This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
File:                     AWZvx92HXf-g4ZvHPLrajs-aWCc.mft (raw, json)
Hash identifier:          DQKyLo+UfTvaF58x4IMmD25VgutjtZY9pOlNEeiFS0E=
Subject key identifier:   93:AC:55:F5:6F:9C:DD:C5:A7:DA:17:92:85:D6:6F:DC:1E:8D:E7:53
Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27
Certificate issuer:       /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
Manifest number:          01E3
Signing time:             Fri 19 Dec 2025 02:05:15 +0000
Manifest this update:     Fri 19 Dec 2025 02:05:15 +0000
Manifest next update:     Fri 26 Dec 2025 02:05:15 +0000
Files and hashes:         1: AWZvx92HXf-g4ZvHPLrajs-aWCc.crl (hash: NqN+vcNQuzckHTCSZPQg/kM1wy/b7sx7RgpSA63Lls8=)
                          2: 37649AB0D6C511EEB512CC7FC4F9AE02.roa (hash: Yf3syhODw0cAx33YmQD7J4oKJN2R4/9xKFbcxAFrzEc=)
                          3: 36E93942D6C511EEB512CC7FC4F9AE02.roa (hash: J/FdYg39XgCJ8nqyyiXOfjFTbprUGYfmqvQJ8jAj03A=)
                          4: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (hash: v8hFecBZJ729gEYkG3Fnm3Jj8x8TqXCpRI+hn3vItOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl
                          rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
        Validity
            Not Before: Dec 19 02:05:15 2025 GMT
            Not After : Dec 26 02:05:15 2025 GMT
        Subject: CN=6944b2db-f83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:39:f2:7d:bd:e9:50:4d:ee:c7:8e:05:a3:8c:
                    f9:f0:72:bc:e5:28:6e:9c:ab:fb:b5:0a:73:a3:fb:
                    5b:49:c1:1e:41:23:96:2f:5f:be:62:d2:d0:6e:69:
                    6a:5a:a0:49:4c:1e:c3:2d:52:9f:dc:b2:e0:d1:4e:
                    12:1b:39:28:50:52:30:ad:a8:c5:b2:7d:65:9e:e2:
                    7b:58:74:24:f3:7e:b5:9e:34:20:cc:75:96:b5:9a:
                    fe:fb:c4:28:a9:23:79:30:4b:44:dd:a2:97:2d:51:
                    11:c6:0c:00:36:e2:b7:ac:d6:b4:07:94:e9:50:24:
                    e5:4d:8c:70:02:f1:2a:9a:62:f5:d0:cb:bb:bb:62:
                    d2:28:80:cd:f0:95:99:c3:e0:0c:65:91:06:5c:12:
                    52:7a:84:75:f0:b2:b4:67:02:b4:e2:c3:0e:85:eb:
                    08:b6:13:a4:59:cc:81:e9:5a:96:83:18:1f:2f:9f:
                    aa:f3:ed:94:7e:31:fa:cc:00:cc:ef:8b:fa:3e:c9:
                    d2:c4:25:80:be:dd:91:f0:63:33:6b:b1:da:77:53:
                    43:8a:1f:a3:7e:ec:21:71:82:e6:5b:a9:b8:a5:17:
                    e3:75:82:ba:f0:f5:ff:e5:d0:26:a2:2f:d9:d3:0d:
                    90:c5:3c:91:1d:c3:ae:6e:7d:84:f1:e0:30:df:74:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AC:55:F5:6F:9C:DD:C5:A7:DA:17:92:85:D6:6F:DC:1E:8D:E7:53
            X509v3 Authority Key Identifier:
                keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:33:af:39:f5:1f:68:97:ba:68:b9:c2:fe:0c:46:b9:bd:f7:
         e6:1b:cd:29:db:42:58:5d:4e:01:21:92:12:0b:0f:3a:0c:80:
         cb:a8:fc:a5:94:25:5c:7a:ad:bc:48:65:78:f0:aa:7e:5e:ca:
         ff:c3:e5:4a:37:26:16:bf:86:58:f3:2e:f6:c9:30:34:b9:8a:
         93:27:fe:cc:07:be:03:a6:e8:f9:d8:fc:72:b1:33:be:ff:62:
         fe:aa:df:e5:82:49:81:d2:a1:5e:7e:6f:b6:d6:e7:99:b6:72:
         5e:bb:31:22:25:1f:7f:d4:ac:5a:8c:f5:d6:e9:93:e4:36:a5:
         e0:93:3a:63:38:ec:3b:4b:01:09:7f:cf:6c:dc:e7:65:bc:3b:
         28:a4:9a:50:99:6f:15:fd:a1:31:48:e3:13:7d:d9:d7:76:7e:
         dc:ae:57:58:b7:95:d2:77:f4:00:b7:62:5a:e9:49:32:d8:61:
         bc:d8:42:4d:e3:e7:26:cc:f2:e2:00:bc:5c:11:a9:4c:bb:cc:
         f6:9e:c3:d5:94:d2:67:40:33:d3:63:43:ce:30:d6:62:b8:7a:
         3f:27:48:a1:03:f3:58:34:68:10:96:d2:e3:a1:81:83:6c:7f:
         20:34:c1:ed:f3:1d:53:7b:d2:8a:68:ff:d9:27:c8:06:56:54:
         a5:ac:1f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:19:21 2025 by rpki-client