This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
File:                     xv9_8XAyqWoLIW8LwszDXwIgwnI.mft (raw, json)
Hash identifier:          FA/xOtgGCh0z4OmSeTtZtui025lTN/sSqnO1AK1E9kk=
Subject key identifier:   24:CF:1D:51:CD:C6:0E:8C:5D:0C:C6:6E:15:35:75:AE:C3:82:0B:34
Authority key identifier: C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
Certificate issuer:       /CN=A91B7929/serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
Manifest number:          0E
Signing time:             Tue 23 Dec 2025 06:51:50 +0000
Manifest this update:     Tue 23 Dec 2025 06:51:49 +0000
Manifest next update:     Tue 30 Dec 2025 06:51:49 +0000
Files and hashes:         1: xv9_8XAyqWoLIW8LwszDXwIgwnI.crl (hash: ZTEnUo9iSAcdhbUfF9/GXFHOjU+PRvSBraoC5cxugQg=)
                          2: 8709BBD4DB2011F0B6C890B887D3641D.roa (hash: 2W5ZVPIw3ewF45gJcZZK6fFAiCn6TPFyHTrg1IlJBvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7929, serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
        Validity
            Not Before: Dec 23 06:51:49 2025 GMT
            Not After : Dec 30 06:51:49 2025 GMT
        Subject: CN=694a3c06-0d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:b4:ae:07:75:c0:75:a1:ef:2c:b1:57:0c:
                    67:fc:56:99:a5:f1:eb:55:4d:f5:31:97:d7:68:60:
                    df:d2:d5:68:dd:55:b4:d6:52:5a:6b:f5:bf:52:cf:
                    ba:a5:c4:15:e9:b2:cd:ad:6b:ae:1f:19:cb:a6:00:
                    c9:79:02:35:19:ab:53:0a:91:cb:ba:b9:90:68:42:
                    44:ac:1a:a9:67:08:46:4e:f3:0d:f6:5e:22:c5:e1:
                    c0:c2:3a:7a:1d:56:c7:95:be:d7:7d:f9:3c:bb:18:
                    3e:d4:fa:93:c4:78:4f:25:5c:d2:fa:55:48:32:15:
                    5e:4e:88:79:29:46:a5:7f:26:50:d6:66:97:0c:08:
                    d2:52:f9:59:94:a4:d3:4c:af:e1:d8:db:55:33:e8:
                    96:f6:bb:a7:36:1d:59:1a:55:7c:31:42:6c:11:1f:
                    01:b7:00:a9:56:e8:57:2c:ff:25:02:fe:1c:ab:3f:
                    05:d9:d0:5d:ee:43:ac:fc:88:5d:96:11:5d:54:d7:
                    a9:6d:67:1e:6c:5e:34:45:45:5c:b1:40:68:61:5c:
                    d1:a8:70:a9:17:8a:55:2b:36:fe:a7:70:42:31:38:
                    28:77:66:34:6c:aa:42:10:1a:f6:1f:19:0f:0e:e3:
                    36:31:38:a3:2d:74:15:e1:71:0b:c4:9e:db:2b:b9:
                    d7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CF:1D:51:CD:C6:0E:8C:5D:0C:C6:6E:15:35:75:AE:C3:82:0B:34
            X509v3 Authority Key Identifier:
                keyid:C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:85:b8:a9:95:53:18:06:c1:6f:d0:5f:66:eb:cf:88:eb:
         8c:87:7e:8e:5d:1e:be:18:a0:d7:6e:47:27:98:42:79:da:84:
         07:5e:91:4f:1f:e2:a1:35:f8:b8:2b:60:8b:67:6a:e8:ac:ad:
         45:6d:f1:bb:7a:63:44:34:93:49:55:fc:20:37:fb:d1:ee:65:
         14:0b:99:e9:4f:84:75:f5:1c:d3:c3:22:b4:93:11:dc:74:43:
         f5:18:0b:4d:ee:2f:c7:67:51:4d:39:00:c5:0a:b8:82:9f:14:
         ee:f0:26:ff:cd:6c:45:06:c3:ac:a1:2c:0c:22:15:d1:b6:c3:
         85:73:7e:4b:d0:f6:36:77:4e:ea:dc:a7:6e:6c:14:8e:e4:3c:
         35:41:b5:96:16:03:4f:90:55:05:c6:0c:4d:cc:8a:b3:5f:de:
         15:dd:f4:2d:a4:0d:a9:39:7a:2d:3c:f8:b4:98:d6:df:a1:d5:
         a8:75:76:58:23:d3:67:95:a4:ab:21:1e:30:cb:53:ca:4b:72:
         84:04:aa:9f:ab:77:8b:14:76:7e:9d:b5:2c:be:34:fb:34:3f:
         77:41:b2:fc:59:d5:83:71:8b:49:7d:74:f1:97:92:44:d2:6e:
         b9:a5:9f:03:2d:f2:3b:e8:04:a0:00:60:f4:51:6c:56:bb:4e:
         ce:d8:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:04:59 2025 by rpki-client