This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File:                     siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier:          Jb6xEdHIoGVDBerJhN7bMrqtV5tQWQFPpL9C26t+9Ek=
Subject key identifier:   E9:97:27:BF:73:D3:7F:5A:19:D4:3B:ED:04:99:AE:2E:E7:D9:20:3D
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number:          017D
Signing time:             Sat 13 Dec 2025 03:33:02 +0000
Manifest this update:     Sat 13 Dec 2025 03:33:01 +0000
Manifest next update:     Sat 20 Dec 2025 03:33:01 +0000
Files and hashes:         1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: 66rL1Zw/qgctsaw4UZIAgPfTHbjlQeziio+I/AmAgFQ=)
                          2: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: kdnh0lY80uMfga5l6WUOTwTWs5iXaL/0Tn0l6KDoAeU=)
                          3: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: 9NSBUz8m7XvUpzDF2q/kWtrtqPYOWvRlzQxmdt8OCJc=)
                          4: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: 5GSc16lAwm/VgJPQr9dFvZJgXnG3knNsBXTvWJ5YEVU=)
                          5: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: 4bqguqQkO2NdVWuTGwGDP28FXTuH4VtBBVIWhIpTMAk=)
                          6: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: yi/JlbD7n+64UZKPjWeRYXCwO+TbmKfGvCIR+gFBIgU=)
                          7: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: aDzusaC8Tp4Xh29QzEkDqXm9UtTCSIlF3bFjfnnKcb4=)
                          8: BB17221E211611F08D31C34DC4F9AE02.roa (hash: ROJzIN797AliUmkcNaXXEwujC8/puzfhlC19YDeoFFk=)
                          9: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: EN6MJJBs25VJA8BxPoTDjeqUMnebmHL6ptBQ7dXtzww=)
                          10: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: Rw5/f7mwiL2A4bDLQlquOGpfyNbiDbGp1uerfy4o6ls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 03:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Dec 13 03:33:01 2025 GMT
            Not After : Dec 20 03:33:01 2025 GMT
        Subject: CN=693cde6e-bdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:22:46:9b:d2:0c:b9:06:36:22:7c:1b:78:
                    b7:fd:f6:35:fc:c4:c3:bd:be:da:60:b0:b4:74:6f:
                    15:b9:b5:32:4f:37:0f:b4:e0:14:b2:9e:c8:4a:6f:
                    c9:6f:f4:d6:c8:df:d2:76:44:f4:77:93:95:bd:78:
                    42:03:50:c0:18:04:7b:7a:96:6b:26:bc:f9:ea:f5:
                    07:57:bc:a7:f7:ea:a0:74:3d:11:c2:5c:bd:09:cd:
                    ae:6f:01:da:ad:2f:b6:bf:ba:43:67:32:b4:db:1f:
                    7a:29:44:bc:0a:ac:18:fd:b1:2e:fe:4f:b7:ad:d8:
                    79:4c:75:03:ed:54:3f:77:1d:c9:be:94:61:8f:f3:
                    eb:8c:28:04:c3:ac:03:65:75:67:93:9c:50:4b:12:
                    0d:03:cc:5c:16:31:6d:62:65:d4:79:b9:2b:35:32:
                    a1:a9:50:5f:98:d2:e7:09:a2:a9:fa:8a:0e:69:1a:
                    21:10:b9:f7:70:a6:19:f3:e6:2c:79:8b:fa:79:53:
                    60:23:94:ec:9f:b1:67:b5:79:d2:b7:a5:b9:66:31:
                    3c:ac:4b:0c:21:39:f3:50:bb:ee:75:86:e1:15:04:
                    58:fe:f1:d9:31:c8:43:d4:e6:d8:52:2d:38:c0:69:
                    eb:f6:b5:38:a7:24:e4:e4:1c:36:3e:c6:ca:a9:39:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:27:BF:73:D3:7F:5A:19:D4:3B:ED:04:99:AE:2E:E7:D9:20:3D
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:41:5f:29:22:fd:27:cd:07:68:ea:0c:4c:be:f9:34:d9:f0:
         89:64:0e:5b:ee:d7:5f:8d:ff:0f:17:77:8a:39:ab:40:f7:ed:
         4e:1a:89:4a:d5:25:cf:72:b4:70:ac:e2:65:68:a5:3b:74:d8:
         90:a4:1a:96:83:21:d0:81:0b:84:ca:dc:f6:ac:10:7b:30:45:
         26:3f:ec:51:f3:cc:9d:95:54:62:9f:a7:fa:ed:79:20:5e:e4:
         98:59:ed:2e:cd:70:2e:4b:bc:52:eb:2c:07:7b:86:31:75:e3:
         3d:a8:04:a8:0b:12:47:06:68:71:6c:da:34:26:44:af:8a:84:
         73:43:08:02:69:77:7d:d4:94:7c:e5:df:60:a5:d7:ad:82:45:
         15:81:db:74:e1:67:e9:63:6f:e6:a2:14:b6:78:55:c1:62:14:
         f4:67:27:39:77:fd:63:a9:7c:cc:42:73:c8:8e:21:c6:c9:c7:
         da:ec:0e:45:d7:85:af:3a:ef:1e:69:ab:74:c8:04:d8:f9:82:
         39:a8:95:37:c5:4d:46:da:6a:81:dd:5d:47:ec:a0:fd:b8:1b:
         5d:18:19:33:cb:04:6d:34:cc:64:06:1d:bf:34:33:7c:ed:a8:
         a8:24:98:6d:9c:3a:e4:0d:55:28:a0:23:de:b6:61:70:ec:a4:
         47:01:43:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 16:58:02 2025 by rpki-client