This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
File:                     9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json)
Hash identifier:          KMHHcmKBinv+qd0M3MHbapMcJ/ZCqxPu798fu3mUaOg=
Subject key identifier:   5E:CB:DE:F2:F7:17:5B:F6:F6:9C:4B:09:EE:11:0E:23:03:DB:2F:1F
Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
Certificate issuer:       /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
Manifest number:          DD
Signing time:             Sat 27 Dec 2025 04:31:22 +0000
Manifest this update:     Sat 27 Dec 2025 04:31:21 +0000
Manifest next update:     Sat 03 Jan 2026 04:31:21 +0000
Files and hashes:         1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: 4s2pEvRDyVfFL/BGrUdNImjUx6+C50HYjWXUMA1A4GA=)
                          2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: EP8IMn/Dpz37JzTGpl131u/EdByNY9mypWBz1crTuiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl
                          rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 04:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
        Validity
            Not Before: Dec 27 04:31:21 2025 GMT
            Not After : Jan  3 04:31:21 2026 GMT
        Subject: CN=694f611a-76e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:06:1a:4a:91:3e:28:15:b2:58:d9:5e:d7:
                    ae:86:e0:6b:63:09:8f:07:80:1f:c8:21:05:31:83:
                    67:2d:0d:5a:9b:c7:4e:68:c0:a5:a6:39:2a:a3:71:
                    13:6d:fa:ac:d8:c0:73:15:d6:8b:ef:46:16:b4:6b:
                    d4:35:58:3c:c5:ad:7c:14:fa:95:7a:73:79:37:07:
                    4d:93:3f:da:22:a2:48:97:fa:f7:ac:76:99:7f:c9:
                    28:1d:6c:4d:68:5a:71:a8:88:9d:ef:c4:4e:57:c6:
                    2a:40:8e:0b:7e:5e:cd:34:06:3e:ef:14:01:de:6b:
                    8c:14:bc:00:12:00:3d:a3:be:77:fb:b3:6a:55:9a:
                    bf:c4:19:f3:29:46:59:d6:04:3f:87:05:7c:1b:e7:
                    d2:43:65:b8:dc:58:81:a3:96:1a:73:a4:ea:b8:ef:
                    b1:ae:fe:07:f8:e4:bd:0b:40:5b:1e:17:b6:36:9f:
                    62:9f:b9:ea:b2:17:47:0c:35:3b:2c:2d:af:e8:9d:
                    26:cf:87:75:47:30:e2:71:10:9f:23:66:26:d1:2b:
                    65:5c:f5:75:45:62:02:d3:6e:18:a3:b1:34:9f:bd:
                    96:ca:89:ba:22:3a:2b:59:13:50:6a:65:2b:8b:61:
                    e0:59:93:9b:d8:c5:e2:15:2b:5a:42:83:fb:9e:74:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CB:DE:F2:F7:17:5B:F6:F6:9C:4B:09:EE:11:0E:23:03:DB:2F:1F
            X509v3 Authority Key Identifier:
                keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:10:f5:a4:33:8d:7f:9e:94:d6:72:5a:c1:55:aa:54:a6:01:
         28:3b:e0:a9:48:f4:30:84:e5:4d:4b:2e:d4:21:c5:2d:f1:69:
         90:09:a6:96:71:9d:f9:b4:61:0b:45:24:21:b7:51:fd:8c:a0:
         63:66:81:7c:50:50:70:01:be:07:85:17:5f:22:00:3a:3c:bf:
         d9:4e:9f:56:24:ea:39:5d:cb:cd:04:11:23:41:e0:d3:49:07:
         01:d2:b4:c3:5c:f6:37:33:dd:f1:6d:a6:08:0a:a0:0e:87:64:
         57:4c:7e:82:4d:80:2c:3b:5c:ea:21:82:c4:34:34:35:37:97:
         3d:6e:2a:28:56:b6:30:8a:b8:27:75:20:c0:49:9c:1c:3b:71:
         cb:a7:79:ac:82:fc:90:60:4a:1b:46:1f:ad:c0:df:44:73:17:
         36:31:49:e6:6a:26:1f:11:51:71:7b:09:d1:63:b9:06:e4:4d:
         8c:c1:16:ce:01:c1:0d:62:64:ba:e7:ab:38:cb:b8:6b:92:1a:
         6a:1d:bd:9e:5a:d9:a2:61:1a:63:35:f6:ed:9b:b0:2d:8d:b8:
         08:b9:fc:6d:57:e0:04:6e:67:ff:39:51:7f:b8:25:1c:13:1b:
         9c:4e:1a:a0:bc:ae:7c:b9:6e:40:ac:69:97:27:11:7e:ed:a3:
         57:17:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 18:03:24 2025 by rpki-client