This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
File:                     DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json)
Hash identifier:          XjlpnP3/cJx/FjiCBEqK/hMkRGU3J9Qu882Ml/3H7qk=
Subject key identifier:   A8:4B:DC:7A:06:94:B2:57:0B:39:20:2F:EF:87:53:3F:45:81:38:A9
Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87
Certificate issuer:       /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87
Certificate serial:       34FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
Manifest number:          34F4
Signing time:             Mon 22 Dec 2025 14:43:39 +0000
Manifest this update:     Mon 22 Dec 2025 14:43:38 +0000
Manifest next update:     Mon 29 Dec 2025 14:43:38 +0000
Files and hashes:         1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: +tqmzaFFxCBT3bz/Sz+HB0NmSkjWUr5GMyfRSeAGoK8=)
                          2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: r3JWgar+Qi2GIwJz7gdsqO3bZMMx2m4iwFJF3cbd3+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl
                          rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 14:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13563 (0x34fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199990, serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87
        Validity
            Not Before: Dec 22 14:43:38 2025 GMT
            Not After : Dec 29 14:43:38 2025 GMT
        Subject: CN=6949591a-4cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:a0:12:4c:44:ef:cb:53:83:68:af:ae:e9:
                    79:63:c1:ff:04:a6:1f:01:f9:c9:8f:05:43:d5:c0:
                    8a:de:fc:62:75:d7:d0:e3:bf:bc:85:b6:88:b3:76:
                    5a:2d:4c:d3:16:57:aa:a8:3e:e7:e7:02:37:2e:9a:
                    01:52:c6:40:de:96:c3:ed:df:30:54:1e:53:da:21:
                    cf:de:bc:d8:35:f9:05:52:22:33:d8:30:ad:af:08:
                    c2:9b:69:50:cb:dc:f2:b7:b6:48:47:a1:fb:79:68:
                    c8:1d:c1:4b:0b:b5:4a:94:fa:da:8f:15:4b:7d:54:
                    f7:7a:8b:a4:7a:77:5c:93:72:ff:d9:7d:6b:a2:ea:
                    a9:c9:34:4f:85:cd:ed:d8:d3:d9:b3:ba:26:ce:18:
                    25:58:8f:3f:0d:e5:73:d5:c6:b2:40:72:c2:19:be:
                    5a:81:de:78:48:e8:22:73:08:8f:b5:da:f2:66:73:
                    9a:e6:5e:2b:38:a6:1d:18:e4:f3:03:32:71:9a:02:
                    67:e0:98:2f:d3:70:30:ac:95:4a:04:de:16:71:a3:
                    d5:c5:26:51:5e:85:e1:6c:8d:2b:ba:1e:28:7d:45:
                    fa:34:1a:88:4f:04:c6:a6:39:84:5a:72:33:98:7d:
                    b2:f1:88:5c:a7:5d:78:05:03:03:2b:74:a2:5d:e1:
                    66:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4B:DC:7A:06:94:B2:57:0B:39:20:2F:EF:87:53:3F:45:81:38:A9
            X509v3 Authority Key Identifier:
                keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f1:06:ee:89:35:34:b2:c1:83:62:16:d0:87:2a:9d:8f:65:
         a0:fd:a3:7f:30:20:f9:68:3e:50:a8:b8:91:5c:fb:a5:5b:62:
         3f:6d:f2:60:ff:db:2b:5c:33:02:96:7b:79:89:58:79:9e:c5:
         60:24:f1:ed:d2:4e:00:fc:3a:64:58:bf:e9:77:e3:5d:6f:bd:
         3b:1b:d7:2f:b8:1b:59:dc:e5:e5:5a:07:b7:86:2a:64:59:6a:
         53:1d:3c:4a:ae:d1:71:af:e4:bd:3c:72:fd:cf:ac:12:da:7d:
         1a:c9:4f:13:1b:c9:ae:a0:01:c1:9f:ef:58:5d:85:5c:75:a5:
         18:bf:b1:69:1d:b1:a4:10:f4:39:4f:dd:78:47:55:8c:63:0d:
         29:b5:fd:7b:3e:6b:ac:40:e3:09:4f:ef:17:91:c4:50:aa:41:
         ab:e0:ad:8e:63:82:dc:cd:a7:df:51:78:57:ec:19:e7:49:d1:
         a2:28:cf:e5:4a:ab:77:f0:ed:c9:f4:63:75:2e:ff:3b:7d:bf:
         62:42:b1:e5:17:d3:a3:7e:d4:b4:aa:9a:e2:d9:d3:d0:ce:9e:
         87:8a:28:51:da:69:2b:c4:a0:df:2f:12:6f:9c:fd:92:01:10:
         2f:ba:e2:88:fd:c4:9c:ec:98:a3:ee:c7:2a:d1:3f:ee:93:86:
         b4:3d:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:07:52 2025 by rpki-client