This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
File:                     mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json)
Hash identifier:          lPAsZDpK83ox0mASOiHUG24sMMA8PdbqtG0M9C/Dkfw=
Subject key identifier:   8C:0B:4A:5F:84:82:09:24:7A:C7:0C:95:A3:C5:98:80:56:F0:F3:9B
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Certificate issuer:       /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
Manifest number:          0184
Signing time:             Fri 19 Dec 2025 02:48:01 +0000
Manifest this update:     Fri 19 Dec 2025 02:48:00 +0000
Manifest next update:     Fri 26 Dec 2025 02:48:00 +0000
Files and hashes:         1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: 0A5alJFIGGpLZnsgNeemxX/SjXpYm9+xyKj93oCkN4A=)
                          2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: WCeA5fOBWFOKkLb8P073mp5LsBAsFbEzZHlJDI60+6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761
        Validity
            Not Before: Dec 19 02:48:00 2025 GMT
            Not After : Dec 26 02:48:00 2025 GMT
        Subject: CN=6944bce0-2d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:a4:3e:73:41:d0:b7:f0:48:90:93:ba:ed:
                    fe:90:d9:bb:13:d5:ba:df:5a:4b:67:02:45:f4:4e:
                    eb:e1:07:e0:44:d6:30:f7:11:11:51:d5:dd:ae:5d:
                    22:4b:3e:34:e8:2c:ff:39:c0:4d:35:ac:17:14:28:
                    c5:47:ca:43:33:b8:8a:a5:16:37:d0:dd:cc:fc:8f:
                    e0:53:ab:11:1d:2d:4a:5e:57:0a:c3:93:f4:62:46:
                    0a:cc:ca:89:b8:f2:8e:94:2e:4b:3b:6e:b9:08:47:
                    85:ed:f6:a1:1d:c6:c0:d7:ab:8f:21:46:0e:90:99:
                    4e:21:ca:1b:f5:16:28:c8:86:2a:86:58:91:d9:0a:
                    40:cb:e4:62:e9:84:6b:76:5f:2c:a9:64:2c:34:e6:
                    a9:3d:7d:02:ac:9e:12:51:1e:2f:2e:bd:7f:5d:15:
                    bb:85:40:e7:60:9c:f5:4e:26:90:81:91:43:30:03:
                    ca:cd:d4:fc:0b:23:3a:d9:f6:7f:98:39:05:e4:c4:
                    01:8f:7d:24:13:02:89:f7:12:6d:db:12:bd:02:d8:
                    0a:c8:b1:d2:be:70:7c:ce:b5:e0:e6:83:22:4b:b2:
                    c7:2c:70:1f:31:c5:a7:f7:4c:52:37:42:17:39:03:
                    6c:b2:b4:f2:a9:f8:86:bd:47:59:d7:83:e4:a1:bd:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0B:4A:5F:84:82:09:24:7A:C7:0C:95:A3:C5:98:80:56:F0:F3:9B
            X509v3 Authority Key Identifier:
                keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:37:28:b4:bf:77:64:94:51:1a:17:bb:e8:d3:df:07:32:32:
         a1:ff:0a:bb:55:d3:ca:45:75:72:23:bb:4a:0e:46:45:d3:f2:
         e9:15:65:24:82:29:2d:a9:58:f7:7c:cf:ce:7c:3b:d0:ad:aa:
         59:da:1f:c5:bf:a2:17:8a:04:79:34:e8:c2:17:1f:38:0c:4f:
         d7:71:54:f2:69:4a:a3:b9:0d:48:6d:06:d8:a3:54:e6:72:c4:
         52:89:49:ed:41:ca:f7:f2:1d:dd:a0:53:0d:d9:f3:2f:50:e1:
         25:b6:fa:19:b0:8e:94:8d:68:d0:0c:dc:3c:d0:84:f6:90:aa:
         cb:11:86:67:59:8f:0d:c6:02:d7:dd:a0:f8:c4:b8:8a:a4:ba:
         51:91:95:e6:b9:1d:45:47:85:43:a8:c3:ce:f4:6e:dc:2d:d4:
         88:72:4d:4d:ea:93:e8:bf:5d:c0:9d:29:f5:fe:c5:75:99:b5:
         35:98:f8:21:00:1a:b0:9d:27:c6:8b:97:19:39:3e:3c:20:0a:
         54:2e:c6:e7:48:46:a1:59:af:96:f9:1a:78:b7:07:07:9e:15:
         78:f2:56:b8:74:5a:1d:fc:a7:14:4f:23:e6:93:e3:02:2c:67:
         24:e6:5f:86:8c:51:46:32:41:68:47:f4:e8:77:89:fb:05:3f:
         79:c6:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:01:00 2025 by rpki-client