This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
File:                     9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft (raw, json)
Hash identifier:          /TKi5kFjxeIrs4dsofFPU8M8gFZk1BhED3Qd1ATKUVM=
Subject key identifier:   72:F0:5B:4E:62:E1:17:72:70:F3:38:45:6F:46:1C:DE:B2:78:27:88
Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0
Certificate issuer:       /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0
Certificate serial:       0E3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
Manifest number:          0E38
Signing time:             Sun 28 Dec 2025 17:27:42 +0000
Manifest this update:     Sun 28 Dec 2025 17:27:42 +0000
Manifest next update:     Sun 04 Jan 2026 17:27:42 +0000
Files and hashes:         1: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl (hash: 4bht9IK/pBaiZSMg0KakARO0yOeH21Ecky/XF/4rUaQ=)
                          2: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (hash: NGmhercCoJ9hcEnfypdSk09ukBq8+ACpPHXM0iho7j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl
                          rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 17:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3647 (0xe3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165226, serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0
        Validity
            Not Before: Dec 28 17:27:42 2025 GMT
            Not After : Jan  4 17:27:42 2026 GMT
        Subject: CN=6951688e-9c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:ae:0e:77:65:cf:22:0c:41:58:14:90:2d:
                    4c:f5:c4:8f:67:06:18:e0:1f:b2:2b:5a:ad:7e:27:
                    ca:ec:6c:89:18:11:e9:ab:42:0d:e9:20:d7:6f:8d:
                    c9:f9:1a:7c:51:65:30:6a:23:42:3a:75:57:d6:64:
                    ca:ae:03:e4:e3:a0:ed:33:5e:0e:61:70:8d:64:ab:
                    90:b0:51:8b:9f:ed:0f:43:53:2d:51:41:93:f0:9a:
                    c3:48:17:d0:ed:a3:c9:45:d2:dd:b6:3f:87:0c:9c:
                    8d:e2:34:51:09:9a:72:7d:43:94:a1:22:e2:a7:a2:
                    9f:55:81:d3:0c:d4:35:a6:dd:e0:2d:82:36:9d:d5:
                    65:91:7e:98:51:8b:d7:e7:4c:7b:6c:51:f2:06:e0:
                    05:88:04:de:87:d6:aa:b9:3d:58:56:ae:f5:15:c3:
                    97:8c:bd:8e:aa:82:96:50:68:f4:98:32:b4:f4:b5:
                    4f:a9:e2:82:17:97:0c:a1:fc:be:3e:43:bc:1b:e7:
                    f6:13:fc:85:e7:47:6b:d6:49:9b:ee:80:bd:7a:e4:
                    a7:86:71:6c:12:42:2a:1e:20:86:d8:3b:73:8a:95:
                    51:40:9d:d5:56:a0:ae:0f:cb:46:68:94:fc:da:d3:
                    1c:e0:cf:2a:ef:5a:d0:d4:45:81:0d:08:fe:7a:f8:
                    ba:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F0:5B:4E:62:E1:17:72:70:F3:38:45:6F:46:1C:DE:B2:78:27:88
            X509v3 Authority Key Identifier:
                keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7b:90:26:98:89:c2:b7:e0:f5:09:e1:21:64:84:8d:9b:48:
         da:b8:25:5b:17:f7:ec:9d:a3:5f:50:31:84:10:7e:a3:5c:50:
         de:e1:53:da:33:a0:08:91:a8:3f:fa:b8:e5:2b:84:ad:d1:bf:
         62:bf:c1:a4:58:0b:55:40:42:98:72:22:42:cb:60:5b:34:4f:
         7e:2b:f7:7f:4b:7b:5c:50:14:fc:74:75:54:3c:6c:86:65:c7:
         0c:0a:b2:a3:3e:b4:b0:0b:75:44:8a:c8:a0:e2:f9:35:26:fc:
         ef:ad:ca:a2:85:91:70:99:85:b7:a2:6c:60:e1:88:37:1c:f9:
         63:44:63:83:b2:ed:29:06:fd:54:19:bb:85:f4:30:cb:dd:ba:
         23:52:79:51:ff:4c:9f:b0:41:a5:4e:10:95:d6:33:99:b2:88:
         50:b8:f0:f0:d3:97:49:71:0a:cb:5a:79:16:ad:ae:60:b1:dc:
         ed:f5:18:4d:f3:40:fd:c5:7f:55:76:48:74:c7:6f:c1:95:c8:
         a6:d7:99:0c:57:ac:6a:f5:3c:0f:82:10:2a:ef:4d:f8:2c:c0:
         b0:03:49:d8:8b:11:d6:3c:0d:fb:07:8d:e8:99:8b:e7:cc:bc:
         45:86:cd:e3:2c:f5:90:3c:5b:72:44:a0:5c:69:e3:5d:db:f7:
         17:fa:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 06:48:52 2025 by rpki-client