This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
File:                     mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json)
Hash identifier:          gpeQ2Y9YVJWR77eTo6GplFeoaqjLt99mlcpUkoo8sog=
Subject key identifier:   26:96:AC:E9:4E:F3:33:D8:4C:E1:8A:A8:E8:6B:7B:C9:7D:DC:96:11
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Certificate issuer:       /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial:       031D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
Manifest number:          0318
Signing time:             Fri 19 Dec 2025 00:21:03 +0000
Manifest this update:     Fri 19 Dec 2025 00:21:03 +0000
Manifest next update:     Fri 26 Dec 2025 00:21:03 +0000
Files and hashes:         1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: 5H/SL8Jk2yb1jc1Z1gM1vgQ53sy5DoCJukccmUePhVg=)
                          2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: caDwJbItaMkMbYRFf35kercOFxduC/QaXG95XjbXJ4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
                          rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797 (0x31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
        Validity
            Not Before: Dec 19 00:21:03 2025 GMT
            Not After : Dec 26 00:21:03 2025 GMT
        Subject: CN=69449a6f-36b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cc:5d:36:3c:70:1f:57:39:1e:6d:06:ab:08:
                    e0:74:dc:92:ce:24:3a:4b:40:a4:c0:39:c8:1e:ff:
                    0d:80:1a:ee:66:02:2f:60:8e:20:26:b2:ff:5e:b0:
                    b0:14:66:07:2c:df:01:c4:fa:22:4a:56:3f:e0:fe:
                    ea:90:ff:b0:49:1e:02:b3:d3:8a:4f:23:d4:67:ff:
                    ac:c1:00:99:d6:11:ae:02:5c:9e:19:b5:58:a5:c1:
                    a9:74:39:3d:dd:53:e3:c4:a6:bc:ec:ac:44:90:fa:
                    4b:0c:2e:24:67:06:e5:d2:0d:f5:76:a8:e4:d6:bc:
                    90:78:e1:53:b4:a1:28:0d:e0:d4:01:fe:f9:e6:dd:
                    d2:7f:61:75:a4:48:f3:3c:35:d8:f8:16:5c:be:47:
                    2b:04:34:05:1f:27:14:23:91:cd:b9:00:bc:75:b9:
                    76:aa:54:ca:57:cb:93:8b:1e:9e:10:0d:cc:7d:28:
                    db:4a:20:cb:af:96:da:f0:4b:ae:43:5d:9e:49:02:
                    05:b9:83:c0:a2:10:de:08:1e:50:ec:99:b7:d7:2b:
                    6f:9a:95:fd:06:30:2e:39:82:74:ba:fe:c5:19:28:
                    db:f7:da:ee:99:98:34:5d:f8:94:49:6e:1c:3f:19:
                    83:0e:14:e9:6d:2f:45:b9:c0:53:02:44:c0:f1:48:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:96:AC:E9:4E:F3:33:D8:4C:E1:8A:A8:E8:6B:7B:C9:7D:DC:96:11
            X509v3 Authority Key Identifier:
                keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:f5:63:5b:18:a0:2f:65:76:ae:6d:0c:91:fd:45:23:24:
         59:66:84:01:24:21:d4:12:d9:12:18:d2:89:97:f9:5e:61:21:
         20:97:ca:d5:78:90:a1:1b:85:2c:a6:00:31:d5:5d:ec:a0:0e:
         96:1f:ab:64:61:59:87:9e:69:68:cf:e9:7e:01:f1:4c:84:ed:
         cc:60:2f:da:63:2a:48:33:26:da:62:f1:3c:70:7e:88:88:a2:
         c9:d3:09:ca:80:e9:dd:6e:d3:02:c9:d1:c8:d8:91:cf:18:1f:
         08:3b:dd:4a:9c:e0:c0:75:54:ce:fe:8a:15:61:75:6a:91:16:
         24:c6:cc:10:2e:ad:61:38:31:03:39:04:86:7a:9f:33:e8:2a:
         54:e2:15:79:d3:53:84:84:1d:8e:ad:42:53:0f:31:62:63:41:
         12:9b:e0:fa:95:08:14:0d:ea:81:9e:fd:74:5f:cc:de:ea:56:
         2f:15:7c:94:4e:ce:4a:12:a9:10:b2:31:2d:37:10:1b:70:24:
         7f:b3:45:99:ca:dd:7d:3c:39:d4:be:cd:25:ae:7a:b2:3b:eb:
         68:22:f3:ec:2f:04:d7:0d:34:4c:2e:de:f9:79:85:0a:c5:59:
         ca:22:4d:65:6f:00:3b:3f:b5:a7:da:b3:6c:a4:20:22:42:c0:
         fc:7f:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:32 2025 by rpki-client