This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft
File:                     mTXGObPDUdvtWyk5lPcvgUzPm6k.mft (raw, json)
Hash identifier:          URK3LpokOC3CMTEINboqXhQhHQ25LYY1WMvXNMRCMko=
Subject key identifier:   94:0E:B3:3D:98:1D:B7:81:DB:1C:CE:7C:25:B2:5B:C9:6B:EC:3C:AC
Authority key identifier: 99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9
Certificate issuer:       /CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9
Certificate serial:       2209
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft
Manifest number:          21F0
Signing time:             Sat 20 Dec 2025 15:44:12 +0000
Manifest this update:     Sat 20 Dec 2025 15:44:12 +0000
Manifest next update:     Sat 27 Dec 2025 15:44:12 +0000
Files and hashes:         1: mTXGObPDUdvtWyk5lPcvgUzPm6k.crl (hash: 6fqoy8KE/L5WLMP81imSCfdpNgmBFWE2iedzj/EHEvo=)
                          2: 5D2D29A2966D11EA96C50E81C4F9AE02.roa (hash: xq1A/DwEya72JUauXcCDXoZyXlE8M2olRWGCrYUUkIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl
                          rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 15:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8713 (0x2209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195D93, serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9
        Validity
            Not Before: Dec 20 15:44:12 2025 GMT
            Not After : Dec 27 15:44:12 2025 GMT
        Subject: CN=6946c44c-464b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9f:1c:48:0b:11:af:f7:0e:b9:29:57:2a:93:
                    51:0f:b5:3b:38:b0:7f:8f:46:dc:9d:3d:8f:8a:93:
                    6f:b9:62:78:01:4d:34:87:3d:d1:0f:6c:58:6e:25:
                    ef:97:df:48:17:c4:af:9e:4a:33:6a:37:b4:a6:f0:
                    10:ac:73:24:1b:3a:d3:24:36:87:3e:3f:02:9f:4e:
                    36:e2:2b:5e:cf:fb:37:95:37:70:1b:93:94:70:87:
                    45:ec:17:01:bf:84:78:6e:84:af:49:4c:8e:c1:d0:
                    85:8f:1f:09:1c:f8:e9:8d:d0:46:82:74:c1:2a:3d:
                    15:5a:61:24:bb:4a:2e:de:d5:1e:6a:5d:19:1f:7a:
                    20:1d:a3:fa:41:21:27:98:e2:26:15:36:9c:74:a4:
                    5d:0b:6e:2e:82:23:2d:69:68:57:f8:ca:df:f7:57:
                    16:84:92:12:ce:c2:43:db:2e:7b:7a:14:7a:95:13:
                    be:1f:a4:8f:9b:8d:77:2c:32:cf:77:7e:c0:c8:8b:
                    03:b0:a8:8d:e4:32:57:6f:ca:68:fe:b3:bf:c0:6e:
                    5a:9b:7f:bd:29:e2:c6:c9:57:d5:84:02:f0:cd:16:
                    4a:52:fc:e3:e4:dc:77:fb:37:23:b0:63:17:73:ae:
                    52:ca:3a:aa:68:c9:4e:b5:44:0a:9c:5a:bc:cd:e1:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0E:B3:3D:98:1D:B7:81:DB:1C:CE:7C:25:B2:5B:C9:6B:EC:3C:AC
            X509v3 Authority Key Identifier:
                keyid:99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:12:4f:7e:29:e2:0a:47:ce:de:3a:78:6f:52:10:72:12:8e:
         5b:72:6c:1a:45:6c:f2:9b:40:22:62:f6:af:1b:70:e9:25:0c:
         d5:49:07:5b:89:dd:32:92:64:2f:f5:96:2f:f7:df:ca:7c:fa:
         eb:1a:22:cb:22:ea:6c:5a:63:56:8d:68:e8:72:fe:11:26:b4:
         44:75:39:85:30:82:ae:0b:82:7f:88:23:88:41:e6:45:22:03:
         88:40:54:45:fe:63:56:bb:c7:c2:94:b2:a9:52:f0:43:90:32:
         5d:63:d7:05:56:7b:d3:7a:5a:be:91:33:dc:ce:94:76:2b:f4:
         3a:24:3a:d1:cf:69:f6:ec:3d:38:8c:bb:ee:bb:5e:e5:09:58:
         a7:85:cb:08:47:bd:09:f5:a3:62:24:37:5c:36:35:1c:85:11:
         99:01:28:cf:e9:ab:0f:07:4c:4a:b5:c7:e6:a6:bf:5c:34:31:
         4f:e6:3a:06:13:b7:22:ce:fb:c9:a1:94:32:d8:67:7d:a2:bc:
         69:3b:9f:d8:c7:0b:87:ff:28:2d:74:39:d2:e6:55:08:29:ff:
         45:c8:8f:a6:eb:32:d8:87:6f:b6:2d:74:30:29:b0:91:74:88:
         f3:0c:97:dd:81:e4:62:5a:dd:4c:ed:e4:fb:2d:f0:90:5c:0a:
         41:48:05:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:25:14 2025 by rpki-client