This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
File:                     e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft (raw, json)
Hash identifier:          tQAeHxYx1Ov2xZYMDxogIEUi57TnG2hHt85T2+/Aw98=
Subject key identifier:   06:92:95:2A:A5:15:9A:07:65:AC:52:9A:4F:84:05:E6:AA:BE:85:7C
Authority key identifier: 7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14
Certificate issuer:       /CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
Manifest number:          0201
Signing time:             Fri 19 Dec 2025 01:39:00 +0000
Manifest this update:     Fri 19 Dec 2025 01:39:00 +0000
Manifest next update:     Fri 26 Dec 2025 01:39:00 +0000
Files and hashes:         1: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl (hash: lfdf4LvgLcW9eGMmk/hJrgWS6/xDReNORUTU2l6wbd4=)
                          2: EB732812CC8211ED9420A757C4F9AE02.roa (hash: 3Eo9M+6uF1PrL4pGQbaO7H9tA5QUvhxpxJznY/pRFpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl
                          rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AD0, serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714
        Validity
            Not Before: Dec 19 01:39:00 2025 GMT
            Not After : Dec 26 01:39:00 2025 GMT
        Subject: CN=6944acb4-0db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:80:b2:5c:e6:d3:96:a8:bf:18:f2:53:98:
                    4e:ab:80:7a:dc:dd:ca:c0:e3:02:9c:07:a6:79:04:
                    31:82:a2:21:8c:ee:1c:b1:78:51:5f:18:2b:6f:96:
                    3f:3d:52:02:58:79:8d:14:60:d8:c4:e5:ac:c8:74:
                    1a:91:1e:81:8b:40:1b:ef:57:dc:1e:be:b1:a8:23:
                    6d:23:81:96:20:0f:51:ab:92:df:2b:07:07:93:94:
                    77:65:9b:e2:58:17:0c:46:a1:39:5a:fa:d9:63:97:
                    5b:45:18:f3:6f:41:8c:25:1c:13:fd:52:f6:61:94:
                    38:3e:00:76:b8:33:d9:54:b0:ba:a3:76:58:95:db:
                    ab:6f:26:58:f6:95:95:4b:9a:5a:a4:06:67:f8:11:
                    07:65:0b:e3:1a:49:62:69:c0:c6:04:49:5f:b6:db:
                    dc:61:33:30:dc:df:ab:d1:79:f6:ce:b1:b8:ad:71:
                    a0:c1:96:bd:46:f3:18:0a:47:fa:9b:61:de:93:04:
                    36:6f:c9:11:36:e1:43:c5:76:98:53:60:c1:b0:d6:
                    23:fa:3e:d2:0e:7e:85:d4:cb:f1:c8:a7:2d:3b:bc:
                    23:fd:fe:29:e1:a0:61:77:f7:6c:e4:4c:42:45:85:
                    ad:33:2d:a5:eb:86:b3:ef:36:07:fa:26:b8:c4:a2:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:92:95:2A:A5:15:9A:07:65:AC:52:9A:4F:84:05:E6:AA:BE:85:7C
            X509v3 Authority Key Identifier:
                keyid:7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3a:50:83:e8:ff:5b:2a:b0:01:67:b2:30:ba:f7:b1:91:29:
         10:66:44:50:d9:23:0f:85:04:72:fb:df:95:ae:b7:4e:82:66:
         9e:81:3a:09:d4:26:2d:c5:01:66:72:d1:62:ea:b1:6e:34:c7:
         50:d6:0c:5d:bd:c9:3a:d4:75:ea:df:15:9c:c0:5d:b5:a3:2e:
         8e:09:bb:79:17:2b:23:3e:63:d1:b5:9a:34:fc:38:2f:11:00:
         12:64:3b:39:79:6c:96:56:9e:f3:9c:45:4a:83:34:20:c7:48:
         56:ec:4b:3d:a6:37:f0:83:94:ca:00:be:23:09:af:6b:fd:3c:
         12:3a:f2:52:46:77:b4:66:75:81:d8:9b:8f:ec:26:c3:eb:a9:
         6a:5b:eb:33:86:35:f4:72:d0:25:55:f7:fc:d0:29:49:4b:ca:
         36:25:fd:78:eb:ba:d0:21:ef:09:65:28:bc:7d:80:b0:42:59:
         09:2e:08:3d:1e:6d:92:3f:c7:d5:f1:21:23:72:42:15:51:0d:
         06:03:20:83:47:b9:a3:9f:f8:cd:54:4f:dd:71:fc:b7:7e:1b:
         77:9f:cc:47:fd:76:28:9e:08:e2:51:54:31:1a:44:6d:f5:5b:
         1f:d5:a0:3d:5c:6b:4f:0e:e1:77:b4:a5:36:24:e2:f5:bd:26:
         83:a8:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:14:26 2025 by rpki-client