This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
File:                     8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json)
Hash identifier:          PdcbTCoQ9zPGlO+/0HAFNya3g9lo1gH1Xg8wc1kb/I4=
Subject key identifier:   D9:98:D1:47:95:69:17:8A:6D:F7:6D:AF:FB:3B:74:8D:72:81:92:93
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Certificate issuer:       /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
Manifest number:          E9
Signing time:             Wed 17 Dec 2025 04:58:07 +0000
Manifest this update:     Wed 17 Dec 2025 04:58:07 +0000
Manifest next update:     Wed 24 Dec 2025 04:58:07 +0000
Files and hashes:         1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: 6bI3rXinlSegPoPh6P3mL1GHCeG2yHNX7jxVsS1qMco=)
                          2: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: +qIyoxy4aGRwH3KPJiIeeGzTmFk3xSC3JgRiA3rxQ1E=)
                          3: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: i/i9Fi7DO7CQzIWXaTSwtFH1LWaUqhByPYFzXOD85Kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
                          rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 04:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
        Validity
            Not Before: Dec 17 04:58:07 2025 GMT
            Not After : Dec 24 04:58:07 2025 GMT
        Subject: CN=6942385f-a4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:72:8c:e2:a9:74:ae:a5:2d:5e:c0:6b:62:
                    31:51:fe:c0:45:74:78:bf:b9:3a:95:60:56:42:9d:
                    c8:c4:da:41:1a:2a:4f:88:df:53:d4:be:db:5e:00:
                    25:d5:4f:aa:a9:c4:1e:c4:d3:c3:f6:5d:62:ad:cb:
                    3c:df:73:0b:ae:4b:39:10:e6:34:a0:16:38:fa:01:
                    8d:7b:12:d0:48:d1:00:6f:b7:40:a0:f1:9f:ae:15:
                    6b:a3:0d:35:11:3b:cd:3b:e0:74:0b:26:4a:45:5e:
                    75:7c:c1:ef:5d:db:94:61:4d:d3:75:5a:5e:48:30:
                    62:b6:af:b8:8e:62:0b:ee:74:68:f2:c5:11:b4:13:
                    ff:e8:38:21:6a:cb:e2:e3:82:0c:8e:21:d5:b3:e9:
                    c4:c6:bc:7d:55:b7:79:7e:3c:fd:5b:8f:a9:12:d8:
                    49:f9:2a:49:a6:18:39:86:ba:7f:cc:d9:fb:6e:51:
                    dd:c5:43:31:34:1e:37:04:f4:7e:55:a4:85:9b:e3:
                    55:94:65:02:01:03:c7:c6:8e:54:b7:af:1a:39:72:
                    5f:0e:ae:b0:38:e9:09:ef:3a:35:e6:db:a9:fc:fa:
                    91:f8:1f:e5:f7:99:b3:19:7e:fc:88:60:59:37:d0:
                    80:de:f8:b2:f5:93:1a:08:a6:6f:f0:87:00:bf:22:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:98:D1:47:95:69:17:8A:6D:F7:6D:AF:FB:3B:74:8D:72:81:92:93
            X509v3 Authority Key Identifier:
                keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:20:cb:53:e7:80:bd:cb:43:58:10:d2:40:1b:de:9b:b5:92:
         92:57:7e:ae:cb:87:31:dd:ff:41:12:d7:bd:40:70:f3:88:92:
         04:79:45:6c:94:3b:e5:1b:eb:cb:7c:37:54:8f:e7:49:7e:0b:
         5d:c2:4e:d2:9f:38:16:a6:45:3c:68:1c:b0:55:53:21:f4:30:
         11:ce:2c:88:2c:de:45:16:db:54:dd:f9:d1:94:27:30:66:3a:
         73:f1:44:60:6c:5e:de:fb:2d:06:c7:27:df:73:57:d9:71:57:
         09:4f:93:4f:86:9b:1f:86:ab:d3:48:f3:f1:c2:5a:89:40:33:
         fb:0a:a7:47:92:2e:fc:da:a3:27:25:4c:bc:7a:51:26:b0:03:
         c1:81:d5:aa:0f:e5:34:b0:0d:9f:d4:c5:3f:ea:9a:e1:30:8b:
         64:49:2a:06:45:60:2e:f5:33:05:b9:ce:ca:ef:c6:a4:a8:f2:
         34:57:bd:8f:b7:1e:1c:98:80:06:b0:2f:c2:ac:cb:00:8a:7a:
         d9:75:98:6b:da:b9:a8:e2:22:fe:92:b2:a1:2d:7b:e0:df:15:
         3e:35:d6:6b:e5:0a:43:5d:2f:93:72:e7:79:61:85:e9:2d:da:
         47:1d:8b:1a:98:49:3d:6f:6c:11:4e:68:c1:91:74:39:0c:61:
         24:56:6b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:59:36 2025 by rpki-client