This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
File:                     444NefP9KSMew_PjAp05P0MnfLM.mft (raw, json)
Hash identifier:          HAzsqe2NXiv4tsf+SXY3LtH6H1kAyMKjbuLWZt8d0EU=
Subject key identifier:   FD:B4:F1:1A:32:26:47:C1:95:DC:83:22:27:33:90:3D:20:55:A7:C7
Authority key identifier: E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3
Certificate issuer:       /CN=A9128298/serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3
Certificate serial:       064D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
Manifest number:          064A
Signing time:             Thu 18 Dec 2025 22:01:13 +0000
Manifest this update:     Thu 18 Dec 2025 22:01:12 +0000
Manifest next update:     Thu 25 Dec 2025 22:01:12 +0000
Files and hashes:         1: 444NefP9KSMew_PjAp05P0MnfLM.crl (hash: AADdgya7hMjzY7Yrn8Sj+/glinijTSdLixDKxhdkEvY=)
                          2: 832F7D72B20E11EBB73B4E2FC4F9AE02.roa (hash: RWzQvPuAa0dvfgKQkKzubYejP/LcFU0xMaFFgk+jNhQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl
                          rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613 (0x64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128298, serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3
        Validity
            Not Before: Dec 18 22:01:12 2025 GMT
            Not After : Dec 25 22:01:12 2025 GMT
        Subject: CN=694479a9-28c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:23:75:c7:4c:c2:92:49:ec:20:80:d3:74:
                    15:47:ee:43:59:00:a2:ba:7f:15:2b:5c:d6:aa:50:
                    a0:5c:de:fc:11:23:a8:74:86:fb:11:de:a4:1f:19:
                    7f:46:27:95:91:2a:5b:58:db:c9:d5:d6:d5:e9:25:
                    43:80:4c:24:5b:fb:15:65:54:d9:11:90:4f:f7:85:
                    92:27:d7:81:75:7a:5c:57:2c:5b:fc:02:d3:84:59:
                    bd:07:45:72:06:ea:ea:e4:0e:0d:0f:64:29:3d:05:
                    94:51:cc:bd:1a:55:ff:62:1e:c4:40:fe:79:50:8c:
                    0d:3b:04:ea:bd:df:b1:91:c6:0f:4c:c0:37:21:b5:
                    86:2b:17:d9:2b:75:cc:16:31:c9:70:cf:e1:99:d9:
                    fb:71:12:84:46:6c:9b:b9:71:39:56:6d:27:2c:67:
                    56:d7:2d:5c:d4:0c:a5:5f:5c:ed:0d:39:d5:25:6c:
                    20:a4:69:b8:f6:45:c5:05:9b:5e:3f:6f:e2:06:88:
                    54:d4:4d:69:1b:b6:d4:18:89:1b:ac:16:45:05:c9:
                    a5:bb:e3:15:22:ca:ae:bb:ed:29:74:4a:6b:09:98:
                    61:37:93:f5:6d:34:44:8e:33:22:f2:5a:17:31:91:
                    a3:40:1e:71:1e:7f:60:0b:82:fc:a6:55:4a:3a:29:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B4:F1:1A:32:26:47:C1:95:DC:83:22:27:33:90:3D:20:55:A7:C7
            X509v3 Authority Key Identifier:
                keyid:E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:60:53:bc:2a:3e:32:fe:50:3f:93:4a:16:f5:43:1f:8c:a4:
         55:76:98:2c:98:d6:f2:1c:f3:77:05:13:bd:24:d7:7c:17:64:
         4a:4f:75:49:09:17:de:7d:67:18:cc:e2:a9:37:05:8e:b4:4e:
         c2:42:55:0a:d1:51:99:99:8c:80:62:bb:52:82:20:e7:4e:05:
         d8:10:ac:a8:2c:b2:9e:c7:86:32:55:6b:d8:a3:97:74:fb:13:
         ab:ca:f1:e5:ed:d9:d1:14:af:a6:b8:99:ec:63:29:6e:a7:c5:
         6b:d2:fe:dc:a5:8c:22:30:5d:2f:13:66:15:12:0a:66:48:1b:
         c0:bd:2b:d2:71:4f:85:8d:00:eb:84:be:3b:70:fd:d3:2a:e1:
         06:f3:c2:9c:6a:02:ad:52:13:de:36:19:78:1f:48:8e:a9:66:
         d1:72:0f:b2:a4:92:e5:ee:f6:f7:3d:b5:7a:6b:21:b6:07:4f:
         fd:23:96:29:92:9d:02:78:62:30:65:10:1c:87:94:35:ec:ee:
         f9:67:25:ae:7b:6d:f0:be:5d:fd:b4:a5:db:69:65:36:4d:da:
         24:a4:46:2a:45:63:ca:95:89:13:89:c1:e1:ed:22:f5:58:5f:
         70:b7:3e:ff:d5:d9:1c:2d:5e:2e:b1:4d:27:e9:f5:d3:4f:e1:
         84:e8:05:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:48:42 2025 by rpki-client