This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
File:                     xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json)
Hash identifier:          8RR6QDJFZHSJikVRndYKW56W0TFnu4PKTInXJ4qQ0bw=
Subject key identifier:   5A:7C:11:74:BA:F6:CD:D7:82:47:09:D2:8F:32:25:86:B5:74:99:42
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Certificate issuer:       /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial:       0EB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
Manifest number:          0E95
Signing time:             Thu 18 Dec 2025 17:31:01 +0000
Manifest this update:     Thu 18 Dec 2025 17:31:01 +0000
Manifest next update:     Thu 25 Dec 2025 17:31:01 +0000
Files and hashes:         1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: x8K81rETzlPgVMaNo24QuS3mrxFSWmthaTNNAMzbtDU=)
                          2: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: JffyrCPpCuKQ4JV9hKAHpBOYaMhGWQal4zN+8n2snKI=)
                          3: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: K0BpqfADIAgpRrVb5VAxiR5k6a1N4eJk58+OYvAmefI=)
                          4: AF573166309511EABE9B5934C4F9AE02.roa (hash: wBVLudr4r1jyDPH+Ghnt4yYJmAXvAyl8ooTj+H1Y8oI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
                          rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3763 (0xeb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
        Validity
            Not Before: Dec 18 17:31:01 2025 GMT
            Not After : Dec 25 17:31:01 2025 GMT
        Subject: CN=69443a55-68e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b3:46:d1:b7:4f:94:03:73:8c:51:5f:bf:83:
                    5b:9b:eb:96:4e:7c:96:06:9f:8e:e5:ef:c0:11:3f:
                    a3:7d:08:a9:89:29:c1:01:50:4c:05:62:6f:6b:5a:
                    8d:42:aa:58:c2:ea:b3:04:d8:44:8f:17:44:60:d3:
                    b6:cf:51:17:43:4c:30:55:f9:d7:0d:6b:73:d2:e0:
                    80:bd:3f:6f:c6:dc:f5:5a:f5:b1:53:b1:0f:43:d1:
                    9f:de:ab:ff:49:89:45:72:c2:81:58:70:a3:eb:ee:
                    07:d4:e3:c7:40:e1:d0:6b:7c:3b:be:dc:9f:82:87:
                    83:ad:78:04:3d:b7:99:45:cc:17:51:a4:b8:f0:11:
                    ee:fe:18:3d:df:5e:2e:e0:01:6f:56:a9:ef:77:30:
                    1b:e8:70:f6:26:7f:5e:68:de:3e:91:18:f9:bc:69:
                    05:d9:e5:52:fa:32:3d:b1:aa:d7:0b:e6:99:f0:93:
                    de:f8:2f:de:2e:01:5a:64:36:92:21:10:7e:7d:9e:
                    da:5b:96:e5:26:28:ef:fe:3c:09:ed:dc:d4:0a:33:
                    16:47:17:ba:ba:bf:4e:71:c6:6d:4b:30:c3:7a:cd:
                    db:9e:25:aa:1d:3e:7c:38:0d:6e:7e:47:a0:d2:7c:
                    5f:a2:62:34:af:bd:c5:b9:f9:23:02:ae:fc:b2:e3:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7C:11:74:BA:F6:CD:D7:82:47:09:D2:8F:32:25:86:B5:74:99:42
            X509v3 Authority Key Identifier:
                keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:21:c5:ed:40:8f:f0:78:fc:30:fa:71:f0:11:76:c8:1c:92:
         90:65:eb:0a:53:26:f3:8b:99:88:e5:b5:92:31:5b:1c:4d:8b:
         69:b3:0b:26:75:db:47:f0:51:13:86:86:8e:c5:8f:c3:b5:ee:
         b9:23:18:e3:de:c0:76:4a:53:96:28:57:6e:3d:d6:7d:29:b6:
         98:8e:1e:fd:d2:56:9e:1b:aa:ab:c3:63:36:f5:08:52:f0:b7:
         4d:95:8d:78:b8:42:67:80:a3:17:e8:f6:98:e7:b5:bd:3a:a6:
         64:5a:f6:68:b1:1e:d3:59:44:46:db:5f:f2:c8:a1:56:df:5f:
         a1:12:1c:a1:fb:12:dd:56:c6:f1:b6:a9:75:e1:5a:e5:44:4f:
         c2:40:da:b6:e5:f0:6c:af:2b:86:e4:85:2b:bf:71:10:11:d9:
         a7:62:f8:7f:17:e2:ea:6b:f3:de:67:5d:4c:f3:72:5c:fa:f6:
         32:7e:fe:ba:9e:d5:1c:0f:14:f3:e5:44:41:2a:93:bc:23:ec:
         76:53:6e:58:14:2f:91:2d:fe:7f:17:e0:0e:52:71:29:31:ad:
         79:b0:b6:b0:1a:28:dd:3b:8d:d5:ae:80:e6:2f:b8:bd:ef:00:
         18:b8:eb:96:47:86:01:b0:65:c1:86:20:de:77:f5:06:3c:87:
         e3:6b:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:25:08 2025 by rpki-client