This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
File:                     8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json)
Hash identifier:          s9vszLEYoGv6+Z+x7jxmknNUv7evThoJHGpeUMqoFuM=
Subject key identifier:   E9:87:84:D1:3D:C2:4C:68:6E:F5:21:5A:42:D7:67:75:93:88:8D:A9
Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
Certificate issuer:       /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Certificate serial:       0D77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
Manifest number:          0D5F
Signing time:             Sat 20 Dec 2025 17:39:46 +0000
Manifest this update:     Sat 20 Dec 2025 17:39:45 +0000
Manifest next update:     Sat 27 Dec 2025 17:39:45 +0000
Files and hashes:         1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: R8b1Z7WaYZ+ft04c/iRtDWm8di1FUw1vo66/qHgkC68=)
                          2: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: EPhvpVKPmBr1gw4zNjYoBtmyt2pNt1yo4gY/5g2PubM=)
                          3: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: lEs75gKOPCCArPAlQAMhTBdgUk348a94N0Kq8VMlq+o=)
                          4: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: 6tESd18bNlTp7MTJWPASDnQ/QZ789nFYaqEj8964Wuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl
                          rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3447 (0xd77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
        Validity
            Not Before: Dec 20 17:39:45 2025 GMT
            Not After : Dec 27 17:39:45 2025 GMT
        Subject: CN=6946df62-f55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:95:9c:80:a6:c4:55:04:24:1b:f2:68:54:
                    ed:c1:3c:26:08:c8:3b:13:da:57:88:fe:06:05:0c:
                    8f:57:82:63:d2:fb:76:47:bf:61:cc:1f:db:91:5e:
                    7c:03:4f:eb:84:a7:ef:91:1a:be:4b:c0:d6:50:9c:
                    77:89:df:4e:33:ce:74:f4:24:a9:b7:6f:a9:38:33:
                    ac:b2:3d:e4:03:a4:c9:78:50:f5:39:c3:c6:f6:94:
                    f0:3c:f8:48:09:45:d7:33:bd:3d:9c:ac:62:b1:eb:
                    b7:3f:a1:49:66:7f:2a:e5:71:42:b2:bf:e6:f6:61:
                    e1:92:3e:c6:27:6f:c3:6b:98:f9:60:bf:cf:29:0b:
                    df:cd:b2:d3:a1:3d:60:a3:42:1d:4e:99:88:ff:f3:
                    5f:51:89:e8:b6:71:8d:86:33:5b:ad:15:e3:92:c9:
                    71:4d:97:87:3c:9c:df:d2:1a:99:a5:a9:eb:6f:02:
                    5a:79:71:12:a7:a8:19:48:9e:b5:8f:dc:0e:c8:59:
                    da:d5:e7:d3:20:15:af:b1:0c:6e:fc:25:b5:e0:39:
                    99:af:4f:cb:35:01:89:78:f4:b0:4c:15:89:cf:d9:
                    e1:3a:16:c1:78:4f:57:49:92:eb:e3:7d:a7:06:4f:
                    42:ca:5e:b1:88:ef:46:c4:48:98:ff:4d:61:3c:77:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:87:84:D1:3D:C2:4C:68:6E:F5:21:5A:42:D7:67:75:93:88:8D:A9
            X509v3 Authority Key Identifier:
                keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:78:58:a8:1b:c7:0f:27:da:b0:87:69:c3:7b:c5:8f:b9:84:
         7a:1e:2b:f3:fe:bd:69:8c:ac:9e:5e:c9:d9:94:7d:47:a0:a9:
         3e:49:5a:5b:b3:86:1a:9d:42:18:99:ae:a7:4a:ce:cd:75:1f:
         76:d9:67:d8:4e:f9:c2:ca:83:82:3f:1f:3f:d3:ed:49:3e:69:
         bd:8e:08:66:b2:4f:8e:2d:3b:62:32:32:70:c0:71:60:57:56:
         3b:82:91:9d:a0:da:9d:e4:8e:07:38:3c:a7:a2:59:c4:4b:d9:
         5d:36:be:41:46:4f:ad:d9:0f:f4:d7:d6:d4:3c:35:62:73:39:
         7e:b7:c7:6e:a1:de:04:d3:0a:c4:6c:8d:38:33:6a:05:7f:16:
         d5:9d:70:72:36:31:36:21:67:51:1d:e2:9e:80:9b:ae:9d:82:
         38:16:1d:c0:c4:21:ab:fb:20:87:08:d5:20:d9:84:1d:db:29:
         00:01:b7:23:ce:da:d1:82:ba:db:3a:c9:93:f7:9f:4f:76:de:
         8d:ba:38:30:d6:c2:36:aa:fb:30:e7:ea:11:79:c9:d4:8b:5d:
         8a:bd:0f:2d:c9:e3:d3:7d:38:e3:0c:20:ff:87:cc:ab:bd:ec:
         d4:f5:20:78:e4:76:32:54:dc:41:03:84:89:ed:59:57:cf:63:
         73:af:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:08:54 2025 by rpki-client