This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
File:                     R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json)
Hash identifier:          G+QDFvww7awlrr3NaVEoDkYibxP/7yennZjr/9pyvTU=
Subject key identifier:   BC:E7:A9:4F:0C:3C:19:94:79:7E:A3:CF:08:11:ED:D1:84:CD:82:46
Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
Certificate issuer:       /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Certificate serial:       06D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
Manifest number:          06BC
Signing time:             Sat 20 Dec 2025 21:38:52 +0000
Manifest this update:     Sat 20 Dec 2025 21:38:51 +0000
Manifest next update:     Sat 27 Dec 2025 21:38:51 +0000
Files and hashes:         1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: p53p+Bips3zaUWz+vZdE5NseWAlGPjPsB0w/BsjEacI=)
                          2: 0A6D07FC913D11F092E92E65C4F9AE02.roa (hash: jnC/bVKzkBW2sgZUOJOTTr6DZW8ZjwQTZXz1lcwwzCM=)
                          3: DC130EBC913A11F08A1B3D3DC4F9AE02.roa (hash: DQnHl31CJCa6fulX34rSYao3uxop1q0eB7CtOK8kjP4=)
                          4: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: UrlgPQXsb4gQDscf1nttcVc31km04Zvk2KGgC6tLDaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
                          rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751 (0x6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
        Validity
            Not Before: Dec 20 21:38:51 2025 GMT
            Not After : Dec 27 21:38:51 2025 GMT
        Subject: CN=6947176b-9ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:9a:34:30:ee:6d:b6:3f:29:d7:24:29:06:
                    24:90:4d:77:26:44:3a:eb:0b:bf:52:a1:30:21:7b:
                    6e:3f:27:6d:24:88:04:01:ed:3b:41:6a:77:36:53:
                    af:1e:be:59:78:78:05:1d:0e:97:ad:c9:ec:01:8e:
                    14:46:04:28:a6:d0:f2:74:65:6b:2b:9d:50:bc:6e:
                    80:c2:f1:7b:bf:00:ff:a8:34:3d:d0:75:c5:11:c7:
                    1d:85:6a:86:43:a2:50:c2:62:17:08:63:dd:6d:aa:
                    61:15:f2:b6:ab:92:f7:e7:54:76:c9:7d:95:c4:53:
                    31:8e:16:96:64:c7:87:e3:80:11:89:77:15:13:a0:
                    44:ab:e5:c9:f1:1c:fa:1d:59:d8:46:9b:d1:0b:9a:
                    9b:09:ca:bd:7f:b5:bc:02:2f:63:80:89:9b:89:0f:
                    72:6a:0a:1e:cd:53:6b:e9:ea:31:04:d7:e2:a9:d1:
                    5f:99:45:0d:ba:06:bb:5f:3b:7c:e7:85:f6:05:39:
                    43:42:e7:5e:cf:7c:f7:5b:c4:a6:cb:5c:9b:4f:ce:
                    c5:47:71:74:ad:b2:f9:25:32:51:3e:70:fc:ba:a0:
                    17:47:b2:82:cc:5c:66:8b:ad:82:d3:3d:aa:53:50:
                    a5:9a:2a:15:c9:bb:b1:21:d4:33:08:41:b0:2e:09:
                    83:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E7:A9:4F:0C:3C:19:94:79:7E:A3:CF:08:11:ED:D1:84:CD:82:46
            X509v3 Authority Key Identifier:
                keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:50:53:e7:16:37:79:ce:4f:db:db:f3:e8:36:5c:c2:40:77:
         51:ac:5c:f4:22:c9:8c:aa:b2:28:53:98:6c:93:ac:ec:b0:4a:
         97:8c:7b:50:aa:24:15:e8:53:da:57:fc:f1:e9:39:6f:b0:46:
         14:f8:a2:56:42:74:df:e9:59:7a:56:ef:7a:53:0c:c8:3b:b9:
         dc:59:16:97:ba:c2:ee:ef:0d:26:47:5b:41:49:1f:02:85:dd:
         ba:7d:8d:71:2c:64:05:60:44:f1:c7:0a:e0:61:05:97:7a:b4:
         3d:09:f8:14:38:49:12:30:29:d1:e5:f9:25:15:d1:94:1b:c7:
         2e:b7:e5:15:9a:d1:9b:74:ba:37:7b:f6:b0:08:81:ca:4b:d3:
         b8:a0:71:96:fd:e9:44:ac:3f:0c:57:f8:22:e8:02:23:0a:7b:
         83:05:e1:e4:d1:b2:a6:b2:ab:f2:c4:b6:d5:20:31:ac:a0:8e:
         59:fa:59:aa:48:4c:11:9c:0f:8a:2e:3a:ef:64:d2:fe:92:7d:
         d8:ce:29:f0:28:42:74:2b:73:03:86:87:6b:3a:ca:86:db:29:
         f3:ee:26:52:c5:2b:ae:db:f2:f1:b1:66:5a:d0:0d:e0:97:2e:
         3d:1c:db:11:c7:db:11:03:eb:c9:a3:cb:4a:64:29:d0:63:69:
         aa:39:e2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:12:09 2025 by rpki-client