This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
File:                     9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft (raw, json)
Hash identifier:          2VKxLtpAN6X3mVW+zhWu46MCcIG31Nf9rugtBztMqRM=
Subject key identifier:   28:8E:09:3B:2C:BD:6F:1D:C0:8E:06:DC:0B:DA:88:39:34:57:8C:FB
Authority key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
Certificate issuer:       /CN=A913CE18/serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
Manifest number:          0F
Signing time:             Fri 19 Dec 2025 06:52:08 +0000
Manifest this update:     Fri 19 Dec 2025 06:52:08 +0000
Manifest next update:     Fri 26 Dec 2025 06:52:08 +0000
Files and hashes:         1: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl (hash: Z+xu0r1+NIvHS7PDCJJLOfnr4Jcry1wNf1Rk1+1pkik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
                          rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
        Validity
            Not Before: Dec 19 06:52:08 2025 GMT
            Not After : Dec 26 06:52:08 2025 GMT
        Subject: CN=6944f618-03d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:92:50:88:90:a7:14:77:65:32:79:30:b1:05:
                    ba:0d:c0:f5:cf:f4:d6:b5:b2:30:91:13:63:d0:50:
                    19:7e:48:b5:b0:9c:62:43:8c:22:32:0b:b5:62:8f:
                    8b:17:bf:9d:13:d3:c2:93:66:95:16:a1:ea:25:ca:
                    02:d5:a1:f6:3c:38:a4:ba:da:1c:70:28:2e:3c:7f:
                    d4:6c:74:a1:5a:a4:0b:2a:02:b6:75:d0:d2:48:45:
                    e0:7a:39:95:96:33:ff:70:e9:78:2b:87:52:fd:10:
                    45:bb:54:c8:f2:f3:23:da:6a:5a:45:69:9d:d4:48:
                    ee:0d:1d:d2:b0:c0:b4:bc:f2:15:81:43:f4:0f:51:
                    87:11:a7:ab:0c:15:1e:4f:11:4d:a5:a7:18:ba:fc:
                    e5:76:66:ea:46:e5:63:1a:90:89:a6:ce:63:2c:ac:
                    95:4f:d7:91:f0:12:ae:2e:96:02:f3:7b:ba:02:b7:
                    5d:20:da:a2:32:08:53:69:97:38:f9:1f:fb:cb:4f:
                    e7:89:ad:23:ef:3e:6e:71:fb:23:8d:f8:6a:69:ed:
                    ed:20:a2:a9:eb:83:68:68:8b:39:58:2a:1a:53:18:
                    6b:fb:2f:9d:b8:45:4d:32:62:a1:e9:57:d4:3a:ad:
                    64:e7:1d:bd:7d:46:86:f2:35:21:c6:48:de:cb:ba:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8E:09:3B:2C:BD:6F:1D:C0:8E:06:DC:0B:DA:88:39:34:57:8C:FB
            X509v3 Authority Key Identifier:
                keyid:F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:cd:4c:1a:e7:00:68:8a:4e:a3:e5:d2:8d:4d:67:c4:81:
         22:01:01:d7:c4:38:51:c6:a3:51:80:19:be:30:82:2b:ab:8a:
         de:47:67:58:73:b3:4f:2a:4b:61:50:76:fe:10:30:c5:ad:b4:
         fb:75:b9:18:a7:aa:a7:02:f5:15:61:ea:6a:2c:df:64:ad:2e:
         8f:95:4a:0d:90:f5:b3:d2:8a:d3:40:d6:35:a5:d4:13:91:f1:
         10:57:da:73:ad:c8:93:c5:3e:36:a0:c3:9c:07:42:99:b0:37:
         3b:9e:c8:d4:2b:b6:68:d9:87:88:62:8f:bf:05:77:6f:c4:53:
         27:4b:86:02:29:09:61:e6:2a:30:b6:63:20:60:d6:2a:09:1f:
         82:93:59:19:03:7a:51:23:e3:76:94:87:1c:6c:7b:bb:bc:92:
         94:80:2e:13:b5:0c:aa:15:14:22:a5:df:4b:cd:85:72:e7:49:
         6f:48:87:69:a1:b0:71:bf:fb:df:31:e1:ac:82:24:32:4b:91:
         a2:13:20:18:80:14:3f:1c:42:77:03:2e:6a:af:50:1f:45:ca:
         7c:3e:3a:71:dd:30:5d:ba:e8:8c:ac:e4:15:ae:7a:dd:65:b1:
         6f:e2:bc:f7:5e:67:a3:a6:fb:5f:04:f9:89:1c:4f:81:cb:12:
         32:66:02:18
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Q0UxODExMC8GA1UEBRMoRjRCMDM4NUE1RENERUZFNkQ0RUM2QzZDQkNFQTIxNTVG
RDYwNTcxNzAeFw0yNTEyMTkwNjUyMDhaFw0yNTEyMjYwNjUyMDhaMBgxFjAUBgNV
BAMMDTY5NDRmNjE4LTAzZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHklCIkKcUd2UyeTCxBboNwPXP9Na1sjCRE2PQUBl+SLWwnGJDjCIyC7Vij4sX
v50T08KTZpUWoeolygLVofY8OKS62hxwKC48f9RsdKFapAsqArZ10NJIReB6OZWW
M/9w6Xgrh1L9EEW7VMjy8yPaalpFaZ3USO4NHdKwwLS88hWBQ/QPUYcRp6sMFR5P
EU2lpxi6/OV2ZupG5WMakImmzmMsrJVP15HwEq4ulgLze7oCt10g2qIyCFNplzj5
H/vLT+eJrSPvPm5x+yON+Gpp7e0goqnrg2hoizlYKhpTGGv7L524RU0yYqHpV9Q6
rWTnHb19RobyNSHGSN7LumGLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKI4JOyy9
bx3AjgbcC9qIOTRXjPswHwYDVR0jBBgwFoAU9LA4Wl3N7+bU7GxsvOohVf1gVxcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDRTE4L0JEREM0REI0QzY4
MjExRjBCQTVFMTc0NkM0RjlBRTAyLzlMQTRXbDNONy1iVTdHeHN2T29oVmYxZ1Z4
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOUxBNFdsM043LWJVN0d4c3ZPb2hWZjFnVnhjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND
RTE4L0JEREM0REI0QzY4MjExRjBCQTVFMTc0NkM0RjlBRTAyLzlMQTRXbDNONy1i
VTdHeHN2T29oVmYxZ1Z4Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACe6zUwa5wBoik6j5dKNTWfEgSIBAdfEOFHGo1GAGb4wgiurit5HZ1hz
s08qS2FQdv4QMMWttPt1uRinqqcC9RVh6mos32StLo+VSg2Q9bPSitNA1jWl1BOR
8RBX2nOtyJPFPjagw5wHQpmwNzueyNQrtmjZh4hij78Fd2/EUydLhgIpCWHmKjC2
YyBg1ioJH4KTWRkDelEj43aUhxxse7u8kpSALhO1DKoVFCKl30vNhXLnSW9Ih2mh
sHG/+98x4ayCJDJLkaITIBiAFD8cQncDLmqvUB9Fynw+OnHdMF266Iys5BWuet1l
sW/ivPdeZ6Om+18E+YkcT4HLEjJmAhg=
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:58:56 2025 by rpki-client