This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
File:                     9HpCypKdg34XkyvKB9ZfgiyWRMs.mft (raw, json)
Hash identifier:          qAa2drtRYg6AYMxlcrYmh9vQiZWyjLJHSRa6w416Vt4=
Subject key identifier:   59:25:5B:57:8C:7E:26:92:6D:6A:52:EB:03:59:66:51:5F:22:EE:9F
Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
Certificate issuer:       /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Certificate serial:       016E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
Manifest number:          016A
Signing time:             Tue 23 Dec 2025 02:05:56 +0000
Manifest this update:     Tue 23 Dec 2025 02:05:56 +0000
Manifest next update:     Tue 30 Dec 2025 02:05:56 +0000
Files and hashes:         1: 9HpCypKdg34XkyvKB9ZfgiyWRMs.crl (hash: JpEJS7n3xIuAlXHxZ1cSTSKk/HTxCd4hkXfB4m1hOYA=)
                          2: 6224AEA6D37C11F09FF59A7EC4F9AE02.roa (hash: 11+RVr5guD8rNY3LWo5uItgUr3/y3LeGNEolarFgbOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
                          rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A9C, serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
        Validity
            Not Before: Dec 23 02:05:56 2025 GMT
            Not After : Dec 30 02:05:56 2025 GMT
        Subject: CN=6949f904-499c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:32:b5:d6:04:c2:42:8b:69:d1:a9:4c:b6:
                    e1:65:e2:37:71:6e:de:42:ef:0c:cb:a2:3f:54:c3:
                    dc:c1:ce:72:37:16:75:4b:7f:4c:bd:45:7c:73:b9:
                    b8:d6:71:bc:49:c0:b5:c2:6d:30:ef:87:a6:12:c2:
                    f7:1a:c4:74:16:61:79:37:ce:cb:d0:68:3a:79:f5:
                    54:c0:1a:bf:10:4d:f0:46:e0:b5:d8:16:a1:ab:3a:
                    3b:17:7d:4a:d6:a8:0b:1b:b8:e1:7e:14:de:84:81:
                    67:e6:f9:53:38:7a:cf:43:f5:46:32:9b:8c:25:2b:
                    a7:8b:c5:d0:6a:5d:78:35:79:41:fc:d9:f7:e1:69:
                    00:b4:cd:3e:a0:7b:fc:07:af:c7:b7:93:ae:0e:75:
                    ca:4d:99:b8:f9:5d:16:07:a5:e7:11:50:27:3b:da:
                    9d:cc:d5:84:97:d4:ca:5d:01:2f:57:cc:68:48:80:
                    ff:f6:6d:22:0c:fa:8f:cf:ff:31:a2:84:bc:c0:9f:
                    b3:b9:39:c0:68:f9:d6:50:96:c5:2b:1e:cd:59:0a:
                    08:21:a9:82:77:16:db:3d:3a:ba:10:5d:74:a8:25:
                    0c:0d:ed:cd:85:e3:d8:d1:38:d5:a8:b2:20:d3:7a:
                    8b:b1:e4:87:65:17:db:b9:96:d1:b5:e0:ac:97:18:
                    b9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:25:5B:57:8C:7E:26:92:6D:6A:52:EB:03:59:66:51:5F:22:EE:9F
            X509v3 Authority Key Identifier:
                keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d6:7a:4f:b0:1d:28:b5:83:ae:ba:93:b3:22:4d:23:07:a5:
         42:13:ba:f0:9a:ac:e0:0a:78:37:8b:af:7c:55:b1:19:45:67:
         4b:a9:36:17:e7:af:81:81:43:a0:5c:44:1b:03:84:4e:e9:61:
         a2:47:37:b3:35:f5:b2:43:7f:2b:66:78:32:7b:d7:87:fb:5d:
         13:76:cc:1c:8c:98:b6:e2:85:96:70:58:44:04:23:74:2f:02:
         6c:7c:9c:e4:0c:11:b3:9c:75:77:00:d1:9b:e0:ab:7c:84:04:
         84:ee:23:4c:36:23:ec:05:7d:6c:fd:93:35:12:2e:25:72:8f:
         d6:a1:1f:86:1e:d1:b8:94:90:3d:2b:35:d4:8f:c5:c0:09:45:
         89:25:07:db:ad:29:da:89:de:00:f2:32:aa:46:1b:80:d9:c3:
         13:22:70:4a:79:a9:4c:8f:57:ce:05:9b:82:b5:87:3d:b3:28:
         9b:54:b5:da:ff:1e:a9:dc:0b:97:94:a6:e7:20:de:a1:cc:1a:
         df:39:7f:ec:62:e6:24:ef:e5:ce:2e:bd:a6:e9:79:2c:f8:da:
         43:cc:9f:b1:43:b1:9d:d6:48:27:78:a3:54:38:09:e3:54:bf:
         cf:00:a9:62:f4:e3:59:4d:9f:2c:fd:a8:76:f3:52:7d:08:db:
         12:04:32:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:46:30 2025 by rpki-client