This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
File:                     IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json)
Hash identifier:          AvXIvhYHc94LhDrQcBPT3+Oo//VbZ8w7k9tiiWIXO7o=
Subject key identifier:   D7:33:C1:CD:40:CB:41:44:1E:AE:23:04:07:D4:26:90:75:90:DF:BB
Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99
Certificate issuer:       /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
Manifest number:          0111
Signing time:             Tue 09 Dec 2025 02:58:53 +0000
Manifest this update:     Tue 09 Dec 2025 02:58:52 +0000
Manifest next update:     Tue 16 Dec 2025 02:58:52 +0000
Files and hashes:         1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: FlzmwBDlyR2Z7geeYRdVxRo/OtX3ChqOZsWQeAJDdhQ=)
                          2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: zzdFNHhV2hq5Z+7D9I2GDKqbTVdZBzqXlydZjeryJz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl
                          rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 02:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EA7, serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
        Validity
            Not Before: Dec  9 02:58:52 2025 GMT
            Not After : Dec 16 02:58:52 2025 GMT
        Subject: CN=6937906c-f773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:a2:f7:12:ed:6d:c7:47:3e:48:b0:37:e5:
                    da:ce:11:b1:ed:e7:7f:93:3d:63:21:88:06:a7:d5:
                    ba:63:69:f7:19:75:97:de:72:2c:22:cd:24:07:e4:
                    ed:70:7b:46:18:15:58:77:c7:6d:d2:d7:13:a8:88:
                    f9:de:93:5a:66:87:68:3c:49:65:dc:8c:d9:11:ac:
                    1c:c5:bf:e5:dd:db:97:de:40:83:bc:74:ef:48:5a:
                    a7:bb:f3:bc:1c:00:ad:ef:68:e3:35:1b:82:1b:40:
                    f1:69:4e:24:ca:2f:e8:d8:01:c7:21:4e:82:5c:8a:
                    4f:6a:66:43:f3:c7:dc:d3:13:8d:d5:08:af:80:0b:
                    7e:1f:02:b9:37:2f:79:ad:0f:17:bf:23:92:00:ab:
                    93:c1:b5:ff:4c:de:62:bb:57:bf:48:1c:0b:60:65:
                    d5:89:0f:7f:3f:19:e7:4e:f5:d5:3d:f4:b9:fa:ed:
                    c3:9f:68:6a:22:d8:d7:bc:6c:e0:99:27:4e:7d:94:
                    2e:96:56:23:52:70:9f:ae:f1:c5:c1:55:c9:b9:3c:
                    42:00:b5:69:f0:83:b8:31:a2:11:eb:ef:df:f2:40:
                    aa:c7:ca:ad:ab:46:95:49:fc:6c:62:07:fe:73:f3:
                    b0:35:28:9f:c1:7b:08:de:49:97:44:f0:b5:33:05:
                    92:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:33:C1:CD:40:CB:41:44:1E:AE:23:04:07:D4:26:90:75:90:DF:BB
            X509v3 Authority Key Identifier:
                keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f2:87:7d:d3:b7:ac:ec:27:76:d0:bb:90:89:30:19:17:e3:
         f0:b1:50:a2:b9:86:cd:20:b3:62:35:c2:81:b4:2e:69:8f:cd:
         6c:96:bd:8f:d4:59:5d:b3:81:cd:7a:0a:f3:29:d1:ec:1e:36:
         28:97:d4:9b:d2:3a:3e:c9:38:7b:bc:e2:85:a1:bb:64:46:a5:
         ec:f7:a0:e7:97:94:ac:98:55:5e:d7:fa:55:3d:ef:ca:96:64:
         ee:39:a5:56:77:52:f5:5d:25:87:82:82:17:0c:e2:a3:39:65:
         3f:ed:f0:42:b5:96:82:8a:a7:6b:f3:af:b1:c7:b2:24:17:fe:
         cc:70:aa:78:11:c6:1a:5a:2b:56:25:56:a0:62:1b:02:59:d5:
         4a:ba:72:f6:54:d9:43:3b:1a:43:3a:03:d9:1c:99:dd:3a:73:
         16:0d:3a:56:76:c2:34:a2:23:8e:db:da:21:bf:ba:0e:f0:bd:
         7c:4f:81:8c:d3:7e:ae:bc:df:b6:2b:86:6c:67:fd:f8:8c:02:
         fa:26:72:db:d4:0b:d8:50:ed:54:79:08:24:ab:aa:cf:0a:88:
         8c:96:49:32:3c:3f:06:d8:b3:11:34:2e:2e:4b:26:89:f4:90:
         60:76:69:3f:0f:c3:98:6c:b9:4e:16:f5:7e:6b:30:a5:86:66:
         c7:62:44:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 03:05:04 2025 by rpki-client