This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
File:                     9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json)
Hash identifier:          dqXqDF01ikGI99uROR8fmNLGam9VhroORbK9fKQZvGY=
Subject key identifier:   E0:E0:D9:46:17:67:9A:21:C8:5B:83:49:67:6D:12:C2:4A:25:2D:87
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Certificate issuer:       /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial:       045D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
Manifest number:          0458
Signing time:             Sat 20 Dec 2025 23:25:43 +0000
Manifest this update:     Sat 20 Dec 2025 23:25:42 +0000
Manifest next update:     Sat 27 Dec 2025 23:25:42 +0000
Files and hashes:         1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: +pFRqxoHLsb5jDn6qgc++keM8F52raDpz/wUByYEFbA=)
                          2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: q3e8py5/C6+zKkUP8OOrbssys+IzckfYmM1B63yGsr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
                          rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
        Validity
            Not Before: Dec 20 23:25:42 2025 GMT
            Not After : Dec 27 23:25:42 2025 GMT
        Subject: CN=69473076-ee2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:ca:63:f5:da:ed:11:6a:98:63:71:98:39:
                    c5:29:12:7e:63:30:ed:9c:5d:90:2c:c5:f0:03:77:
                    8c:01:73:4b:59:d7:92:c2:7d:4b:af:bc:89:ac:68:
                    1e:79:9b:b0:83:0f:66:f7:70:11:a5:1d:77:17:05:
                    d4:8f:68:2e:f7:17:dc:8a:7a:fc:e3:97:57:bb:4a:
                    70:8e:e0:48:8e:c1:f0:56:85:c3:c9:6c:1b:8e:ec:
                    80:ee:29:0a:0f:42:3e:81:44:f8:69:05:1f:84:73:
                    92:17:32:b3:7c:00:23:2f:0d:88:7d:06:f4:75:af:
                    ff:9b:1a:76:b8:4c:65:84:f5:b8:12:93:00:ae:0d:
                    ed:57:23:f9:e1:0f:fd:6a:19:74:00:4a:b3:92:97:
                    99:e5:48:34:e4:ca:87:73:3e:5d:a2:9a:b2:94:ce:
                    b0:5a:8c:f5:8f:5a:5c:32:3f:1a:5f:8f:a3:86:b9:
                    86:67:9b:89:0e:0c:10:9c:80:03:00:b2:52:05:d8:
                    5d:a3:56:04:eb:cb:5a:ae:20:dc:ac:17:24:fc:bb:
                    c7:5e:86:c7:8f:99:73:43:92:6f:e8:fc:be:b7:89:
                    27:71:a6:f7:59:e9:88:36:d9:2c:b7:11:24:10:12:
                    a9:a8:62:14:8b:6d:9a:b8:ed:26:68:a8:4a:3f:98:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E0:D9:46:17:67:9A:21:C8:5B:83:49:67:6D:12:C2:4A:25:2D:87
            X509v3 Authority Key Identifier:
                keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fc:2c:55:c1:fa:09:1d:0f:46:fc:0c:af:72:f6:9e:c4:3f:
         a1:22:6b:27:29:d7:57:56:c4:3f:e9:8f:0f:a3:61:1c:72:e9:
         ba:a2:61:6e:f5:15:9f:e8:2a:cb:27:28:e0:c6:b7:56:80:04:
         41:d4:6f:d8:40:ea:30:50:08:df:d6:67:db:55:b1:4d:3a:20:
         74:23:db:d9:09:59:6d:7b:d8:7e:d6:10:86:fd:d6:7c:4f:8b:
         08:08:00:5a:82:a6:ab:9f:e7:63:93:1c:74:bf:3e:ee:d3:4f:
         2e:24:4d:0f:d2:5b:9d:08:4c:32:41:e0:51:1e:b0:35:22:29:
         cc:59:b1:ea:11:32:6c:8b:99:bb:aa:eb:4f:83:ba:43:ca:65:
         8b:d0:a3:55:ba:47:ba:db:4b:c5:4b:01:7e:aa:a9:1d:19:c6:
         7d:33:09:19:4b:4e:9b:86:6e:48:38:af:21:40:87:dd:51:3d:
         dc:13:6f:6c:79:8d:68:8c:7d:b7:9e:24:88:1e:d2:93:63:f2:
         e4:57:26:b2:cb:24:44:41:f6:2d:dd:75:bc:3f:b1:c3:7e:bf:
         0b:a9:3d:23:1d:aa:52:a9:2e:8d:af:b4:94:75:12:f4:ee:db:
         36:d6:1b:84:ad:27:94:4a:d8:61:9c:b8:91:e9:db:62:da:47:
         0e:3a:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:30:38 2025 by rpki-client