This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
File:                     Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft (raw, json)
Hash identifier:          ozZmcNTgrM0y9z6rU1gE1u5jjY2mQyeIouzmpqooXHE=
Subject key identifier:   07:6C:6E:40:E8:59:BC:FB:51:63:5C:8E:2C:68:C3:2B:C7:72:D9:2D
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
Manifest number:          0144
Signing time:             Fri 19 Dec 2025 03:31:14 +0000
Manifest this update:     Fri 19 Dec 2025 03:31:13 +0000
Manifest next update:     Fri 26 Dec 2025 03:31:13 +0000
Files and hashes:         1: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl (hash: xh5nb6uZz89WwVRfK+aYvzo/oUCGxkwIPr3M2W3lKOg=)
                          2: 1090CE74EBC211EEB58D4343C4F9AE02.roa (hash: jcaCq3HWImgQ/NDx2leALcjgxzkZ4FPifc2Ybb4pZFU=)
                          3: 111B4450EBC211EEB58D4343C4F9AE02.roa (hash: 00hi9oYWLhxiNt5qG52lfNVHtDojqLF3FRiNHRwXR2Q=)
                          4: 8C73DD2414F711F088D0424FC4F9AE02.roa (hash: ioOqYPYgjl0hBINpNmdRJRFRhysvj1VoKagrJNHAM6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
        Validity
            Not Before: Dec 19 03:31:13 2025 GMT
            Not After : Dec 26 03:31:13 2025 GMT
        Subject: CN=6944c701-4979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d5:5d:b5:fd:a8:b5:d1:50:70:b9:1e:af:9e:
                    64:71:1d:a7:d9:ed:d3:af:12:ea:7e:c2:9a:43:0b:
                    82:77:3d:64:e4:65:ed:4e:2b:e5:9c:17:96:72:f1:
                    31:b1:6e:b7:6e:a7:1d:f5:19:de:71:15:8c:38:5c:
                    b6:d6:b0:23:1e:bf:20:32:f4:67:b7:13:dc:f6:2b:
                    b8:dc:c5:c1:be:dc:d0:37:9c:3f:45:5e:87:98:38:
                    6c:8b:2a:20:e0:c1:47:8c:53:c1:aa:72:95:ae:69:
                    a3:a5:78:ae:2b:0e:04:b6:ff:8f:33:d4:5e:d9:82:
                    59:3b:e8:80:b4:b1:c8:c4:ae:aa:da:46:0b:61:f6:
                    08:66:76:8d:98:ef:06:51:2e:53:ce:56:a7:83:58:
                    de:51:a5:63:24:26:25:a0:f1:4a:b6:23:f2:94:70:
                    51:be:bd:96:da:c7:f7:ce:9a:66:75:69:1a:2a:0a:
                    4e:d2:c3:02:84:f7:d3:89:b9:86:11:82:7a:84:01:
                    6f:8c:41:5c:eb:93:31:10:ad:e7:09:4c:e8:64:27:
                    16:b7:bb:2c:0d:48:ff:92:d2:93:dc:ea:5d:4d:35:
                    3c:25:ae:c0:37:a1:13:64:1e:c3:04:03:da:c7:4c:
                    4b:ba:4a:52:c5:f1:39:b0:e3:ee:cb:1d:62:df:8d:
                    13:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6C:6E:40:E8:59:BC:FB:51:63:5C:8E:2C:68:C3:2B:C7:72:D9:2D
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:03:21:1c:96:fe:f1:2e:4d:bc:27:22:a3:40:e2:2b:ca:82:
         4b:8d:33:0c:8b:25:a1:c8:e3:12:56:b9:61:5b:d7:73:5b:8c:
         be:c7:e6:f2:a2:5d:6f:34:27:76:8d:65:bf:b5:1f:d8:2b:a5:
         b0:37:85:eb:75:2e:2c:f3:ae:6f:8c:25:0f:f0:26:02:68:fd:
         ab:61:87:68:30:54:83:6d:08:55:24:7f:02:1c:75:4a:fa:15:
         67:99:da:2d:84:ff:df:1e:4e:54:83:53:95:5d:6c:fd:03:bc:
         9d:3a:8b:3b:df:98:2c:bf:e1:90:00:16:8e:87:d6:d2:94:7d:
         69:4c:68:bd:25:5e:db:df:2e:b6:fa:8c:14:c2:1b:b2:dc:96:
         88:07:cd:2d:01:0f:29:ba:02:6f:38:83:b6:96:f9:a8:5c:a1:
         bf:df:1e:1d:2d:90:9d:41:81:1d:91:dc:a5:08:93:7f:94:50:
         4b:03:7d:04:5f:7f:40:57:fd:eb:63:00:57:ef:f0:81:2f:79:
         36:bd:e1:19:99:7d:4e:47:83:e2:f0:91:42:55:5c:5b:95:58:
         3c:1b:9a:e0:10:6f:53:da:5b:f0:df:81:8b:69:2f:df:3d:21:
         6c:eb:49:53:93:df:bc:d3:4c:4f:23:61:a5:18:eb:22:2c:62:
         ec:72:8c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:56:35 2025 by rpki-client