This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
File:                     T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json)
Hash identifier:          IpipNFtWDVwc9nfcqUt6qzTQsIHVU4O2iSoUqVnR9LM=
Subject key identifier:   65:7C:29:FB:D7:F5:F8:82:A4:68:F6:12:AB:84:3A:B0:1B:FC:A0:55
Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
Certificate issuer:       /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
Manifest number:          D5
Signing time:             Sun 07 Dec 2025 03:54:58 +0000
Manifest this update:     Sun 07 Dec 2025 03:54:58 +0000
Manifest next update:     Sun 14 Dec 2025 03:54:58 +0000
Files and hashes:         1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: 9eH4JRfyZVr+VRmk0YS/RZ3YPQJj9+PZILJ7rNPguoQ=)
                          2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: u8noB028TNfTLikiPZdxgRoYAwRPbFxLIUP3+7OxVB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 03:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
        Validity
            Not Before: Dec  7 03:54:58 2025 GMT
            Not After : Dec 14 03:54:58 2025 GMT
        Subject: CN=6934fa92-41e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:50:57:ea:dc:f9:ad:1e:cc:53:21:d2:df:
                    a5:71:56:ba:c3:01:39:4d:dd:97:15:69:20:9a:d4:
                    58:61:24:49:71:8d:f0:dd:47:4b:fe:2a:87:31:2f:
                    e8:af:01:d4:56:74:9a:7e:aa:e6:ec:69:b1:ac:a7:
                    31:22:6e:1e:9a:22:aa:fc:80:b2:7e:1b:4c:55:b3:
                    0f:d6:98:49:bf:92:cc:82:7c:c2:49:59:d6:97:8f:
                    01:97:e0:03:23:78:ba:4e:33:05:02:f1:ee:46:7f:
                    18:69:c8:db:f9:6a:d2:75:84:47:63:31:a8:56:f1:
                    ee:d0:db:66:08:8a:a1:be:26:1f:1c:54:37:2c:3b:
                    38:7a:48:fe:5e:5f:07:3c:ce:43:02:13:ab:7d:74:
                    10:42:37:13:dd:3c:42:71:c1:96:41:bf:c9:2d:96:
                    7e:07:15:df:d5:78:72:68:a6:86:88:6b:2a:71:9e:
                    54:39:1d:fe:94:a7:c9:bb:78:91:73:a5:75:04:f9:
                    c5:f4:83:03:2c:df:bc:54:e4:eb:82:65:78:12:c0:
                    e1:b8:c7:1c:74:c4:ba:73:54:84:90:95:29:6b:54:
                    8e:36:f4:f8:7f:ec:74:2c:8b:c0:2f:75:74:48:07:
                    da:5e:22:70:38:f1:f2:7a:9f:16:7a:7c:5f:de:da:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7C:29:FB:D7:F5:F8:82:A4:68:F6:12:AB:84:3A:B0:1B:FC:A0:55
            X509v3 Authority Key Identifier:
                keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:65:b5:a8:98:b4:dd:28:6d:61:30:9f:2e:15:65:1c:ca:
         1e:07:ca:a8:54:aa:18:11:c2:cd:56:ea:bb:ba:f9:f0:7b:21:
         05:52:0f:17:40:7d:81:d3:51:b0:21:43:8b:ff:84:4a:f1:c1:
         21:94:55:77:73:7a:b1:50:9b:74:c6:a3:71:52:10:87:ab:f1:
         4c:94:b6:89:6b:ae:6b:12:df:20:43:ed:e0:90:01:20:86:71:
         ba:60:cf:03:73:28:05:4a:e3:5a:d7:63:45:22:1f:88:cd:e2:
         4f:6b:97:b9:11:6d:90:17:ba:b8:57:48:c3:4c:08:78:3a:dc:
         39:c3:2a:7e:c3:eb:8f:0e:30:66:e8:2c:b1:2b:9d:b1:76:dd:
         4d:0f:bb:59:f6:55:9e:0c:f8:18:fb:db:6b:40:21:34:3c:39:
         0d:a5:c5:55:20:d0:ee:81:e9:55:cb:23:bb:a9:45:56:54:7c:
         58:68:c7:1b:7c:4c:0a:37:e9:1d:d6:92:7d:e0:37:68:4a:1b:
         41:fb:d7:d0:e0:98:db:ec:c7:37:bb:87:15:8a:aa:84:93:36:
         cd:55:33:3e:5e:d7:9c:32:1f:cb:3a:ab:7a:02:00:64:64:3b:
         1f:be:f1:28:de:2d:37:82:3d:ee:7c:12:ed:6f:35:cf:cc:88:
         9c:f9:9e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:11:15 2025 by rpki-client