This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
File:                     9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json)
Hash identifier:          fJyqdobGPHapOdJu1YV3rpgUbX0U9cIJT4z6TmmJ0Ec=
Subject key identifier:   5E:4B:47:5F:CD:1E:F0:46:6B:5F:43:E3:3A:D6:8C:17:2D:13:F8:45
Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
Certificate issuer:       /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Certificate serial:       0CA4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
Manifest number:          0C99
Signing time:             Mon 22 Dec 2025 18:01:07 +0000
Manifest this update:     Mon 22 Dec 2025 18:01:07 +0000
Manifest next update:     Mon 29 Dec 2025 18:01:07 +0000
Files and hashes:         1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: CQpM1y1Vc1TvKMrq/kGos0CCYjU2DYb3kCZ8j7tSfNs=)
                          2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: LoUT2MaD5/F/EBumNr9K+cDj9oFe1lrYI+mckDlhBHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl
                          rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3236 (0xca4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
        Validity
            Not Before: Dec 22 18:01:07 2025 GMT
            Not After : Dec 29 18:01:07 2025 GMT
        Subject: CN=69498763-3624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:65:b8:76:ec:9c:7a:e8:e1:95:18:8d:7c:
                    f4:32:5a:3d:50:f5:40:74:fd:85:6e:d7:46:46:49:
                    b3:bd:dc:28:84:a4:e0:9b:12:67:ea:b6:22:e8:d0:
                    dd:b5:8e:08:ce:b3:0e:e5:cd:a0:1a:e3:17:22:c4:
                    4d:67:6f:a5:60:f6:e6:59:40:30:06:39:fe:a2:e1:
                    21:e9:b8:d6:5e:cc:33:f2:a0:ee:17:10:11:72:d1:
                    66:78:93:41:37:ac:89:b3:0c:9a:0e:88:f3:b9:36:
                    11:00:7d:f0:aa:59:61:47:df:af:a3:63:85:ca:24:
                    f4:60:56:50:c4:6d:2d:d1:5d:15:b0:30:a5:52:8b:
                    13:f2:2d:3d:99:c0:48:ec:2d:8e:70:be:6e:c7:38:
                    cb:25:d5:eb:e8:54:9f:15:86:1b:45:c4:a7:b4:85:
                    52:1d:85:e5:e0:70:78:07:56:28:7d:85:c8:ba:c6:
                    86:cb:2e:21:cb:5a:93:27:ec:2c:08:26:c6:eb:37:
                    ca:8c:2f:02:bc:fe:c6:5e:7c:d5:6c:01:59:f1:58:
                    ed:9d:b9:c1:68:de:93:46:a4:17:70:90:6e:34:b3:
                    0f:69:16:4e:79:c3:ed:15:66:79:ca:8a:32:74:5a:
                    20:f9:0f:79:2a:27:28:fc:40:82:82:ca:00:f0:02:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4B:47:5F:CD:1E:F0:46:6B:5F:43:E3:3A:D6:8C:17:2D:13:F8:45
            X509v3 Authority Key Identifier:
                keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:42:de:47:9c:6f:36:7c:95:95:16:aa:21:20:a6:1c:18:fa:
         04:13:66:2f:78:c0:95:7a:25:d6:44:05:db:64:00:c2:91:ca:
         d3:3d:bd:25:40:10:fe:fa:ba:f9:02:d1:89:eb:43:78:6c:95:
         ff:9b:25:90:20:79:09:88:1e:1b:5a:c4:21:5e:51:94:2a:ef:
         ff:cd:c4:6d:aa:0a:dc:17:df:ec:ac:72:88:f2:6f:6f:05:4a:
         83:d7:3d:52:6f:30:a1:bb:f9:3f:90:3e:4e:4c:89:4e:1a:f9:
         45:1e:97:b7:46:47:75:16:0b:15:fa:77:c7:7b:c8:1c:48:0d:
         70:a2:4f:0d:45:a3:94:af:ae:37:13:db:19:bf:a7:fa:96:57:
         70:dc:6e:26:bb:ec:60:27:2d:5c:c7:a8:5f:43:e4:34:a9:53:
         a4:19:2f:93:6f:bc:4f:18:2a:96:3d:57:f3:5d:3b:6c:ad:0b:
         d7:d6:de:ef:e8:d0:8b:ee:38:bb:64:f3:ab:9e:8b:bc:7c:e6:
         a0:58:aa:93:2d:43:2a:b8:bf:ed:46:d8:b5:64:74:18:d4:91:
         e9:50:e5:4c:39:ea:19:0d:3d:c9:a4:c5:0c:2f:c4:6e:91:d0:
         4a:ea:0d:91:2d:e0:b3:61:87:53:53:6c:f5:5c:36:96:26:b5:
         01:e3:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:39:04 2025 by rpki-client