This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
File:                     n5SsB4YdiAvjQDGyhnkD51wyPEg.mft (raw, json)
Hash identifier:          owA+fpIeI40+dT21dRWVgTvcwsnl9NoUl+D/TeKFxNY=
Subject key identifier:   34:17:5F:C3:14:67:C4:91:DE:83:05:7A:39:C1:FC:DE:8B:C0:67:67
Authority key identifier: 9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48
Certificate issuer:       /CN=A9193A9E/serialNumber=9F94AC07861D880BE34031B2867903E75C323C48
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
Manifest number:          41
Signing time:             Tue 23 Dec 2025 06:18:46 +0000
Manifest this update:     Tue 23 Dec 2025 06:18:45 +0000
Manifest next update:     Tue 30 Dec 2025 06:18:45 +0000
Files and hashes:         1: n5SsB4YdiAvjQDGyhnkD51wyPEg.crl (hash: yplTIn1leRhFaXy+4MypiqT4NX1JNoaMLtawr4wb2RY=)
                          2: F5E70A7083CD11F09D837187C4F9AE02.roa (hash: W7JUxDMH42jtJaJ07/erekB5mTVAnJ/Qka1pQNTUmm4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl
                          rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193A9E, serialNumber=9F94AC07861D880BE34031B2867903E75C323C48
        Validity
            Not Before: Dec 23 06:18:45 2025 GMT
            Not After : Dec 30 06:18:45 2025 GMT
        Subject: CN=694a3446-65e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:c1:4f:c8:e6:66:16:2d:65:58:5a:3f:3b:
                    21:58:2e:aa:64:9a:37:dc:13:57:98:59:21:4b:ff:
                    7d:6f:cd:ad:1b:ae:3e:ac:e6:bc:05:51:63:d9:9f:
                    7a:9a:d1:b0:32:73:ac:bd:b9:a6:59:fa:76:3c:7b:
                    4d:f6:05:31:7d:6a:e4:ab:ec:33:cd:ab:66:e7:54:
                    1f:e7:90:0f:d7:e6:2a:70:f3:a4:47:de:f9:27:fb:
                    6b:e6:4e:95:a0:01:75:ed:de:35:5d:3d:dd:6a:c0:
                    f7:8a:f0:38:56:01:99:c8:f0:dc:48:39:8c:d9:2a:
                    8b:2d:54:d9:45:b6:9e:82:72:73:02:01:41:ab:6b:
                    f7:85:72:a1:8a:e1:a6:b0:88:95:b4:fc:20:fd:32:
                    f7:0d:69:d5:34:8a:49:2c:4b:f4:59:88:e2:56:bc:
                    d9:8a:96:68:65:44:28:46:9d:49:73:87:4a:eb:1c:
                    8e:cd:d9:b5:28:06:4b:bf:ec:55:30:f1:15:24:e7:
                    74:e5:7f:6d:07:90:e0:6c:2b:d0:f0:1e:68:68:dd:
                    8a:2e:b2:89:c5:f4:c0:5b:f2:bb:3a:7f:99:2a:f0:
                    e4:4e:13:e4:50:17:b1:69:21:d3:0a:90:dc:c7:8a:
                    3f:96:23:bd:c7:e8:54:a8:4f:15:66:52:24:b0:f4:
                    5e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:17:5F:C3:14:67:C4:91:DE:83:05:7A:39:C1:FC:DE:8B:C0:67:67
            X509v3 Authority Key Identifier:
                keyid:9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a4:fd:61:59:f0:83:36:55:e5:47:75:a1:86:4a:72:6c:a8:
         90:68:7e:da:75:c9:37:06:b6:20:b3:62:ee:47:bd:0f:a7:89:
         f5:15:0c:20:bb:89:ba:8d:45:cd:53:7e:3d:f4:ee:f5:c3:8d:
         66:7a:89:7e:7f:e9:ad:c7:17:fc:00:e3:17:38:af:52:ec:cc:
         f6:ca:92:80:3b:d3:16:29:23:4f:bc:8c:db:17:c5:ab:6d:71:
         dc:2d:6e:59:48:88:31:8a:a4:80:f3:6e:0b:a1:bf:32:e2:24:
         9f:52:ce:fa:f5:8e:c5:92:09:7f:a9:f2:67:68:2c:18:4b:c9:
         4d:4a:e6:5e:9a:ff:75:56:5f:5f:d5:a6:29:95:c4:64:b6:7b:
         ec:5a:c7:10:cf:e9:7d:71:02:fe:1e:54:47:45:b5:cc:b0:36:
         73:b2:a6:66:6d:bb:91:56:b1:66:76:fe:6b:4f:dc:68:e8:4a:
         af:7c:ff:92:03:61:d9:a3:22:3d:d3:4f:fb:6c:69:71:1c:43:
         a0:52:c7:1d:98:c5:65:d8:8f:f8:f2:94:a1:1b:a8:b9:c3:55:
         87:4d:ad:ed:ed:f6:0d:e1:38:bb:8a:0c:8d:3b:80:62:6e:ec:
         33:91:6e:12:12:0b:36:5b:10:68:10:da:9a:a5:db:9a:58:8e:
         49:cf:1a:5b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
M0E5RTExMC8GA1UEBRMoOUY5NEFDMDc4NjFEODgwQkUzNDAzMUIyODY3OTAzRTc1
QzMyM0M0ODAeFw0yNTEyMjMwNjE4NDVaFw0yNTEyMzAwNjE4NDVaMBgxFjAUBgNV
BAMMDTY5NGEzNDQ2LTY1ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqzMFPyOZmFi1lWFo/OyFYLqpkmjfcE1eYWSFL/31vza0brj6s5rwFUWPZn3qa
0bAyc6y9uaZZ+nY8e032BTF9auSr7DPNq2bnVB/nkA/X5ipw86RH3vkn+2vmTpWg
AXXt3jVdPd1qwPeK8DhWAZnI8NxIOYzZKostVNlFtp6CcnMCAUGra/eFcqGK4aaw
iJW0/CD9MvcNadU0ikksS/RZiOJWvNmKlmhlRChGnUlzh0rrHI7N2bUoBku/7FUw
8RUk53Tlf20HkOBsK9DwHmho3YousonF9MBb8rs6f5kq8OROE+RQF7FpIdMKkNzH
ij+WI73H6FSoTxVmUiSw9F69AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNBdfwxRn
xJHegwV6OcH83ovAZ2cwHwYDVR0jBBgwFoAUn5SsB4YdiAvjQDGyhnkD51wyPEgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQTlFLzdCNkZGM0U0ODNC
NzExRjA5MDA3N0I1RUM0RjlBRTAyL241U3NCNFlkaUF2alFER3lobmtENTF3eVBF
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbjVTc0I0WWRpQXZqUURHeWhua0Q1MXd5UEVnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz
QTlFLzdCNkZGM0U0ODNCNzExRjA5MDA3N0I1RUM0RjlBRTAyL241U3NCNFlkaUF2
alFER3lobmtENTF3eVBFZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGSk/WFZ8IM2VeVHdaGGSnJsqJBoftp1yTcGtiCzYu5HvQ+nifUVDCC7
ibqNRc1Tfj307vXDjWZ6iX5/6a3HF/wA4xc4r1LszPbKkoA70xYpI0+8jNsXxatt
cdwtbllIiDGKpIDzbguhvzLiJJ9Szvr1jsWSCX+p8mdoLBhLyU1K5l6a/3VWX1/V
pimVxGS2e+xaxxDP6X1xAv4eVEdFtcywNnOypmZtu5FWsWZ2/mtP3GjoSq98/5ID
YdmjIj3TT/tsaXEcQ6BSxx2YxWXYj/jylKEbqLnDVYdNre3t9g3hOLuKDI07gGJu
7DORbhISCzZbEGgQ2pql25pYjknPGls=
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:52 2025 by rpki-client