:56:
         64:6e:af:05:d7:74:57:54:b3:a4:f0:ce:e4:f2:8c:1b:29:a7:
         7d:b5:2a:72:cc:00:dc:a9:68:a1:f3:ff:f8:d2:f6:ce:2a:57:
         81:11:f8:39:eb:93:61:d6:9b:e8:b4:18:c4:2e:ec:bf:83:d0:
         a5:b8:e1:15:9c:a2:b0:fc:bc:e6:b1:f7:f6:77:c9:73:13:1f:
         64:b7:1c:ed:42:c2:ae:c5:0b:7a:5e:b2:a9:05:f8:49:ac:a0:
         06:fc:06:20:bd:9b:b3:a1:a1:ad:9b:1b:93:5e:00:db:92:ea:
         5a:63:dd:68:05:9e:ba:7a:a6:76:2f:c6:5e:eb:9d:27:1b:03:
         12:f7:08:25:e1:3f:49:f2:4e:c4:f9:44:02:b1:86:5b:46:57:
         b1:99:f7:83:42:7a:59:ce:0e:e1:c4:ce:48:67:a6:a6:b2:07:
         40:5d:09:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 11:21:08 2026 by rpki-client