This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
File:                     9VqsRorxZKWTnXLq_dOkczp5lgk.mft (raw, json)
Hash identifier:          nwy5iunFABLkPNmHrbZdkRrx7z0WwTBOW4443lmQHC8=
Subject key identifier:   FB:89:98:D5:E8:D8:C3:30:F5:2F:BC:99:25:60:5B:96:D6:D7:B1:B6
Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09
Certificate issuer:       /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
Certificate serial:       069E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
Manifest number:          069C
Signing time:             Mon 22 Dec 2025 21:33:40 +0000
Manifest this update:     Mon 22 Dec 2025 21:33:39 +0000
Manifest next update:     Mon 29 Dec 2025 21:33:39 +0000
Files and hashes:         1: 9VqsRorxZKWTnXLq_dOkczp5lgk.crl (hash: laIRC08esBitZxm2yTLDsRVA2t1kq54QZDhwIYClR3g=)
                          2: 3E6BCA6A912511EBB0270738C4F9AE02.roa (hash: A9rThl3FoOc3UI4pEM8sFZ4EouFKASPqDt9/k6x5psA=)
                          3: 3F3A8E86912511EBB0270738C4F9AE02.roa (hash: zJD2DUaHYLIs6MFcD7dM939RjwobVqjAJWT+0osciMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl
                          rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694 (0x69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CF83, serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
        Validity
            Not Before: Dec 22 21:33:39 2025 GMT
            Not After : Dec 29 21:33:39 2025 GMT
        Subject: CN=6949b934-2f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:51:2f:d0:a6:1e:4f:4c:6e:14:cf:17:32:
                    01:12:d6:b6:86:2d:39:a1:2c:8d:c6:d4:f8:30:71:
                    22:26:fb:a5:8f:b5:2c:7a:87:52:be:46:de:85:f6:
                    a6:17:cb:98:36:be:0c:81:ad:61:67:64:f7:b1:ff:
                    20:a1:fb:9a:f0:76:a0:a8:31:52:5c:1e:b2:0f:8d:
                    10:74:0e:71:e0:c9:c7:e5:c4:eb:7d:42:1a:57:77:
                    11:57:4d:ff:7b:ce:c3:d3:f5:23:97:3a:49:e2:3d:
                    48:d8:a1:78:47:df:1d:02:95:b5:46:84:ae:ee:3d:
                    00:11:1c:d2:09:ab:92:a6:c0:57:c3:44:dd:4e:59:
                    6b:14:ee:71:e3:e2:04:42:de:ef:ea:10:fd:0c:99:
                    ab:66:37:23:24:75:08:17:6f:42:f9:d6:00:3b:3a:
                    bc:3a:d0:5e:ed:b6:6e:d5:7f:a7:8b:7b:8c:e4:06:
                    92:cb:47:ab:7e:24:0f:d5:46:38:b3:6b:98:21:57:
                    e6:a2:f2:54:82:19:3c:30:d2:92:af:fc:8f:4b:95:
                    2a:bc:4c:ec:1e:c8:63:49:24:df:7d:86:c3:8e:e0:
                    39:78:e5:bb:d9:c8:9c:ac:eb:42:34:48:e4:c6:00:
                    e6:b7:15:c9:f6:dd:a3:8d:62:8b:b8:ac:95:36:15:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:89:98:D5:E8:D8:C3:30:F5:2F:BC:99:25:60:5B:96:D6:D7:B1:B6
            X509v3 Authority Key Identifier:
                keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:61:d5:07:b7:e0:1a:d6:7c:be:ed:74:1d:3f:12:5e:76:d8:
         46:c9:4d:46:fe:69:63:bd:7d:56:62:f0:ac:e5:38:5f:c4:a6:
         bf:f0:21:c9:e9:99:80:19:e6:39:70:08:a8:32:5d:0f:30:1b:
         b6:f3:ab:53:ca:bb:4a:29:5b:e3:cc:35:5e:ba:41:41:da:d0:
         c2:98:db:f9:de:1a:cd:1c:0b:4a:14:09:2a:31:99:3c:dc:16:
         eb:a3:70:55:9d:90:57:80:82:bc:53:3c:fb:04:dd:5c:bf:56:
         b5:10:0d:57:ef:11:55:80:97:68:8b:1d:74:33:b5:a5:72:30:
         cc:97:12:70:e5:50:47:7a:ec:54:9e:4c:41:a2:76:45:06:12:
         37:24:35:53:d8:21:c3:ed:d5:89:6e:ba:7a:b9:3a:3a:fa:75:
         6d:74:a6:ea:51:b8:c3:64:47:cb:e1:1a:e5:d2:5c:2f:46:19:
         18:04:96:03:6c:0b:26:60:a0:99:5a:ed:31:02:4d:61:c2:43:
         e6:47:72:81:50:37:9d:5a:b5:d4:6e:5e:94:0f:16:8b:c2:4e:
         dd:9b:ca:d3:94:71:04:8d:c9:16:4e:e4:f9:3e:67:69:8a:86:
         6d:5b:5e:99:38:cf:fe:74:fb:a3:b4:3c:cf:97:6a:8d:7e:2d:
         7a:02:84:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:23:55 2025 by rpki-client