This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
File:                     9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft (raw, json)
Hash identifier:          2/so4KydFQJ7lQQp7iHA7Q20jwt2rsM4811Xkf/ddNM=
Subject key identifier:   30:77:0D:72:16:DE:AB:7E:86:EE:44:89:93:60:0D:4F:B3:06:A6:A6
Authority key identifier: F6:69:6E:5D:BB:12:2D:A0:85:37:EA:52:30:6E:EF:0C:AE:93:6F:93
Certificate issuer:       /CN=A915A15E/serialNumber=F6696E5DBB122DA08537EA52306EEF0CAE936F93
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
Manifest number:          0272
Signing time:             Tue 23 Dec 2025 00:36:07 +0000
Manifest this update:     Tue 23 Dec 2025 00:36:06 +0000
Manifest next update:     Tue 30 Dec 2025 00:36:06 +0000
Files and hashes:         1: 9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl (hash: SV6AoYtNksnUDcMffA4uLawtJ/9yC0KjaBsjFkyMT2A=)
                          2: EA813D021FFC11F0A17B9441C4F9AE02.roa (hash: bL2x4C3hFzPsFxQRfmXEvusmWmw8PA5YR8wMl58LJXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl
                          rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A15E, serialNumber=F6696E5DBB122DA08537EA52306EEF0CAE936F93
        Validity
            Not Before: Dec 23 00:36:06 2025 GMT
            Not After : Dec 30 00:36:06 2025 GMT
        Subject: CN=6949e3f7-878a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:43:4f:d8:59:ae:f1:50:90:31:e0:ea:36:
                    96:6f:25:18:f9:64:8c:10:71:40:d0:d6:e6:b5:c5:
                    c1:a9:06:55:85:63:8a:79:2b:52:0b:91:82:24:7e:
                    94:96:76:4b:2a:58:35:ba:41:92:c2:12:02:f4:74:
                    da:b3:26:3b:f0:d8:a4:89:62:f3:04:cf:90:69:00:
                    b2:01:6f:28:c0:a8:6d:65:95:f2:e1:4c:5e:6c:27:
                    58:b0:04:3b:97:c4:fc:fb:5a:c5:07:6f:81:5d:0e:
                    3c:8e:a0:8d:11:63:89:d2:11:36:ee:98:34:c4:2f:
                    b4:d0:d9:80:b6:b9:97:d0:3d:54:ad:88:85:5d:dc:
                    98:3a:55:ef:07:a4:86:27:84:57:2c:50:36:39:e7:
                    cf:e3:d3:fc:98:07:31:40:7a:8c:06:38:7d:fa:2f:
                    29:b8:77:09:0f:ac:72:0e:97:80:2a:67:fe:f9:bc:
                    c8:13:e9:7c:9d:4e:c5:93:85:11:f5:2e:bd:0f:e7:
                    24:cd:24:16:fa:15:d6:79:e4:9e:67:1b:82:56:4d:
                    75:37:e7:8e:b7:4e:44:aa:cb:b9:63:22:8c:14:9e:
                    3c:db:38:f5:9c:77:58:77:e4:c4:ac:63:5a:8a:07:
                    95:90:15:7c:f2:ea:8a:ef:f9:f4:0c:19:95:23:e2:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:77:0D:72:16:DE:AB:7E:86:EE:44:89:93:60:0D:4F:B3:06:A6:A6
            X509v3 Authority Key Identifier:
                keyid:F6:69:6E:5D:BB:12:2D:A0:85:37:EA:52:30:6E:EF:0C:AE:93:6F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:42:06:e7:67:c9:11:90:71:e2:1f:07:e5:dc:19:77:8a:4f:
         c3:8e:5b:78:fe:ac:47:16:6e:48:a9:91:88:5b:dd:b2:68:ce:
         66:4e:6f:fd:31:d9:12:32:45:1a:f8:66:cc:1c:1a:0f:60:b9:
         ae:d5:62:63:fa:93:c6:0c:36:64:67:40:84:e1:b2:58:d1:c8:
         f5:40:84:aa:e8:40:ed:66:a2:54:09:17:2e:4c:b5:7a:e1:5d:
         26:76:9f:b1:b7:06:dd:8a:78:28:c7:4f:d6:21:3c:18:b3:fa:
         a2:1e:34:58:be:ca:5a:58:2b:24:db:29:c5:52:08:36:bd:98:
         64:41:e7:0a:33:f4:66:c1:35:52:e2:cb:ed:e4:9d:06:c4:d1:
         62:1f:3c:e5:83:99:7b:c3:e9:e7:0c:b4:50:3e:5a:bb:9d:1b:
         ac:7d:00:9b:64:c4:20:55:ba:2b:09:b0:fb:cc:af:4c:e5:3f:
         6f:f8:9b:98:69:48:a1:2e:a7:a7:54:57:0f:4c:2c:61:06:a0:
         2c:89:c5:93:7f:4f:7c:f6:48:d6:66:33:7b:cb:8c:19:c6:65:
         6b:e5:d0:4e:84:de:eb:fb:9b:7a:3e:19:a9:47:6e:7f:85:96:
         55:1d:10:4c:e5:98:71:df:58:cd:f3:56:17:7c:8e:da:a1:44:
         12:59:6f:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUExNUUxMTAvBgNVBAUTKEY2Njk2RTVEQkIxMjJEQTA4NTM3RUE1MjMwNkVFRjBD
QUU5MzZGOTMwHhcNMjUxMjIzMDAzNjA2WhcNMjUxMjMwMDAzNjA2WjAYMRYwFAYD
VQQDDA02OTQ5ZTNmNy04NzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAopFDT9hZrvFQkDHg6jaWbyUY+WSMEHFA0NbmtcXBqQZVhWOKeStSC5GCJH6U
lnZLKlg1ukGSwhIC9HTasyY78NikiWLzBM+QaQCyAW8owKhtZZXy4UxebCdYsAQ7
l8T8+1rFB2+BXQ48jqCNEWOJ0hE27pg0xC+00NmAtrmX0D1UrYiFXdyYOlXvB6SG
J4RXLFA2OefP49P8mAcxQHqMBjh9+i8puHcJD6xyDpeAKmf++bzIE+l8nU7Fk4UR
9S69D+ckzSQW+hXWeeSeZxuCVk11N+eOt05Eqsu5YyKMFJ482zj1nHdYd+TErGNa
igeVkBV88uqK7/n0DBmVI+JM8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDB3DXIW
3qt+hu5EiZNgDU+zBqamMB8GA1UdIwQYMBaAFPZpbl27Ei2ghTfqUjBu7wyuk2+T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTE1RS83QUUxMzI4MDM4
QTExMUVEODZBNTZBMEJDNEY5QUUwMi85bWx1WGJzU0xhQ0ZOLXBTTUc3dkRLNlRi
NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzltbHVYYnNTTGFDRk4tcFNNRzd2REs2VGI1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTE1RS83QUUxMzI4MDM4QTExMUVEODZBNTZBMEJDNEY5QUUwMi85bWx1WGJzU0xh
Q0ZOLXBTTUc3dkRLNlRiNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOQgbnZ8kRkHHiHwfl3Bl3ik/Djlt4/qxHFm5IqZGIW92yaM5mTm/9
MdkSMkUa+GbMHBoPYLmu1WJj+pPGDDZkZ0CE4bJY0cj1QISq6EDtZqJUCRcuTLV6
4V0mdp+xtwbdingox0/WITwYs/qiHjRYvspaWCsk2ynFUgg2vZhkQecKM/RmwTVS
4svt5J0GxNFiHzzlg5l7w+nnDLRQPlq7nRusfQCbZMQgVborCbD7zK9M5T9v+JuY
aUihLqenVFcPTCxhBqAsicWTf0989kjWZjN7y4wZxmVr5dBOhN7r+5t6PhmpR25/
hZZVHRBM5Zhx31jN81YXfI7aoUQSWW+L
-----END CERTIFICATE-----
Generated at Wed Dec 24 21:21:22 2025 by rpki-client