This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File:                     4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier:          ljFJJaaT6BLFDIwMVzNmkmbPlj1l1O12k8nFnaxS94g=
Subject key identifier:   AB:45:91:7C:B6:52:65:EA:8F:9E:8F:FA:49:F8:78:F7:CE:15:AB:18
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer:       /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number:          16
Signing time:             Fri 19 Dec 2025 06:46:56 +0000
Manifest this update:     Fri 19 Dec 2025 06:46:56 +0000
Manifest next update:     Fri 26 Dec 2025 06:46:56 +0000
Files and hashes:         1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: ss+W3uwrexUOsJgQbv8kQPQkvvvLipdxi+fXwQt4Xg0=)
                          2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: TNETd0cqoIROY1IKJ9vVGYHnKUW/ruP3inR8Ay7O+xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
        Validity
            Not Before: Dec 19 06:46:56 2025 GMT
            Not After : Dec 26 06:46:56 2025 GMT
        Subject: CN=6944f4e0-f9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:bd:12:a7:18:18:d7:f4:2a:b2:37:8e:21:
                    1f:a0:c2:7f:17:02:da:c6:c9:d1:1f:f5:bd:51:dd:
                    36:8f:8b:df:04:d2:c3:fb:e3:d2:f2:df:6d:a1:9a:
                    b1:7c:c2:7f:2f:21:a0:59:53:4a:42:72:cd:c1:57:
                    70:ea:3d:79:b7:b2:8b:5c:93:83:6c:76:34:73:0f:
                    8d:6e:2c:6a:85:a3:3c:a5:d1:48:ec:2d:3c:37:c9:
                    b5:86:62:09:f3:3a:e1:65:c5:2a:1c:e7:64:1c:a9:
                    d7:3c:b1:dd:92:54:72:0d:4d:18:ab:53:cf:d5:a2:
                    50:b8:80:fc:14:41:ac:ab:54:2b:71:ac:c1:2d:43:
                    ad:cc:ba:9e:f1:66:e8:5b:69:ce:33:24:98:b4:14:
                    14:bf:07:c4:d6:d0:f3:6e:50:0b:c8:65:a0:80:03:
                    1c:ab:75:f0:27:ea:2a:b4:e1:f3:43:7d:7a:7f:bf:
                    8e:59:1c:ac:bd:06:8a:3c:43:de:26:5f:a2:68:5e:
                    9b:62:d4:a6:2e:26:01:7f:2a:5c:3c:52:6a:27:aa:
                    e1:34:76:d3:7d:2e:31:8f:a7:78:02:b1:ef:a7:fd:
                    5e:6a:29:c4:03:52:61:1f:9c:5d:82:fa:a9:74:da:
                    6d:21:6f:ed:be:99:18:e8:5d:32:40:44:f3:f9:35:
                    a8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:45:91:7C:B6:52:65:EA:8F:9E:8F:FA:49:F8:78:F7:CE:15:AB:18
            X509v3 Authority Key Identifier:
                keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c1:61:79:14:8d:1a:1d:44:a8:a6:df:3a:c5:d0:45:dc:29:
         69:2f:22:55:e5:e4:5e:b8:05:cd:24:6e:29:3c:94:ce:79:3c:
         58:64:22:aa:ec:52:57:1b:41:da:28:6d:01:6f:4a:cd:b2:c1:
         a4:94:e7:4f:54:fe:16:d2:eb:8a:37:35:0a:b6:2d:87:58:d6:
         c8:4b:3f:ae:0a:0e:e2:66:4a:40:64:fd:30:c4:33:63:d6:ed:
         a0:54:32:2c:85:69:3d:23:9a:42:17:76:8e:f8:19:b6:e3:23:
         61:02:36:76:3d:0d:1c:8a:9a:92:ca:90:eb:eb:1d:46:3e:33:
         1e:98:f3:37:1f:b8:dd:d9:ce:ef:b2:7b:0c:ee:b7:e2:5c:9b:
         5d:e0:f6:f9:9f:34:3f:f6:ea:1e:5f:46:73:4d:97:95:99:13:
         98:9c:4b:1c:4d:0c:bb:92:32:fd:72:44:71:fe:fd:40:35:ef:
         69:05:88:77:93:5a:4a:a1:70:71:93:2f:4d:bc:92:99:36:b3:
         14:9d:b5:d6:46:1e:16:67:3a:ad:7f:7d:12:4c:fc:68:ee:d9:
         22:d1:fc:dd:ab:d5:8d:8d:d1:0d:1d:38:9f:6c:06:57:aa:01:
         94:19:f3:0c:17:19:4a:dc:a4:95:98:98:0a:97:b5:01:09:40:
         b3:31:e4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:42:11 2025 by rpki-client