This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
File:                     AVyC748X910B8qMGeGhd_cJeH3w.mft (raw, json)
Hash identifier:          n/dltIcS0fzKQOKZBrrQXKcQ1B+EoHiO8HQFJeX4Fjo=
Subject key identifier:   E9:25:B7:EB:B6:6A:00:A5:5B:4F:79:FE:34:30:F9:D8:5B:C8:98:4E
Authority key identifier: 01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C
Certificate issuer:       /CN=A9193EEE/serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
Manifest number:          86
Signing time:             Tue 23 Dec 2025 05:35:16 +0000
Manifest this update:     Tue 23 Dec 2025 05:35:16 +0000
Manifest next update:     Tue 30 Dec 2025 05:35:16 +0000
Files and hashes:         1: AVyC748X910B8qMGeGhd_cJeH3w.crl (hash: Urh71jlQRhZAbr2FrIQp2VgXS8c4l3n6ZCHjKM52noQ=)
                          2: 39A906E8152C11F08DC35116C4F9AE02.roa (hash: LpZGZLncTzWOvQxmXibbHB08wMwsFC9T1sCL9HoJGDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEE, serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C
        Validity
            Not Before: Dec 23 05:35:16 2025 GMT
            Not After : Dec 30 05:35:16 2025 GMT
        Subject: CN=694a2a14-5130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:3c:22:80:6a:76:cb:ae:76:6c:88:d0:fd:
                    9a:97:1c:96:20:a9:13:96:95:f8:97:4c:00:b5:50:
                    78:88:65:41:b9:48:86:c1:6f:66:18:1f:67:88:ea:
                    29:57:e4:08:30:62:36:20:e4:01:8f:9b:eb:50:bc:
                    55:29:88:86:b5:a8:85:99:b4:40:0b:4d:9a:ed:c1:
                    31:44:a0:15:15:be:3b:25:2f:cd:b7:8c:96:10:41:
                    28:03:2a:c1:16:2f:db:7f:23:d4:76:fc:4c:40:40:
                    8f:99:6b:9c:27:1d:a6:bd:a5:12:7e:9c:06:64:30:
                    6a:6b:97:3a:5f:be:3a:86:72:62:05:64:73:29:db:
                    47:14:4a:23:f8:ed:ea:04:c4:f5:e1:36:64:bb:6d:
                    12:1b:52:64:55:52:ce:e9:2d:e5:44:eb:4c:fa:7b:
                    ee:a7:6e:16:cd:46:b9:41:f0:20:0b:7a:cb:18:09:
                    b1:f1:14:9e:3b:b5:5e:b3:50:15:e6:ad:80:c5:32:
                    c2:2c:a5:f8:fd:fa:12:27:8e:da:5b:54:c3:64:0b:
                    47:c1:41:1c:8e:9a:4a:0d:b1:cd:a0:81:5b:2a:6d:
                    f4:18:04:21:5f:72:8f:a8:80:63:e0:d6:4e:74:24:
                    e8:af:d2:91:ba:fd:50:01:34:22:75:d1:ee:cf:4d:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:25:B7:EB:B6:6A:00:A5:5B:4F:79:FE:34:30:F9:D8:5B:C8:98:4E
            X509v3 Authority Key Identifier:
                keyid:01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:49:df:a9:17:f9:02:9a:39:0e:0a:e4:05:42:1d:3f:72:77:
         24:38:d5:3c:05:01:21:17:26:00:9b:02:20:0a:71:44:b7:6b:
         bf:c7:72:05:a8:b1:eb:68:2b:2b:c8:aa:50:32:61:e3:52:0c:
         9a:02:9b:d5:27:54:1e:e4:35:1d:d2:d2:67:62:eb:34:6d:0b:
         66:93:8c:51:ba:05:56:15:1d:25:3f:bb:26:59:58:59:11:ea:
         21:83:13:f3:f8:af:23:78:f8:ae:ed:08:13:79:58:e2:84:ab:
         af:6a:fd:cd:cf:35:35:2e:18:56:0b:d3:fb:ab:29:a5:72:5a:
         3f:b8:9f:69:7a:45:c0:c2:cc:76:08:26:a5:34:cc:27:cd:36:
         8e:b8:04:fc:a3:ea:90:ba:f1:49:a0:e7:d8:59:14:3e:03:6b:
         06:99:33:fc:72:19:d2:70:35:d3:b7:5f:50:41:10:b3:dc:56:
         df:cc:84:df:b6:f4:3b:c2:1c:55:11:a5:fe:d6:d9:bb:a5:b3:
         9d:a8:db:4b:b3:a2:84:4a:5f:81:56:34:85:38:f9:ad:c3:9d:
         52:eb:ec:79:f5:79:ed:7c:9f:ba:c0:e8:73:51:23:9e:ea:60:
         8b:6e:f2:81:7b:df:bd:83:66:25:93:7d:cf:6c:c8:ba:4b:cd:
         49:6f:a2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:08:30 2025 by rpki-client