This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
File:                     9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json)
Hash identifier:          q3ICYX5+P/PUZKIcG9qAHOi9rYJqzhqJ6202AuUnDQo=
Subject key identifier:   A9:D3:4E:24:C9:7A:88:CE:2C:54:20:46:42:97:46:32:80:00:D1:25
Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
Certificate issuer:       /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Certificate serial:       0C74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
Manifest number:          0C6B
Signing time:             Thu 18 Dec 2025 18:17:33 +0000
Manifest this update:     Thu 18 Dec 2025 18:17:33 +0000
Manifest next update:     Thu 25 Dec 2025 18:17:33 +0000
Files and hashes:         1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: XP8LQzVBjH4ZaHVuhbF65ZxAXs0Gy7yVkUtEM7KvP4E=)
                          2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: 3f3zqC4M9r+CBjBgJL/J6zSN/PgrTrc+js52IEKhV5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
                          rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3188 (0xc74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
        Validity
            Not Before: Dec 18 18:17:33 2025 GMT
            Not After : Dec 25 18:17:33 2025 GMT
        Subject: CN=6944453d-14a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6b:59:12:d4:98:24:8e:19:4f:db:f0:33:43:
                    a8:da:f4:e2:40:41:07:e4:7c:0d:e5:cc:68:86:16:
                    cb:57:c2:b3:e1:b5:8b:9c:3a:f1:36:17:1f:5d:80:
                    bc:62:91:b1:e8:20:da:a7:9e:7e:0a:ea:fc:9a:d0:
                    00:76:42:bb:8f:99:0e:47:7a:3e:3b:3b:ef:4e:30:
                    60:c9:f2:ce:2c:a4:d4:b7:bc:71:d7:10:b2:c3:d2:
                    6c:ac:49:e2:a3:a2:ed:37:42:1d:50:09:ed:7b:67:
                    52:f5:43:80:cf:34:19:64:66:83:cb:3c:e7:7d:81:
                    dd:1e:4a:d2:4f:1f:b9:ef:03:67:6c:cd:a9:99:4b:
                    ef:60:a3:f6:2d:86:c4:4b:c9:6f:d8:ae:0a:10:c7:
                    8d:60:4e:b2:ce:58:19:25:19:3c:81:6d:a3:e2:0b:
                    1c:9b:9f:9f:c8:71:dd:ff:cf:85:0c:3a:03:24:bf:
                    9c:8c:49:72:87:29:94:d6:09:21:ed:cc:9a:d3:0b:
                    f3:17:a2:a3:a8:31:46:39:03:c9:4b:05:f3:05:20:
                    fa:10:c5:a9:fb:44:35:71:1a:0e:a9:5f:b2:02:ea:
                    53:86:ba:5d:9e:21:93:eb:ae:63:c1:11:ee:8b:b8:
                    65:9d:4b:37:c5:fd:ab:0d:3c:be:49:72:81:ec:19:
                    4a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D3:4E:24:C9:7A:88:CE:2C:54:20:46:42:97:46:32:80:00:D1:25
            X509v3 Authority Key Identifier:
                keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:01:00:91:66:0b:db:81:8f:e7:63:c4:bd:88:98:9c:65:c9:
         2d:31:ca:f0:f3:ec:ed:35:73:ab:50:35:18:6c:18:c2:00:e6:
         62:ba:8c:83:89:38:43:9c:f0:85:f1:12:5f:86:f7:97:31:c5:
         dd:1b:f7:b6:d6:3e:b4:14:1a:ee:56:b1:36:c3:d0:00:97:cc:
         89:f0:b7:7d:d4:81:de:74:68:8f:9c:ab:56:7c:8a:ad:1f:d4:
         21:87:5f:10:85:47:2c:dd:21:b7:c0:b4:d4:8a:20:9d:f9:a6:
         fb:f2:a0:13:79:11:06:bd:6f:71:74:7c:98:af:ec:72:19:0b:
         08:67:89:89:5d:e7:fb:87:54:ea:5b:cb:22:a4:88:39:54:24:
         45:a5:0c:e5:ab:31:6c:fc:cd:2e:56:cc:b9:e2:7f:c9:70:67:
         71:74:b4:1a:11:92:2b:29:a2:60:ee:3f:14:01:53:21:30:1a:
         ee:48:d7:3b:7e:0c:1b:c5:e2:25:14:e8:9d:32:ef:0f:00:3a:
         e0:7d:66:64:ca:ef:1f:b6:f8:64:6e:d0:31:70:9a:83:e2:3c:
         b1:2a:7a:79:12:8c:ba:f0:a6:f7:94:4d:62:1d:bf:d2:27:d5:
         62:e8:85:ef:5c:d0:4e:6f:27:8a:34:48:54:9b:64:db:3f:4b:
         ef:f1:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:08:22 2025 by rpki-client