This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
File:                     m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json)
Hash identifier:          GDKacDYFYPPjegiEmTA0+3fAlVWy7fgXxgfYimsN9iY=
Subject key identifier:   2B:4B:C8:64:60:50:44:62:3D:A6:11:B1:8E:FA:8A:07:83:79:64:2A
Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
Certificate issuer:       /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
Certificate serial:       184C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
Manifest number:          1844
Signing time:             Thu 18 Dec 2025 16:23:58 +0000
Manifest this update:     Thu 18 Dec 2025 16:23:57 +0000
Manifest next update:     Thu 25 Dec 2025 16:23:57 +0000
Files and hashes:         1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: eLW4NMB0j28ZA7KRaNpD/KL1ubXJucTdthi9XoEkSaM=)
                          2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: g6s+BNZQJQ8eLNLhvPLgACbzK2XG9M1Q2Nm7UCMcOkM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl
                          rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6220 (0x184c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
        Validity
            Not Before: Dec 18 16:23:57 2025 GMT
            Not After : Dec 25 16:23:57 2025 GMT
        Subject: CN=69442a9e-2f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:26:a8:41:58:44:85:8e:6c:52:89:34:01:
                    ef:e7:cd:2d:e9:77:cb:d2:c7:88:4f:40:b4:91:7f:
                    b4:4d:1d:d4:05:ec:48:1a:94:8a:87:a8:0d:f2:d5:
                    16:6f:3b:15:b0:97:72:bb:8a:7c:7f:23:04:10:ff:
                    ac:9e:64:f9:cc:c2:fe:fe:d8:ec:f5:6c:ae:14:bd:
                    05:6c:c7:31:87:be:62:30:c9:b2:b0:7b:9d:8b:a0:
                    0e:22:08:1c:3d:d6:0b:6c:30:ae:0d:a4:48:b2:06:
                    14:f9:3d:87:4d:ab:5a:57:e0:79:2d:bc:13:ce:5c:
                    5f:2e:89:4e:5b:98:f5:3e:ba:f1:6f:6c:42:12:63:
                    85:39:34:02:59:77:8e:1b:34:09:1c:ab:f9:84:32:
                    d9:49:c1:42:97:06:8f:96:21:61:17:ab:6f:17:25:
                    3d:16:89:52:22:24:81:5b:ac:e1:01:3b:b2:1f:29:
                    e7:26:b2:57:3c:85:c8:e0:9d:cd:da:66:aa:e0:21:
                    2b:85:9b:30:24:b4:b4:e5:00:ac:7c:f5:ce:10:96:
                    bb:fd:98:b3:ac:1d:04:f5:58:78:58:51:ca:ff:d2:
                    a0:73:b3:19:99:a2:18:0f:87:93:3a:de:c6:bd:24:
                    98:25:23:39:f1:8c:98:aa:96:2e:6e:a3:d6:b8:b3:
                    c1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4B:C8:64:60:50:44:62:3D:A6:11:B1:8E:FA:8A:07:83:79:64:2A
            X509v3 Authority Key Identifier:
                keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e7:71:5b:6c:f8:e1:11:ed:3c:d3:c9:17:5d:7a:0a:44:61:
         83:95:34:60:69:dc:08:f9:55:8c:f5:43:7f:12:a6:a2:68:64:
         d1:cd:3d:1b:4e:a5:65:f5:be:0a:e4:56:cc:90:57:74:b7:a8:
         bb:1e:03:ac:77:ac:56:65:1e:4e:13:6e:b8:74:bc:a7:33:34:
         41:c6:89:d5:6c:29:d2:0d:f4:eb:54:8d:41:f3:5f:7d:eb:81:
         bb:72:b4:6d:09:aa:fa:c4:95:56:19:1d:14:75:c7:06:62:06:
         27:a3:61:3a:97:2b:51:41:01:97:28:c4:79:c2:12:a2:1f:bf:
         2e:a8:a1:d1:b7:57:1e:89:40:96:03:de:7b:12:99:03:ab:be:
         7e:d9:fc:01:a6:4c:98:49:a9:6a:b0:61:41:a7:08:00:1a:7d:
         6b:2c:b6:77:81:d7:42:b1:31:0f:0a:fc:43:d2:21:80:04:a3:
         2c:a3:ae:5a:c5:de:38:85:49:23:a2:85:7a:26:ec:f3:27:af:
         6c:2a:3c:a8:0e:6f:a6:40:3d:96:ab:e5:b1:a2:11:d1:51:bf:
         53:37:21:32:0d:b2:34:c4:72:80:54:79:be:8f:9f:ae:f6:fd:
         b8:b9:92:33:cd:9a:7f:7b:29:a4:91:01:7c:02:23:8c:1d:23:
         29:c3:06:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:19 2025 by rpki-client