This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
File:                     pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json)
Hash identifier:          Oy3T6zoEUMWcUPYd3tEiKoEhDfC4egCezAXvtoEdV4Q=
Subject key identifier:   10:54:34:35:0D:29:0A:0A:4D:73:5C:A7:50:B6:F7:9B:58:B3:DD:1A
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Certificate issuer:       /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
Manifest number:          0197
Signing time:             Wed 17 Dec 2025 03:08:25 +0000
Manifest this update:     Wed 17 Dec 2025 03:08:25 +0000
Manifest next update:     Wed 24 Dec 2025 03:08:25 +0000
Files and hashes:         1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: rZoqSj+hCnJGfAIrHBRMjkH5Y1x29jnDpsUvDONBc/s=)
                          2: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: inpneUp76nQQX6Q/CpN1dgRfEj/8zpxJb6ddO35TdAM=)
                          3: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: jax3qkALNRFMNrAOXKyN2WiovYFpDRlk86jOWinHUwU=)
                          4: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: TLDnWAlNl4+LlNPMq6EhX78RX8oFwqpDV+CE22BbZbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
                          rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 03:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
        Validity
            Not Before: Dec 17 03:08:25 2025 GMT
            Not After : Dec 24 03:08:25 2025 GMT
        Subject: CN=69421ea9-a5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:18:fa:7b:2b:69:46:2c:a7:7d:fb:62:73:
                    2d:c4:33:07:9e:78:d6:5c:2b:77:35:50:3d:06:16:
                    b1:36:d6:16:8f:bd:c0:00:50:70:42:b6:97:74:69:
                    14:03:91:5e:18:dc:3c:78:12:2c:66:84:12:36:cd:
                    9d:88:22:79:13:46:b3:30:2b:5e:18:70:03:32:64:
                    e1:5e:46:37:32:a1:c8:41:42:78:0b:3b:66:49:0b:
                    a0:3f:57:e0:4f:09:d7:0e:46:b6:95:c7:5c:1e:84:
                    09:9a:5b:cf:58:7b:ad:95:f6:f5:ae:df:63:cd:4e:
                    a1:07:86:28:72:ac:a9:b7:75:c3:4b:0b:82:e3:75:
                    18:15:73:cd:83:91:bd:c1:8f:b0:7e:4c:82:71:f0:
                    a1:a3:32:64:b5:9f:bd:d7:73:cc:fe:c2:90:16:45:
                    68:f3:8f:af:6c:1d:78:03:97:95:6b:db:54:a1:db:
                    41:11:4c:c6:34:69:d1:b7:39:3d:fe:04:73:74:8d:
                    d6:ae:8f:54:b7:78:d1:89:62:c5:93:0b:d5:6c:45:
                    0c:4d:fc:e5:c1:95:2e:34:83:56:2a:e4:c2:9d:bd:
                    2d:02:b4:56:c7:b6:15:bd:ef:f7:44:01:29:a2:02:
                    a8:4a:80:2a:a6:1f:a2:20:9f:82:6c:e2:81:9f:ae:
                    be:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:54:34:35:0D:29:0A:0A:4D:73:5C:A7:50:B6:F7:9B:58:B3:DD:1A
            X509v3 Authority Key Identifier:
                keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6b:ed:84:a9:12:57:b0:72:e9:f5:e2:f3:67:71:c5:21:e7:
         b2:3c:25:d4:06:6a:fe:19:ed:01:45:1e:97:6f:87:2d:fd:37:
         be:f4:ca:1f:42:ed:b4:34:08:6d:8b:41:ae:64:2d:f4:ff:91:
         0e:8b:cd:66:5f:16:51:13:a5:3f:63:ec:4a:5e:2f:ad:0c:df:
         71:a3:34:fe:12:27:94:80:0d:22:fc:19:ae:22:99:36:2b:15:
         5e:c2:c8:96:10:95:de:23:4a:81:8a:75:74:86:00:a8:c3:6a:
         bf:48:86:24:5c:a7:de:20:44:04:8e:6d:d2:8f:83:22:7c:8e:
         dc:a5:5a:34:59:70:87:83:09:e9:7c:63:d5:c6:9c:5a:f8:02:
         c4:0b:2e:69:fe:3a:8f:d3:b2:ca:bd:a3:88:1b:38:de:8d:c2:
         d8:f5:03:7c:90:d9:89:43:00:98:9a:d9:09:6a:8c:56:e6:7d:
         70:69:d9:3b:ec:a5:d3:e5:2d:f3:da:7d:67:41:c7:81:1f:70:
         50:bc:d3:34:92:3b:04:b0:7a:3e:e7:c1:38:b5:04:b8:40:5f:
         6b:c0:a5:ed:70:4b:e6:ba:95:db:3f:d2:07:48:ae:02:d2:b5:
         0d:e2:ab:26:f6:9b:20:0e:76:08:0d:1b:e2:49:40:d2:1d:f9:
         ba:68:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:52:22 2025 by rpki-client