This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
File:                     9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft (raw, json)
Hash identifier:          yOJ9e0oYEiJztFsr9QonBJkYnnni5ZO84TH7qWLAb2Q=
Subject key identifier:   1B:7B:CF:0F:2C:19:50:E9:EB:E4:C0:D5:75:C4:04:47:78:8A:EF:A9
Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B
Certificate issuer:       /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
Manifest number:          013F
Signing time:             Fri 19 Dec 2025 03:34:57 +0000
Manifest this update:     Fri 19 Dec 2025 03:34:56 +0000
Manifest next update:     Fri 26 Dec 2025 03:34:56 +0000
Files and hashes:         1: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl (hash: +tkAwBrpBI2iGJmgE8R08dLYEYW6O5F2W9Ao8eGPRXg=)
                          2: 9D50BCA4F64211EE9114A555C4F9AE02.roa (hash: 5CJbD7pKl6AqdADQ2DaLJ20RlS7MYpOoT15StrcsKuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl
                          rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911073A, serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B
        Validity
            Not Before: Dec 19 03:34:56 2025 GMT
            Not After : Dec 26 03:34:56 2025 GMT
        Subject: CN=6944c7e1-0514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:a9:73:99:a3:d8:8a:78:7a:fc:cf:43:d7:
                    29:8f:34:97:37:42:91:42:9f:34:d1:72:d8:db:5b:
                    08:2f:b4:b7:26:95:74:3e:db:d3:c3:61:95:99:c4:
                    9e:0f:49:12:70:d4:92:12:72:ec:d4:5b:72:02:a6:
                    c1:59:0f:92:c4:6a:ab:93:47:52:3e:f1:b6:7e:0f:
                    16:bb:94:7b:42:44:cd:4d:c5:fd:51:00:a1:f8:c7:
                    d3:b5:cf:ba:71:e4:1f:a3:4b:60:f2:15:53:29:9e:
                    dd:1d:05:ec:8f:15:02:09:f6:57:6a:d5:4f:fe:b9:
                    31:78:63:f1:92:f9:46:76:31:1f:6d:1a:eb:c8:41:
                    ef:10:3f:e4:2c:45:2e:3b:25:de:0f:e4:d7:d5:2c:
                    bb:fd:9f:1f:05:94:8a:8d:71:b0:04:c4:32:76:b7:
                    f5:07:47:56:69:d0:0c:b9:a0:dc:e0:b1:49:2e:cc:
                    59:a7:ff:28:a3:d1:fe:18:92:5e:e5:27:44:5e:a7:
                    af:0b:c0:41:2d:57:59:ad:b6:ca:3c:d3:1e:b3:d3:
                    91:03:29:bb:19:cb:a6:c8:48:ae:6a:10:1c:70:ca:
                    37:80:f1:80:64:79:35:d9:da:c1:0d:16:88:0b:03:
                    5d:b6:f0:c4:ff:7f:b9:0e:db:5c:e8:54:20:0a:ab:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7B:CF:0F:2C:19:50:E9:EB:E4:C0:D5:75:C4:04:47:78:8A:EF:A9
            X509v3 Authority Key Identifier:
                keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:44:e5:f4:d1:33:59:01:69:6d:de:f1:0f:a3:6e:f0:88:51:
         e8:1b:ea:31:ba:1d:08:c7:80:9e:af:96:5d:68:61:a9:3e:39:
         09:bd:42:fd:67:7b:fe:dd:cf:8e:2e:7d:0d:f9:d4:2d:7b:3d:
         7b:cb:be:30:2a:ea:b3:f2:98:69:79:dc:13:55:7a:c5:f7:61:
         09:96:9c:b3:f7:13:29:8e:a2:a6:56:aa:80:82:c0:15:a2:d7:
         b7:3d:77:af:42:80:e5:71:95:91:07:f4:83:0f:79:fd:4f:c6:
         2f:ce:a8:68:69:d8:fb:65:da:c8:9d:1e:7f:bb:e0:ee:ed:6a:
         60:64:c0:10:2e:e0:90:97:91:4a:e7:79:0d:e3:24:90:17:ee:
         c1:24:74:19:a9:77:1d:6a:4d:e1:4b:fe:26:65:ec:03:1b:06:
         6d:59:9b:98:b5:39:cf:a4:71:61:88:69:d7:a1:9c:3d:4d:2f:
         ca:6e:0c:aa:3a:2f:38:c5:c4:aa:d0:85:67:74:20:6b:fa:f0:
         b5:ac:d3:c0:2c:01:b9:85:3c:9f:3f:5b:41:29:11:56:7e:64:
         b3:de:78:29:f7:97:b8:4a:60:3e:ee:37:fa:54:69:c3:d4:d0:
         f2:82:83:f6:3c:1c:d8:c3:a6:9d:32:ff:d4:80:e1:92:d6:ac:
         2e:f3:33:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA3M0ExMTAvBgNVBAUTKEY1NTAyQTREN0QxNEE2QUE2M0U1RkZBQkY5MzZFMTUy
QThERjgwM0IwHhcNMjUxMjE5MDMzNDU2WhcNMjUxMjI2MDMzNDU2WjAYMRYwFAYD
VQQDDA02OTQ0YzdlMS0wNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+qpc5mj2Ip4evzPQ9cpjzSXN0KRQp800XLY21sIL7S3JpV0PtvTw2GVmcSe
D0kScNSSEnLs1FtyAqbBWQ+SxGqrk0dSPvG2fg8Wu5R7QkTNTcX9UQCh+MfTtc+6
ceQfo0tg8hVTKZ7dHQXsjxUCCfZXatVP/rkxeGPxkvlGdjEfbRrryEHvED/kLEUu
OyXeD+TX1Sy7/Z8fBZSKjXGwBMQydrf1B0dWadAMuaDc4LFJLsxZp/8oo9H+GJJe
5SdEXqevC8BBLVdZrbbKPNMes9ORAym7GcumyEiuahAccMo3gPGAZHk12drBDRaI
CwNdtvDE/3+5Dttc6FQgCqulcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBt7zw8s
GVDp6+TA1XXEBEd4iu+pMB8GA1UdIwQYMBaAFPVQKk19FKaqY+X/q/k24VKo34A7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDczQS9FQjRBM0FEQUY2
NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBxcGo1Zi1yLVRiaFVxamZn
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlWQXFUWDBVcHFwajVmLXItVGJoVXFqZmdEcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDczQS9FQjRBM0FEQUY2NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBx
cGo1Zi1yLVRiaFVxamZnRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpROX00TNZAWlt3vEPo27wiFHoG+oxuh0Ix4Cer5ZdaGGpPjkJvUL9
Z3v+3c+OLn0N+dQtez17y74wKuqz8phpedwTVXrF92EJlpyz9xMpjqKmVqqAgsAV
ote3PXevQoDlcZWRB/SDD3n9T8Yvzqhoadj7ZdrInR5/u+Du7WpgZMAQLuCQl5FK
53kN4ySQF+7BJHQZqXcdak3hS/4mZewDGwZtWZuYtTnPpHFhiGnXoZw9TS/Kbgyq
Oi84xcSq0IVndCBr+vC1rNPALAG5hTyfP1tBKRFWfmSz3ngp95e4SmA+7jf6VGnD
1NDygoP2PBzYw6adMv/UgOGS1qwu8zP1
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:29:38 2025 by rpki-client