This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
File:                     9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json)
Hash identifier:          1QyrWu31mfIPgRu3pnG1KBnZtuySYJjr+I0lHorDNm0=
Subject key identifier:   9D:18:8A:B7:B3:9F:45:50:BD:C0:CB:E8:BE:A3:57:FC:6D:54:3A:BE
Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5
Certificate issuer:       /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
Certificate serial:       050B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
Manifest number:          0503
Signing time:             Sat 20 Dec 2025 17:04:23 +0000
Manifest this update:     Sat 20 Dec 2025 17:04:22 +0000
Manifest next update:     Sat 27 Dec 2025 17:04:22 +0000
Files and hashes:         1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: foBzkysJ27UwjQEJKfeLdKhyZ0Ij4bwmB55AWIJowhE=)
                          2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: J2C44o3bulGEWCNj5FeHw89zdl6vfT7xLoQDvxzcXms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291 (0x50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
        Validity
            Not Before: Dec 20 17:04:22 2025 GMT
            Not After : Dec 27 17:04:22 2025 GMT
        Subject: CN=6946d717-09d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:f4:2c:49:ac:a5:43:49:9a:00:92:58:e6:
                    a0:03:d3:b2:2a:02:3e:65:b9:c0:c1:76:59:19:99:
                    50:7a:64:34:25:0f:a7:d1:99:ac:5a:c1:3c:a3:11:
                    ed:64:cb:a2:65:a2:b4:5d:c2:1b:86:37:35:02:ae:
                    4a:27:56:71:f1:7b:3b:9a:6b:80:59:81:06:53:79:
                    54:5c:c0:d9:26:36:da:c6:28:1b:cd:41:ab:4e:80:
                    ef:af:c4:13:b6:b1:3f:01:16:bc:de:ef:24:2b:25:
                    39:3c:99:81:2b:29:71:bc:3c:2e:71:92:85:9d:56:
                    8b:56:0e:8e:8e:39:4a:a0:1f:8e:ec:3a:12:33:50:
                    42:2a:17:b3:9e:f6:8c:83:af:b6:fd:03:22:92:2c:
                    6d:fe:cc:10:d8:bc:cd:57:92:21:83:9b:1d:02:61:
                    72:83:5e:81:ff:6c:c7:4e:a3:00:99:bd:d4:47:a1:
                    c3:cf:88:0d:cd:de:45:a5:b0:38:ee:87:df:41:89:
                    6e:86:1c:6d:02:b4:61:5d:0d:f0:8f:6d:d8:64:81:
                    9b:ab:7c:46:04:d4:d2:99:0f:2a:3c:0c:50:5e:a6:
                    64:b0:fa:f3:1c:39:6b:24:00:92:c9:fa:46:47:47:
                    b0:f7:de:8f:b9:e4:7a:9b:5e:6e:f1:a2:a2:b1:1a:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:18:8A:B7:B3:9F:45:50:BD:C0:CB:E8:BE:A3:57:FC:6D:54:3A:BE
            X509v3 Authority Key Identifier:
                keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e1:eb:66:76:c9:60:ef:90:43:5b:f1:ee:ba:ba:ad:6b:7f:
         65:db:c4:31:54:fb:23:c6:ed:5a:40:af:f1:47:f2:19:17:16:
         5d:25:94:f2:fa:1b:1c:df:14:8b:81:33:29:29:85:01:44:76:
         e6:37:af:32:fd:64:c6:63:56:f1:f5:51:66:fc:7c:56:01:b8:
         97:ae:9b:b9:cd:fb:b2:b5:31:74:2d:3e:b0:f8:9b:91:b4:e6:
         23:e6:a1:a1:08:4c:fd:13:4d:38:fc:42:d8:65:4c:f4:61:63:
         99:2c:1c:94:ab:d6:3f:15:4c:4e:6c:f2:34:55:65:b7:1d:83:
         60:92:b0:dc:dc:1e:3b:77:fd:3b:db:f8:23:da:55:15:e5:4c:
         43:3f:9d:dd:99:0a:c1:2a:d9:31:b8:f3:8f:cf:8e:69:99:91:
         b9:3e:09:85:75:48:91:ee:db:49:3f:f1:7f:53:a3:99:6e:ae:
         ba:cf:03:df:a5:83:f9:c7:5b:c2:d5:69:98:55:53:a7:d8:9a:
         f6:36:80:9e:45:50:5f:f2:9c:64:15:cc:df:12:9b:d3:39:39:
         30:fa:49:87:24:c7:fc:6f:28:83:d5:1f:1b:e2:64:58:13:92:
         42:66:26:a4:bc:59:86:ef:41:b9:34:8a:a8:5e:4e:34:27:58:
         bd:2f:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:11:47 2025 by rpki-client