This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
File:                     a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json)
Hash identifier:          zLn4IFWmhtSmW49oERFylcS5LiZ2wA8Dvx4tmFn4EHE=
Subject key identifier:   94:D1:2C:B9:F3:B9:19:70:76:06:79:62:C4:FE:0E:84:29:C8:B2:4D
Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
Certificate issuer:       /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Certificate serial:       01E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
Manifest number:          01E0
Signing time:             Tue 23 Dec 2025 01:43:10 +0000
Manifest this update:     Tue 23 Dec 2025 01:43:09 +0000
Manifest next update:     Tue 30 Dec 2025 01:43:09 +0000
Files and hashes:         1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: x+xuUd+GI0tZL87niSsXPi+kMuaA3hgtLqBxsvICv6c=)
                          2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: RyO6brDZcon28lskHekrQI6icOmLyy8RHSVJF6PV6RM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
                          rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
        Validity
            Not Before: Dec 23 01:43:09 2025 GMT
            Not After : Dec 30 01:43:09 2025 GMT
        Subject: CN=6949f3ae-108f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:38:a7:a8:e1:07:78:49:3d:8e:e1:07:6f:
                    90:e2:7b:d6:31:a5:f4:68:46:ac:4a:f6:c3:08:da:
                    73:69:29:f3:48:93:1f:ac:26:45:12:9e:38:b3:6e:
                    46:96:49:30:b4:c9:38:eb:ec:6b:6e:78:74:a4:31:
                    42:ae:b0:5c:bd:3d:32:db:e4:9a:2b:a5:f9:d6:96:
                    7a:1e:99:0e:bd:ec:2c:9d:ed:ce:e1:b8:a1:80:50:
                    71:45:c7:d5:f2:08:da:9f:1c:37:c0:de:18:82:a1:
                    7e:c6:fc:3f:8a:e8:ae:06:16:ac:b0:a7:42:9b:88:
                    d2:e9:ca:a5:3a:7c:68:b7:c8:04:00:c2:1c:4d:fd:
                    68:e3:68:c0:80:68:ad:b5:6a:9b:18:3d:1a:7d:86:
                    67:54:7f:d6:63:04:34:a7:bc:70:5b:ec:66:ac:c3:
                    0a:13:8b:57:b9:fb:4f:24:c0:12:80:e1:f7:fa:c9:
                    f1:94:c1:a7:d2:5b:2c:d0:65:41:82:34:aa:1c:a9:
                    d9:cd:b6:55:0e:d0:6d:e4:50:fe:d8:61:e7:65:b6:
                    26:c7:ab:1b:28:76:a7:80:bd:e4:b0:02:a8:65:8c:
                    9a:28:49:4e:79:0e:dd:8c:96:60:06:99:2b:12:a4:
                    0d:8b:c2:cb:6c:de:24:81:aa:28:3f:26:96:5e:3d:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D1:2C:B9:F3:B9:19:70:76:06:79:62:C4:FE:0E:84:29:C8:B2:4D
            X509v3 Authority Key Identifier:
                keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c2:4d:36:5f:09:36:fa:17:4f:a5:8f:a5:06:ec:24:d2:c5:
         24:63:36:ea:fb:f0:50:52:d3:14:48:b2:77:6d:33:f8:5c:29:
         e5:25:19:b3:7b:f6:18:a2:ec:94:e0:b6:b8:13:d4:c7:be:52:
         fa:4a:73:6d:4d:cc:f4:c5:5a:57:1d:e0:27:72:36:93:52:34:
         a9:fd:92:17:e3:75:cc:29:49:8e:7e:b0:47:c4:22:e5:3a:c0:
         1b:a6:b2:2b:61:62:c3:4b:fd:97:a1:4a:d5:a8:1b:bd:0a:99:
         63:37:ce:6a:d8:e6:06:ed:2f:a8:98:4c:f3:03:01:f3:81:e9:
         dd:65:17:61:e5:e0:d0:a9:15:ec:2a:12:d2:1d:27:9e:c9:84:
         dd:b4:10:f9:54:77:e2:78:ea:7c:3f:a3:48:74:45:0f:26:c4:
         c0:5e:29:0f:2f:37:61:77:8f:24:2f:a9:29:ca:6d:ab:a7:ab:
         e9:0a:c9:04:ba:fb:e3:19:b0:bf:2f:78:15:5f:59:9a:42:ed:
         c4:50:a1:6f:dc:de:98:88:82:0e:93:a3:0a:7d:33:a0:62:fd:
         b5:77:22:16:69:80:c3:5d:ce:01:ac:9a:fb:44:43:5f:b3:89:
         27:bb:06:76:09:6f:88:ba:82:0c:00:31:4f:b0:f7:87:48:70:
         df:88:d9:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFGNzkxMTAvBgNVBAUTKDZCRDhDMEExMTUwMEIzQ0EwRkVDNEE5RkQzNDBDMzEy
MDU5NUIwQzcwHhcNMjUxMjIzMDE0MzA5WhcNMjUxMjMwMDE0MzA5WjAYMRYwFAYD
VQQDDA02OTQ5ZjNhZS0xMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsh04p6jhB3hJPY7hB2+Q4nvWMaX0aEasSvbDCNpzaSnzSJMfrCZFEp44s25G
lkkwtMk46+xrbnh0pDFCrrBcvT0y2+SaK6X51pZ6HpkOvewsne3O4bihgFBxRcfV
8gjanxw3wN4YgqF+xvw/iuiuBhassKdCm4jS6cqlOnxot8gEAMIcTf1o42jAgGit
tWqbGD0afYZnVH/WYwQ0p7xwW+xmrMMKE4tXuftPJMASgOH3+snxlMGn0lss0GVB
gjSqHKnZzbZVDtBt5FD+2GHnZbYmx6sbKHangL3ksAKoZYyaKElOeQ7djJZgBpkr
EqQNi8LLbN4kgaooPyaWXj1TdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTRLLnz
uRlwdgZ5YsT+DoQpyLJNMB8GA1UdIwQYMBaAFGvYwKEVALPKD+xKn9NAwxIFlbDH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUY3OS9EMEY4NkQ3MkZF
MDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4b1A3RXFmMDBEREVnV1Zz
TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E5akFvUlVBczhvUDdFcWYwMERERWdXVnNNYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUY3OS9EMEY4NkQ3MkZFMDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4
b1A3RXFmMDBEREVnV1ZzTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAawk02Xwk2+hdPpY+lBuwk0sUkYzbq+/BQUtMUSLJ3bTP4XCnlJRmz
e/YYouyU4La4E9THvlL6SnNtTcz0xVpXHeAncjaTUjSp/ZIX43XMKUmOfrBHxCLl
OsAbprIrYWLDS/2XoUrVqBu9CpljN85q2OYG7S+omEzzAwHzgendZRdh5eDQqRXs
KhLSHSeeyYTdtBD5VHfieOp8P6NIdEUPJsTAXikPLzdhd48kL6kpym2rp6vpCskE
uvvjGbC/L3gVX1maQu3EUKFv3N6YiIIOk6MKfTOgYv21dyIWaYDDXc4BrJr7RENf
s4knuwZ2CW+IuoIMADFPsPeHSHDfiNll
-----END CERTIFICATE-----
Generated at Tue Dec 23 14:39:47 2025 by rpki-client