This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          kz3OGWJ6QTOG6pqCbe6d0f3S/dUWTM6dOfDWnvL8JxA=
Subject key identifier:   DA:EA:22:1A:BA:23:E8:35:C2:52:C4:15:5D:35:0B:46:57:4D:80:7F
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       152F98A39FEEA8DEC519907B21ACDA3A18803117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          0853
Signing time:             Thu 18 Dec 2025 23:06:08 +0000
Manifest this update:     Thu 18 Dec 2025 23:01:08 +0000
Manifest next update:     Sat 20 Dec 2025 01:57:08 +0000
Files and hashes:         1: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: ROLotyZJmXHT8gilwrXMHZ+w0Qy3NLbJ+HrBnPlDx3c=)
                          2: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=)
                          3: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=)
                          4: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=)
                          5: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=)
                          6: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=)
                          7: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=)
                          8: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=)
                          9: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=)
                          10: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=)
                          11: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 01:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2f:98:a3:9f:ee:a8:de:c5:19:90:7b:21:ac:da:3a:18:80:31:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Dec 18 23:01:08 2025 GMT
            Not After : Dec 20 01:57:08 2025 GMT
        Subject: CN=DAEA221ABA23E835C252C4155D350B46574D807F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a7:21:02:3f:26:b9:17:e2:dc:76:70:79:4a:
                    2a:9f:c9:e1:31:23:9b:b3:73:d3:8b:b9:1f:e1:82:
                    18:b2:15:07:de:eb:a0:05:60:4d:bc:f7:81:70:5d:
                    9c:da:c8:83:3c:37:ea:59:23:24:f6:80:ed:2f:5b:
                    14:e2:57:44:35:e3:c2:23:ed:40:be:a7:80:f2:de:
                    28:9e:9e:cd:de:34:8e:5e:8a:47:a0:3e:b5:6b:4f:
                    5f:ed:48:f2:0c:51:f4:de:f3:bd:17:bb:71:03:77:
                    83:29:45:00:51:d1:36:f7:0e:c8:8a:84:c4:f3:1d:
                    94:3c:a0:03:62:ec:81:15:d5:33:f0:d1:78:50:b8:
                    c2:26:79:b6:5b:14:bd:41:a8:c4:67:e0:4c:1e:75:
                    46:c3:68:44:9f:41:49:56:4e:d0:78:53:18:e5:3d:
                    20:f0:11:b2:aa:8a:90:c1:08:1e:66:b5:2c:80:ed:
                    f1:d6:98:0b:b8:cb:0c:63:a4:8d:7f:84:a2:4d:f3:
                    a4:48:d6:ec:d5:72:3b:5f:22:d6:5f:44:f3:3e:10:
                    c6:b9:13:74:72:2e:75:a3:b7:59:ce:0f:25:1e:d5:
                    23:4e:a8:6f:7b:fc:0a:44:22:1f:f5:3c:56:45:58:
                    a1:a0:38:33:25:49:e1:a8:42:1a:36:aa:f1:e5:59:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EA:22:1A:BA:23:E8:35:C2:52:C4:15:5D:35:0B:46:57:4D:80:7F
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:42:76:97:6b:d6:88:8b:e5:a2:a0:23:8e:f8:1b:4f:94:82:
         b4:e0:f4:80:52:e6:c8:4e:ca:44:b6:99:45:a4:85:ce:8d:ab:
         7b:6f:8c:7a:f0:4e:27:cc:59:ca:ab:f2:93:c6:84:fd:a1:89:
         32:59:68:68:43:c6:61:b5:cb:1a:50:5a:e5:64:2f:fe:fb:31:
         6a:ff:29:0b:e4:c6:3f:e3:77:1a:d5:a9:c6:55:36:1b:d3:a7:
         71:75:ea:dd:3e:5d:19:06:1f:ca:bb:3c:e9:b3:d1:bc:33:96:
         22:94:97:95:b7:ee:a6:0c:88:b3:af:ef:8e:b7:82:de:bd:5a:
         32:ad:91:45:fb:bd:bb:47:a2:a5:d5:7f:74:34:b4:bf:2a:eb:
         52:bc:b7:7b:16:8b:7f:c9:a2:f4:51:44:18:33:a9:9f:57:1a:
         74:f5:14:6f:4a:a9:d4:3d:52:cd:23:50:0f:e6:da:b3:5b:aa:
         e2:6d:67:2e:4e:78:48:96:6d:a6:f0:14:5d:63:0a:e4:8c:19:
         41:19:0a:c7:8c:9a:26:45:59:64:7b:c6:1a:5c:6c:ca:1d:69:
         de:61:3f:d6:70:e1:f9:c4:74:3c:4c:ba:b7:73:f6:79:ee:01:
         e5:14:79:cb:52:26:1c:94:73:9d:65:14:83:de:36:33:8e:af:
         c4:a3:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:08:39 2025 by rpki-client