This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
File:                     4D9YAHuXKQulI0NZeReytqtd0uk.mft (raw, json)
Hash identifier:          M2k+Sp6R5snXutjUjMK51apV79m7HKqR3iVROxWXiE0=
Subject key identifier:   E2:31:76:6B:6B:03:74:B9:AE:AA:42:6B:68:97:3E:55:BF:6F:24:2F
Authority key identifier: E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9
Certificate issuer:       /CN=A9166646/serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9
Certificate serial:       0655
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
Manifest number:          064F
Signing time:             Sun 14 Dec 2025 21:58:56 +0000
Manifest this update:     Sun 14 Dec 2025 21:58:55 +0000
Manifest next update:     Sun 21 Dec 2025 21:58:55 +0000
Files and hashes:         1: 4D9YAHuXKQulI0NZeReytqtd0uk.crl (hash: PvmCPKXJb2ilBM+00GbbPMi3BUoJtAVQauG51GfqDHo=)
                          2: 5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa (hash: 8DukUXHtreFdKUgIvZrKvql5wqzBY6PJqfjiVtGIfJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl
                          rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 21:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1621 (0x655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166646, serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9
        Validity
            Not Before: Dec 14 21:58:55 2025 GMT
            Not After : Dec 21 21:58:55 2025 GMT
        Subject: CN=693f3320-5a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:b2:d6:4c:54:c6:2c:21:64:24:02:43:b7:
                    6c:59:68:0d:3a:08:87:b1:c3:c8:0a:ed:7d:8a:02:
                    f5:8a:9b:6b:6a:d5:86:14:45:09:61:22:cc:a4:79:
                    db:23:9a:7a:bc:3f:31:5f:81:01:43:ef:5f:5a:5f:
                    07:2a:c2:29:64:34:eb:34:2b:da:f5:bd:01:79:ca:
                    00:23:6a:c0:f4:89:9b:5d:83:5c:62:c5:59:41:ef:
                    d5:94:08:67:93:0c:1b:5d:a6:81:30:6a:a4:89:49:
                    be:96:31:41:3a:17:17:a2:6e:df:0c:35:71:1f:cb:
                    22:b1:a4:95:4d:ed:4b:27:2f:69:47:33:94:36:f8:
                    c9:a0:98:de:65:ab:3e:87:9b:a3:82:61:47:90:87:
                    27:43:f2:fe:98:53:1f:fa:47:c2:35:cb:68:a6:ef:
                    7c:c9:95:46:47:50:e0:bf:68:9b:da:30:56:be:b8:
                    c0:e7:d8:71:21:e7:c4:b5:e2:ed:cc:07:da:49:00:
                    b4:3c:0e:c9:87:ec:0c:4b:0b:46:fe:11:2d:eb:d9:
                    54:ec:38:35:bd:5a:d4:6e:a3:bc:4f:78:c3:37:22:
                    d1:3d:1e:97:88:c4:ab:85:c0:8f:62:31:9e:b4:0e:
                    80:a9:49:d8:90:b5:e6:5e:fd:f2:d8:6e:24:62:12:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:31:76:6B:6B:03:74:B9:AE:AA:42:6B:68:97:3E:55:BF:6F:24:2F
            X509v3 Authority Key Identifier:
                keyid:E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:58:27:73:c1:6a:92:87:33:3b:23:eb:cf:ee:98:aa:95:
         66:0d:47:1b:f4:67:75:fe:0a:66:01:41:93:1e:cc:b0:27:12:
         15:ad:1f:96:90:28:c3:68:66:58:79:19:d3:33:e8:b5:04:de:
         ec:b2:d1:f7:bc:ef:b6:68:dc:c7:90:b2:f4:69:df:09:4c:7c:
         d7:23:b3:0d:77:7c:40:47:d2:0a:64:95:29:fd:34:46:1a:30:
         24:25:79:e3:5b:4f:bc:c2:73:e3:0d:6d:8d:0f:4f:53:88:39:
         62:14:5d:23:4b:46:db:5f:44:29:7b:52:ca:7a:bb:05:a1:e7:
         81:a0:7b:fe:8f:01:f4:dc:de:cd:8f:94:a0:5e:3c:fa:e1:4e:
         d0:1b:fa:5b:25:52:b4:f8:df:da:c3:b9:78:f2:42:0f:28:f0:
         1e:ca:2c:a4:68:3f:bb:cd:07:e9:47:f2:54:24:e9:59:c3:e1:
         34:fa:2a:0d:78:4e:84:21:82:b0:28:69:d2:fa:84:88:9c:53:
         14:7c:7b:5d:68:8a:04:fd:e5:de:69:70:05:6b:99:7c:be:74:
         09:98:5f:e1:c8:fd:af:a2:f6:a3:90:ff:94:3c:24:49:e3:7e:
         76:eb:07:db:20:d4:db:72:90:72:5b:f6:99:57:6f:a2:8e:e5:
         6b:c9:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:35:31 2025 by rpki-client