This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
File:                     9U-AgBarS7BveWqJRmfHC91I-_Y.mft (raw, json)
Hash identifier:          Vr3154py+Mho1qt7wtwTZoRtPft92biGJ93afGKKvVU=
Subject key identifier:   F6:55:50:56:CE:9D:75:29:73:0C:72:CA:F6:65:21:57:27:7E:D3:30
Authority key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6
Certificate issuer:       /CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
Manifest number:          0102
Signing time:             Wed 31 Dec 2025 04:21:26 +0000
Manifest this update:     Wed 31 Dec 2025 04:21:26 +0000
Manifest next update:     Wed 07 Jan 2026 04:21:26 +0000
Files and hashes:         1: 9U-AgBarS7BveWqJRmfHC91I-_Y.crl (hash: GN0o+/mzxe5D5m7qbox2z9ZJlmC5lzFX21JIuJaQzMY=)
                          2: 21642FDA720811EF8F352D23C4F9AE02.roa (hash: xRhybVxoDDnKc3CKFnXjp4iGF7ySaAqAvV6AwggDoT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl
                          rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 04:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6
        Validity
            Not Before: Dec 31 04:21:26 2025 GMT
            Not After : Jan  7 04:21:26 2026 GMT
        Subject: CN=6954a4c6-e200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9a:99:6b:c7:7d:7f:82:e8:80:16:37:f2:07:
                    fd:78:e4:2d:d6:66:ed:c9:d8:a4:3d:5c:32:e4:9c:
                    bc:31:94:54:be:99:aa:96:72:5e:9c:27:f6:4d:f9:
                    b2:bf:7c:f9:06:bc:eb:12:c0:a4:cf:f7:a0:c9:d3:
                    7a:3f:5a:41:78:0f:54:f5:60:3f:c1:6e:81:e3:c8:
                    e3:3f:36:1d:6b:ed:1b:62:6a:0c:39:ca:99:95:7a:
                    2c:fc:8b:d6:92:f6:d1:13:6c:ed:8b:93:03:d0:ee:
                    77:64:02:36:95:d9:bb:35:fd:14:d4:0c:3d:62:c0:
                    fe:b2:c8:46:24:9a:08:a8:33:2d:db:b2:0c:f7:8a:
                    23:af:a6:7c:2d:ef:0e:82:ca:c7:b4:24:51:0b:31:
                    f4:d2:68:0c:2c:34:72:de:6c:b3:52:5a:11:09:20:
                    59:6d:29:b0:5e:fc:cb:8a:20:98:c3:a8:1e:95:27:
                    ce:f7:e5:bb:f4:56:fc:4d:70:16:55:81:73:8d:e5:
                    f7:89:54:6e:ac:da:10:c3:0a:8c:47:a7:a9:5f:df:
                    86:2b:8d:4a:10:e7:19:d0:e8:82:92:9e:3a:a3:50:
                    e3:a0:87:2d:12:70:72:c2:5d:95:d2:52:56:04:b4:
                    6b:28:e1:64:54:f8:2a:4e:f9:07:e2:3e:22:27:a4:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:55:50:56:CE:9D:75:29:73:0C:72:CA:F6:65:21:57:27:7E:D3:30
            X509v3 Authority Key Identifier:
                keyid:F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:18:71:6c:1f:f1:e4:26:0c:ea:ab:1c:b7:46:da:d0:93:c6:
         36:54:8f:bf:f7:d5:8a:a3:1e:79:c2:57:f4:b2:a7:17:74:d4:
         5c:8d:49:af:66:96:4c:a3:00:d9:56:57:73:87:9c:55:c6:aa:
         10:db:c3:0a:20:cf:de:29:a6:15:b4:ee:71:96:47:49:95:fe:
         72:23:e3:eb:0f:f1:1d:a7:79:d9:d2:61:72:78:96:68:a6:45:
         4b:6c:8c:be:a9:af:01:d2:bb:f2:d7:3e:ad:10:1a:7f:8c:4b:
         d0:02:f5:b5:6c:66:54:4d:59:8b:47:65:22:9f:d4:9c:ee:f0:
         70:10:b6:ec:75:2f:96:f2:65:90:23:67:fe:1b:d0:4e:93:d6:
         1f:18:0b:cb:79:c8:7f:b9:dd:dd:e2:3a:5a:3b:f8:b2:63:f9:
         cc:c8:95:03:7c:41:c4:59:07:e3:3d:f9:ac:04:10:c6:14:f0:
         91:6c:d8:25:7a:ce:cb:7b:19:35:b6:a1:f0:62:76:fd:20:f5:
         bc:28:15:0a:77:e1:68:d0:e8:7c:27:26:ab:66:3c:72:0a:f7:
         41:56:ce:9d:4f:5c:e7:9d:b3:d2:2b:43:26:65:27:b0:81:18:
         66:32:5f:d3:6e:56:70:d7:98:98:5b:43:98:ce:24:d5:f7:58:
         52:ea:7e:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE5MzIxMTAvBgNVBAUTKEY1NEY4MDgwMTZBQjRCQjA2Rjc5NkE4OTQ2NjdDNzBC
REQ0OEZCRjYwHhcNMjUxMjMxMDQyMTI2WhcNMjYwMTA3MDQyMTI2WjAYMRYwFAYD
VQQDDA02OTU0YTRjNi1lMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk5qZa8d9f4LogBY38gf9eOQt1mbtydikPVwy5Jy8MZRUvpmqlnJenCf2Tfmy
v3z5BrzrEsCkz/egydN6P1pBeA9U9WA/wW6B48jjPzYda+0bYmoMOcqZlXos/IvW
kvbRE2zti5MD0O53ZAI2ldm7Nf0U1Aw9YsD+sshGJJoIqDMt27IM94ojr6Z8Le8O
gsrHtCRRCzH00mgMLDRy3myzUloRCSBZbSmwXvzLiiCYw6gelSfO9+W79Fb8TXAW
VYFzjeX3iVRurNoQwwqMR6epX9+GK41KEOcZ0OiCkp46o1DjoIctEnBywl2V0lJW
BLRrKOFkVPgqTvkH4j4iJ6T3QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZVUFbO
nXUpcwxyyvZlIVcnftMwMB8GA1UdIwQYMBaAFPVPgIAWq0uwb3lqiUZnxwvdSPv2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi80N0NBMzVFNDcy
MDcxMUVGOURDOEJBMjFDNEY5QUUwMi85VS1BZ0JhclM3QnZlV3FKUm1mSEM5MUkt
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzlVLUFnQmFyUzdCdmVXcUpSbWZIQzkxSS1fWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTkzMi80N0NBMzVFNDcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi85VS1BZ0JhclM3
QnZlV3FKUm1mSEM5MUktX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGGHFsH/HkJgzqqxy3RtrQk8Y2VI+/99WKox55wlf0sqcXdNRcjUmv
ZpZMowDZVldzh5xVxqoQ28MKIM/eKaYVtO5xlkdJlf5yI+PrD/Edp3nZ0mFyeJZo
pkVLbIy+qa8B0rvy1z6tEBp/jEvQAvW1bGZUTVmLR2Uin9Sc7vBwELbsdS+W8mWQ
I2f+G9BOk9YfGAvLech/ud3d4jpaO/iyY/nMyJUDfEHEWQfjPfmsBBDGFPCRbNgl
es7Lexk1tqHwYnb9IPW8KBUKd+Fo0Oh8JyarZjxyCvdBVs6dT1znnbPSK0MmZSew
gRhmMl/TblZw15iYW0OYziTV91hS6n6X
-----END CERTIFICATE-----
Generated at Wed Dec 31 13:27:55 2025 by rpki-client