This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File:                     9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier:          bpwduL5UUWTvAUJrZqDk2tI2WWlxXH8LdYQyTbgj2cU=
Subject key identifier:   13:51:F5:C0:EF:11:EF:75:7B:99:00:9A:90:77:30:D8:55:0A:25:2A
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer:       /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial:       1978
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number:          1948
Signing time:             Thu 18 Dec 2025 16:19:48 +0000
Manifest this update:     Thu 18 Dec 2025 16:19:48 +0000
Manifest next update:     Thu 25 Dec 2025 16:19:48 +0000
Files and hashes:         1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: QLkdWxGJY09NdoFvfmFipsCR5BHkMEoNZ+yL1CZ1ZnM=)
                          2: D3FDB470817311EFA6D1742FC4F9AE02.roa (hash: 4G7ZYo5KeEtsAfgPO4X6TXioM+QJOrK11Ezfknn68Qk=)
                          3: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: M+kVidWeNxQJxyYqpjX+UThdH/HC0I70LM24xp9pvfc=)
                          4: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: afMkh+nThhAtZWr5uZa/M537SW67iX+SaWwO2XmeAUU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
                          rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6520 (0x1978)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
        Validity
            Not Before: Dec 18 16:19:48 2025 GMT
            Not After : Dec 25 16:19:48 2025 GMT
        Subject: CN=694429a4-c37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4f:74:69:3b:70:70:5b:58:40:ad:d3:ee:26:
                    f9:79:07:11:64:5c:52:84:6c:05:29:de:d5:b2:bb:
                    f3:74:6d:9f:66:ad:4a:6a:96:02:5a:3b:4b:0f:38:
                    9a:60:48:70:ec:7d:62:62:2a:2e:75:12:33:a5:0e:
                    67:49:ab:10:b5:4a:aa:1d:14:4e:ed:2f:88:39:bc:
                    8c:93:65:4d:da:c7:f2:81:e2:b2:b3:78:02:9a:63:
                    8f:68:d5:bc:47:11:9e:6e:94:fc:d2:13:da:83:e6:
                    10:4f:df:a0:56:4f:e1:5d:4a:76:67:e4:53:1d:bc:
                    60:55:bb:d9:53:a3:f0:9c:6d:d1:ed:49:4b:a3:8e:
                    d4:86:54:f9:74:e6:0d:95:a7:b3:09:11:a2:a8:d3:
                    b2:49:25:2c:a6:10:d8:93:f1:84:57:2f:7c:c2:c9:
                    c9:c1:94:47:1d:7d:53:e3:3a:e7:42:36:b0:cc:2c:
                    37:ba:d5:c9:a0:80:12:a8:69:70:7c:f7:c9:4c:30:
                    ce:53:77:b1:d8:f3:0c:51:83:1f:f2:e3:83:cb:00:
                    87:34:81:c9:35:b0:b6:d3:6d:2c:b5:e4:81:c6:03:
                    50:1d:1a:5c:cc:61:7d:56:84:60:29:f0:f0:e4:c1:
                    0f:b4:88:f0:50:91:11:45:5f:db:52:61:e1:7e:38:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:51:F5:C0:EF:11:EF:75:7B:99:00:9A:90:77:30:D8:55:0A:25:2A
            X509v3 Authority Key Identifier:
                keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b1:04:39:e2:99:23:74:cb:55:a8:93:1a:4e:cc:54:af:b0:
         b1:d0:e0:80:da:80:2d:ef:e2:ab:46:9b:85:cb:58:b0:0d:5b:
         38:ba:73:f7:4c:a6:a4:3b:1a:bf:9c:4a:41:09:96:9c:1a:c1:
         85:24:2d:50:03:7f:69:12:ea:27:54:87:74:86:dd:45:33:85:
         f1:32:93:3a:c9:8f:3d:f1:2e:15:ca:b6:89:76:3a:89:97:04:
         e2:c1:fb:fe:99:1e:0b:02:55:6e:77:7f:b1:b9:02:78:00:bb:
         fa:90:b1:d0:b9:ef:6f:a3:7a:99:77:95:34:dd:20:0d:28:7b:
         93:f6:fc:7a:05:fd:66:ca:10:b8:e9:1d:24:f0:be:97:a5:48:
         57:ba:34:c6:b5:0c:ca:12:ce:a2:19:4c:88:72:ec:ec:16:19:
         ff:68:91:2b:0f:96:1c:d1:3d:5d:ec:d2:76:db:65:75:a0:d8:
         c5:ac:48:e3:24:f7:c5:d6:a9:99:3b:48:cd:e0:74:7d:3d:7f:
         38:46:d5:ac:89:26:c0:5a:9e:b5:e2:46:02:9a:91:8c:a0:44:
         a0:99:30:04:01:51:c9:3e:35:de:8b:ee:a5:31:22:4b:6c:b3:
         23:f0:78:a7:ef:cf:9a:a7:48:72:d5:d2:1c:ac:70:3d:19:03:
         5b:f5:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:58:06 2025 by rpki-client