This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
File:                     RLu-zETJHgkDBfMc5g-37DrJU-c.mft (raw, json)
Hash identifier:          cLl6IjbbCEVAi0MhoyeGLiWAcghey/XLnNAh/a43+HU=
Subject key identifier:   5D:1A:08:B0:A3:95:B5:DD:CF:AF:56:93:92:DB:A7:07:21:63:46:82
Authority key identifier: 44:BB:BE:CC:44:C9:1E:09:03:05:F3:1C:E6:0F:B7:EC:3A:C9:53:E7
Certificate issuer:       /CN=A9177D93/serialNumber=44BBBECC44C91E090305F31CE60FB7EC3AC953E7
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
Manifest number:          0197
Signing time:             Fri 19 Dec 2025 02:40:01 +0000
Manifest this update:     Fri 19 Dec 2025 02:40:00 +0000
Manifest next update:     Fri 26 Dec 2025 02:40:00 +0000
Files and hashes:         1: RLu-zETJHgkDBfMc5g-37DrJU-c.crl (hash: D8SFUPBqPShZdOuWDSBaosw8IUWoJldMD1hh6S0ngmY=)
                          2: 5E69790087C911EEBD25E611C4F9AE02.roa (hash: W6euVC9oMgmjXdWSzTocorHHfsn9cU4hmyXmkD4ziKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.crl
                          rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177D93, serialNumber=44BBBECC44C91E090305F31CE60FB7EC3AC953E7
        Validity
            Not Before: Dec 19 02:40:00 2025 GMT
            Not After : Dec 26 02:40:00 2025 GMT
        Subject: CN=6944bb01-cd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:02:6c:c4:c1:11:25:9d:cb:89:87:81:1c:
                    c6:05:f4:57:1d:6a:34:c1:e7:94:13:6e:90:1c:f4:
                    8e:98:79:d1:58:b7:98:2f:25:29:fd:bd:1c:ac:e3:
                    21:55:b2:cd:be:d1:92:93:c2:f9:ec:c8:2c:7d:ed:
                    f9:11:c1:1c:9b:dc:24:1d:ca:bd:39:c2:33:30:7c:
                    6e:d7:3a:07:15:53:e5:66:0f:30:94:e2:0f:ac:d9:
                    21:08:6c:a4:d4:4e:48:26:2e:13:c6:b9:d0:37:ae:
                    af:ef:13:a5:a5:28:ad:c8:84:31:88:91:80:9e:b3:
                    a7:e4:42:ed:d3:90:16:7a:a3:f0:9b:13:f3:0a:f8:
                    28:70:3a:a0:47:82:1d:1d:c4:ee:67:17:37:2b:60:
                    35:97:de:e8:42:dd:23:fc:ef:bc:7e:96:f6:a2:73:
                    6e:a6:69:b3:d4:dd:ba:c6:50:24:77:dd:01:7c:2a:
                    38:3f:b2:50:90:a7:0f:d4:aa:e2:00:1b:60:0c:30:
                    0d:5f:5b:a4:6d:75:ad:9e:03:95:97:e2:71:be:62:
                    c3:e2:9e:7f:bb:b4:00:3a:2a:84:c0:0e:95:d1:9b:
                    09:da:5d:19:c9:3f:6e:2d:7f:40:a8:12:d6:6a:2d:
                    01:fd:73:b7:51:cd:d3:10:cf:3a:df:09:38:13:b1:
                    12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1A:08:B0:A3:95:B5:DD:CF:AF:56:93:92:DB:A7:07:21:63:46:82
            X509v3 Authority Key Identifier:
                keyid:44:BB:BE:CC:44:C9:1E:09:03:05:F3:1C:E6:0F:B7:EC:3A:C9:53:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3b:67:ad:70:32:e8:4d:a0:d4:bd:5b:20:c5:e6:c1:4f:01:
         35:a5:14:db:17:dd:91:9b:50:8c:63:14:58:a0:2a:d7:ee:98:
         01:03:3b:ea:4e:95:60:11:78:de:8a:60:27:5d:04:ff:17:54:
         c7:d5:20:6a:8b:61:5f:68:75:83:41:68:e6:e7:6d:29:a0:3b:
         b3:11:46:9b:3c:7c:db:2c:3f:10:e8:ce:b2:1c:8a:c0:f9:e5:
         a4:db:11:f0:95:4d:62:04:84:7e:ab:ea:bd:34:a0:8c:d3:c5:
         58:5d:3d:ed:b1:55:54:0e:10:0e:80:75:d2:02:d6:1e:fe:94:
         fb:bc:73:d6:5a:eb:f1:5e:c4:d4:97:9e:37:0b:8c:5d:07:68:
         f6:a8:ec:dd:5e:25:a8:24:48:ae:b0:6e:a0:6a:d0:43:db:7e:
         2f:f7:c0:74:65:bd:b0:50:25:10:b4:ff:c4:72:f7:18:91:b4:
         7b:3c:35:ed:7b:57:da:60:11:28:f4:d3:ef:dc:40:be:ed:f4:
         0f:67:0b:fc:2a:29:04:d0:d9:9e:07:ba:e8:7b:56:b1:6d:8a:
         fd:67:a4:84:07:50:54:6d:59:65:04:a9:cb:7c:bf:90:4d:d8:
         e1:54:92:af:5f:d1:f9:32:1f:c2:59:37:7d:b1:4e:bf:7b:1f:
         5e:5c:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:13:46 2025 by rpki-client