This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File:                     99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier:          SyFe/v+JzYDFL4Up/GL0QNpd1aVIhkBdxDoRRdhMIYE=
Subject key identifier:   2A:DC:32:BD:F0:C9:1B:FF:3F:F0:8D:32:8E:88:E6:26:8E:5C:3E:F6
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer:       /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial:       1B04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number:          1AB9
Signing time:             Mon 08 Dec 2025 16:06:37 +0000
Manifest this update:     Mon 08 Dec 2025 16:06:36 +0000
Manifest next update:     Mon 15 Dec 2025 16:06:36 +0000
Files and hashes:         1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: FsPCWzNAkaUlHzkvbxdhzJiySe/c1iRWDUnYv/DRgUo=)
                          2: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: ZY9UVEPOCB1tx7LWMX0JPtFEK9gl6SqjcejUUwF9APo=)
                          3: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: p7tQRESvOucR4loUarfHpuL5VMHiMFu4353xIOkSzpw=)
                          4: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: H1ZnHxZixXVbHo7aB0OBCDDL/HvZe6bvZhxCcCw4jYQ=)
                          5: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: e4tQVidUhYeVOQueW5SrNgjm3m0qmH9C2+LHfapMlI0=)
                          6: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: janciRMHjU97zB3lXitJwIl9Ika5JfzU+v8Mkow8p3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
                          rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 16:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6916 (0x1b04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
        Validity
            Not Before: Dec  8 16:06:36 2025 GMT
            Not After : Dec 15 16:06:36 2025 GMT
        Subject: CN=6936f78c-c3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:58:1a:5c:03:11:81:4c:ef:3b:56:05:43:7f:
                    a3:2e:5c:57:31:f6:8f:bb:fb:1f:5e:b9:ee:1d:e6:
                    64:43:8a:a9:02:ea:bb:32:b4:03:ef:88:7a:60:39:
                    bb:54:de:4d:91:e2:33:e3:5f:7f:98:58:3f:93:5a:
                    b7:be:1b:b9:f7:66:94:6d:70:f3:bb:23:9e:d1:b5:
                    64:3d:b0:98:c4:e0:6c:2b:60:22:d4:7f:b1:82:06:
                    74:eb:bd:c4:fd:c2:a2:54:d8:fe:75:d7:7a:9c:4b:
                    e2:e2:f0:2f:c6:4e:ef:95:7d:24:1f:9e:9b:eb:87:
                    9d:5a:d8:8b:24:79:de:ac:cd:c8:1e:3d:4a:1f:ac:
                    1a:52:a5:d3:59:61:07:ba:a4:16:7d:44:60:2f:f8:
                    3e:7b:8e:0b:3e:8d:55:14:66:60:a5:c3:c9:7e:87:
                    0d:73:33:46:52:85:26:93:5b:8c:6f:4d:52:ed:8b:
                    ab:a4:9c:dc:4e:44:48:59:3b:7f:b4:18:ab:4f:05:
                    08:70:03:e6:b6:92:a8:77:25:a8:30:b4:30:89:af:
                    4d:a4:15:6e:e2:da:32:e1:34:2d:59:91:99:69:56:
                    96:cc:4e:e6:a6:7f:e8:c2:a7:b4:c8:2d:e6:4d:d4:
                    2a:32:57:c4:f1:92:f4:4f:ce:35:dc:38:cb:d8:9e:
                    c5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DC:32:BD:F0:C9:1B:FF:3F:F0:8D:32:8E:88:E6:26:8E:5C:3E:F6
            X509v3 Authority Key Identifier:
                keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ac:15:9c:7e:70:1b:56:85:73:de:09:aa:47:69:4f:9b:a7:
         ae:d6:69:15:90:ea:d2:76:0f:7d:6c:5d:5b:22:97:6e:09:e8:
         fb:3a:27:9c:5c:f2:8c:50:80:e2:9b:83:64:fb:0b:4a:ce:86:
         e7:a6:cf:63:e7:7e:82:fd:fb:f6:84:6b:ba:6b:eb:90:b7:8e:
         99:cd:f1:0e:2e:37:9f:a1:43:96:17:43:8a:cc:14:d3:d9:84:
         82:48:3b:21:d0:f9:b7:4b:76:0e:2c:6d:4b:30:3a:5b:b1:81:
         18:83:b4:d6:fa:59:5c:18:e6:93:24:82:00:fe:40:52:4f:ab:
         50:e0:7f:b8:57:4c:6c:30:7f:41:2c:82:4a:90:5c:9f:fb:09:
         9d:7b:d0:91:c3:b5:f1:a8:49:dc:39:fb:b1:aa:fb:c8:79:fd:
         e2:dc:8c:e9:5e:78:70:be:80:26:f0:18:fa:07:5e:83:9a:0f:
         8c:35:d3:37:8d:fc:ef:a0:6f:e0:55:a8:e8:9d:45:08:7e:b4:
         b1:12:24:70:17:1b:65:92:ff:10:3a:73:d7:3c:94:30:b1:5d:
         77:b9:74:77:1d:11:d5:de:18:03:d1:c4:b9:71:59:f5:23:36:
         4f:50:eb:3c:47:dd:48:5b:7d:65:16:28:f8:a9:a7:4d:10:a8:
         26:94:63:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:33:13 2025 by rpki-client