This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
File:                     pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json)
Hash identifier:          ayzxVYG7cmbBlbZ00kacLBl+zJFbCcNO0U4WN8hP6uc=
Subject key identifier:   93:6E:AA:C9:31:E4:98:77:3B:9A:BA:9D:C9:F1:26:78:11:EC:80:93
Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A
Certificate issuer:       /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
Certificate serial:       0449
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
Manifest number:          0441
Signing time:             Thu 18 Dec 2025 23:37:25 +0000
Manifest this update:     Thu 18 Dec 2025 23:37:25 +0000
Manifest next update:     Thu 25 Dec 2025 23:37:25 +0000
Files and hashes:         1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: tkInPLy3ECXrfMN4QHxbC2CKH9SvAQIKpFoswP0sAPU=)
                          2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: 2pNsdUTXJ21ZMGMJibEjsxpDH0Z9Fw35noblZo6xKpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl
                          rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097 (0x449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
        Validity
            Not Before: Dec 18 23:37:25 2025 GMT
            Not After : Dec 25 23:37:25 2025 GMT
        Subject: CN=69449035-1121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:12:05:14:15:15:b5:8d:78:b2:96:c7:9e:
                    08:f6:ab:64:85:01:ec:b5:d2:66:4a:93:3a:5d:e0:
                    43:0b:48:04:73:10:16:e2:d4:2b:ce:ba:01:6e:05:
                    a1:41:a2:d2:52:8b:51:dd:a6:f4:b1:f5:4d:67:bd:
                    a9:8f:b2:b4:09:b8:e9:ee:2f:eb:11:09:f4:3b:b9:
                    48:3a:60:2e:97:1a:55:ac:02:17:f5:b1:8d:b0:15:
                    0c:7c:bb:05:03:99:93:e0:40:5f:39:0e:de:67:21:
                    f2:f4:ff:7b:75:42:85:37:cd:10:5b:cd:d4:93:3b:
                    27:44:cf:1e:97:8d:6d:8f:75:51:9d:d4:0f:04:4d:
                    cb:19:68:51:02:34:99:87:d6:2e:b9:b6:05:2b:89:
                    e9:bf:b8:97:aa:31:29:45:44:8d:35:27:0d:17:ea:
                    22:ec:04:04:fa:4f:95:d7:a4:2c:34:66:95:ee:15:
                    d7:3e:8f:38:c0:34:f4:ee:e9:7b:c2:55:38:9d:2e:
                    42:9d:df:30:88:96:0f:a3:07:d9:10:84:d6:06:80:
                    ed:91:bc:26:43:4b:4b:06:42:7b:45:f8:56:c0:54:
                    2e:e7:21:e2:92:54:85:f1:fa:da:6f:08:6a:2c:91:
                    a8:c5:b4:1a:1b:fb:88:5a:81:66:f3:f0:f9:46:76:
                    16:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6E:AA:C9:31:E4:98:77:3B:9A:BA:9D:C9:F1:26:78:11:EC:80:93
            X509v3 Authority Key Identifier:
                keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:da:b0:34:7a:67:69:80:cb:c9:81:6c:c4:91:ce:8e:38:eb:
         e2:e3:c8:aa:7a:97:e6:9a:e9:d6:b8:44:d7:5b:96:c0:c9:01:
         5c:5f:83:b8:e3:78:80:7c:41:7f:a8:ff:2a:c9:12:99:1c:3f:
         a4:6e:c6:bc:73:49:64:c1:86:92:f8:89:6a:97:b8:da:0a:e7:
         95:22:9a:be:b8:0a:5e:bb:f5:34:99:90:68:7e:b8:ab:de:69:
         f7:e6:2c:b6:3a:97:31:33:95:13:ee:3f:ba:45:97:22:f0:6b:
         1c:32:bf:ef:fb:a7:ca:bc:d1:62:2b:e4:52:de:7c:fc:e0:89:
         35:f2:c6:ca:4b:93:d2:aa:55:3a:92:c3:8c:a0:07:64:37:fc:
         ae:40:35:d8:19:d4:b8:f7:a0:a2:c7:55:d4:d1:28:59:fe:f6:
         7e:1b:27:8e:62:74:4b:2f:7b:ea:a5:f4:7d:f2:9f:c9:be:d2:
         cf:91:4a:bc:5e:08:eb:6c:e9:71:a5:73:c7:cd:d5:d5:6f:66:
         f3:cb:33:c4:b7:9c:bb:7e:8d:b6:00:f5:a8:5b:1e:0f:e9:29:
         4b:b3:7f:4f:82:2b:f5:52:4f:7f:31:73:16:cd:57:3b:05:81:
         0a:f0:43:9c:81:48:da:00:19:78:35:1b:ea:44:1b:77:b9:30:
         b6:05:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:52 2025 by rpki-client