This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
File:                     e9TVxajvXN_HTFmgk2RZTl75-uc.mft (raw, json)
Hash identifier:          UM1OzAmhbNmP1EHDIGS5F1uqlg9jqRO2W3nqyZDFZdU=
Subject key identifier:   BD:7A:65:11:D4:1C:3A:BA:14:D8:22:EF:DA:91:2D:6F:C3:AA:4A:DA
Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7
Certificate issuer:       /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
Manifest number:          0C99
Signing time:             Mon 22 Dec 2025 18:26:15 +0000
Manifest this update:     Mon 22 Dec 2025 18:26:14 +0000
Manifest next update:     Mon 29 Dec 2025 18:26:14 +0000
Files and hashes:         1: e9TVxajvXN_HTFmgk2RZTl75-uc.crl (hash: jc3QwmsTBtR03y7DtEtoTgTEsRHrOjDOQ07GFz+03hw=)
                          2: CF834404B27511EFA614D07EC4F9AE02.roa (hash: teLLfJcXs/WVE6HHR1PJI4gLt00YbMNATiTLdmWgtzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
        Validity
            Not Before: Dec 22 18:26:14 2025 GMT
            Not After : Dec 29 18:26:14 2025 GMT
        Subject: CN=69498d47-2401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:52:10:89:11:b4:d5:c2:16:bd:97:9e:d0:
                    da:8d:9f:c4:cc:a3:87:35:aa:79:6b:5f:1d:9e:48:
                    c9:2f:b8:9e:30:f5:56:27:b7:56:89:84:f1:6b:9f:
                    24:0b:b7:d0:f6:1f:4b:de:a8:33:43:d5:56:9c:d8:
                    97:d5:82:9e:96:58:eb:3a:1c:2d:7b:c4:a6:df:41:
                    b2:1f:14:8e:09:f0:7d:60:a8:a4:a7:22:cb:69:65:
                    b8:ea:c9:70:e3:e2:4f:f9:bf:49:19:5e:61:69:24:
                    eb:d6:db:9c:e7:0f:94:42:f9:87:5d:a3:bf:49:84:
                    ce:03:3f:56:52:d0:9e:15:3e:3d:6e:8c:43:fe:04:
                    10:46:34:ce:6c:be:0f:0b:4e:11:84:60:0d:4d:07:
                    34:3d:c3:fa:1a:17:9c:25:18:e1:41:c7:48:ed:77:
                    21:a7:56:88:d1:e5:44:1c:8e:65:d3:1f:b6:98:71:
                    9c:48:10:4a:23:ca:f3:e7:84:06:ce:ce:60:2f:eb:
                    5f:1f:11:c4:76:d8:fd:7a:62:14:e0:80:11:c4:3f:
                    b3:92:e9:34:f3:b6:c8:5a:43:f9:d7:2b:66:80:c8:
                    8d:c4:8f:65:74:71:85:12:49:9a:b4:33:07:f2:1f:
                    52:31:f4:de:c0:3e:e5:0f:d4:6a:e4:51:d3:02:7a:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7A:65:11:D4:1C:3A:BA:14:D8:22:EF:DA:91:2D:6F:C3:AA:4A:DA
            X509v3 Authority Key Identifier:
                keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c1:b8:85:50:b1:88:98:e2:40:ee:62:13:39:5c:c0:63:ee:
         9a:fe:62:a7:84:96:49:92:e6:cb:ad:85:a4:0a:3c:c2:22:54:
         d2:eb:ca:44:52:ec:f6:31:c5:58:fa:19:7a:15:40:af:61:ce:
         de:cf:6c:ec:5a:69:2f:b2:c7:7f:0d:7a:03:3f:b4:8a:f9:e1:
         d9:01:3d:79:dc:6d:9a:98:87:a0:b9:9e:75:d1:fa:cb:cd:17:
         ef:33:84:e8:78:56:b7:1c:1a:1c:1b:11:a2:e3:3b:2f:5b:44:
         02:be:a7:ee:d3:30:36:bf:8f:4e:66:94:df:f2:4d:75:17:fd:
         d4:0c:61:ee:68:79:a0:b9:ad:92:cf:30:12:eb:e9:10:89:8f:
         9d:a2:53:ca:4b:ff:40:ec:eb:fc:7d:22:99:c3:6d:f4:ed:d3:
         29:99:5b:77:ee:0b:8e:3c:e0:af:60:89:20:f2:bb:81:8b:5e:
         c6:21:2a:c1:c1:66:bd:7c:05:b7:8c:48:36:81:3d:c7:e9:26:
         7f:db:20:7f:98:f8:27:32:05:3d:a1:4a:3e:0f:e2:a1:13:11:
         a6:44:38:09:06:24:46:5f:70:ec:a8:2c:b6:15:e9:97:d3:19:
         95:91:fa:10:7b:3d:40:59:05:9e:eb:1f:d9:f5:0d:08:29:aa:
         6a:88:50:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:17 2025 by rpki-client