This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
File:                     9HpCypKdg34XkyvKB9ZfgiyWRMs.mft (raw, json)
Hash identifier:          0DkVjQF5HUS1RJSU/fFpll0JGSDN/O5K0Z4M623A0N8=
Subject key identifier:   F4:2D:D1:32:09:6D:26:8B:74:DE:22:A5:27:52:90:56:30:A3:33:06
Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
Certificate issuer:       /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
Manifest number:          015F
Signing time:             Wed 03 Dec 2025 01:45:05 +0000
Manifest this update:     Wed 03 Dec 2025 01:45:05 +0000
Manifest next update:     Wed 10 Dec 2025 01:45:05 +0000
Files and hashes:         1: 9HpCypKdg34XkyvKB9ZfgiyWRMs.crl (hash: IdUgd2qncwCrxriBqyHjqz9SQOZTqj11+xQas3NtTmQ=)
                          2: 183B0B384E6A11F08A1BF84DC4F9AE02.roa (hash: Dmmpxo/YJEMbai3LZXF50f2qPKmpjF90qTq1CudRiYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
                          rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 01:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A9C, serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
        Validity
            Not Before: Dec  3 01:45:05 2025 GMT
            Not After : Dec 10 01:45:05 2025 GMT
        Subject: CN=692f9621-a3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:91:d1:2b:d7:37:69:64:6c:db:96:79:14:
                    f1:0c:e0:9c:30:55:b6:5c:c5:1c:ea:4f:f1:61:b9:
                    84:93:36:3f:78:64:d8:7a:f3:a6:c8:4c:36:3c:a2:
                    55:c3:6d:3f:01:c8:29:6d:52:9e:d9:7c:f8:65:70:
                    40:32:e9:0b:da:36:87:a4:c3:84:24:a2:eb:40:a0:
                    03:00:20:c3:43:cb:6b:bb:dd:e8:e2:3e:e2:24:e0:
                    83:0b:b7:f9:59:4e:b0:b8:91:9a:d9:42:ee:d1:a9:
                    68:2f:27:95:51:87:96:44:de:84:5f:82:c0:0f:1f:
                    c2:1f:42:3d:f2:07:bf:7f:e9:2e:9d:3d:15:8c:80:
                    ee:95:31:54:27:d3:06:2a:05:0d:db:35:ef:f7:63:
                    85:c5:b7:57:47:e6:70:8a:c4:d7:5d:f0:fe:4c:9c:
                    da:c0:ba:26:46:f0:03:3b:95:89:cc:f4:7d:e4:68:
                    31:cc:54:e6:41:39:f1:9e:b8:e8:4f:ae:82:7e:ad:
                    f4:2f:50:ec:6a:7d:13:f7:da:37:d4:08:c2:7a:b4:
                    51:3d:76:21:4a:df:09:84:79:5d:a6:aa:fe:ca:3d:
                    e8:3b:f6:e5:6c:3c:53:8d:9f:98:7e:38:cb:b9:a7:
                    3d:11:71:82:95:ea:75:68:ce:33:1c:bc:3b:71:be:
                    00:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2D:D1:32:09:6D:26:8B:74:DE:22:A5:27:52:90:56:30:A3:33:06
            X509v3 Authority Key Identifier:
                keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:47:03:13:44:14:f9:39:2d:0d:01:2c:19:71:6e:a7:11:
         98:a4:fa:49:a8:e0:ef:f0:a8:7e:b6:dc:03:fb:47:96:ca:ad:
         d4:40:6f:b4:d7:7c:78:1a:b7:51:2b:3a:7e:de:d6:8a:15:ba:
         6b:44:77:94:81:f7:71:7c:94:41:97:31:ca:51:10:15:00:51:
         24:ea:7a:b2:ef:82:97:fc:7f:e9:4e:ae:26:26:d5:4e:bb:05:
         d8:b9:ef:1c:cb:5a:c0:8a:c6:23:6d:0d:6d:58:b9:66:97:be:
         c6:65:95:da:8a:2e:ee:78:e6:44:1c:d8:d2:3b:58:66:25:a2:
         2a:d8:c8:d5:5d:e5:c1:c6:d6:12:18:b7:7d:3a:0e:1b:d3:bb:
         c4:b2:ea:62:14:85:18:ff:2d:8e:3a:52:a9:bf:a2:d1:8c:24:
         ad:65:f7:fb:d5:b7:e4:4d:49:d2:12:10:ea:90:cd:79:e0:1c:
         61:03:bd:03:c0:3a:d3:ad:ef:22:47:54:9c:b6:ca:8e:ef:e4:
         f9:11:fd:1e:67:85:d9:cc:e0:e0:0a:4c:fb:bc:3d:22:2f:c8:
         7b:9c:0a:80:25:e3:66:93:6a:40:24:62:e0:1e:18:f5:55:d6:
         b4:5b:20:12:e4:e1:97:82:78:7e:9b:e5:76:69:52:45:23:e3:
         ac:76:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:34 2025 by rpki-client