This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
File:                     10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json)
Hash identifier:          fy8hwt6Jt9oYNulW9XiSSCO52RC1LKwwcVWumZrjaMA=
Subject key identifier:   B6:61:04:B0:29:75:2E:82:30:F3:3A:93:43:B0:AC:6A:6C:41:B2:6E
Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
Certificate issuer:       /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
Manifest number:          015A
Signing time:             Fri 19 Dec 2025 03:21:30 +0000
Manifest this update:     Fri 19 Dec 2025 03:21:30 +0000
Manifest next update:     Fri 26 Dec 2025 03:21:30 +0000
Files and hashes:         1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: KjLVA4SSNc8XN1npHU/CJycOM/BGhY1krKwab/yhXEY=)
                          2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: LAsIeNhYt5BHF0IaKn+G+8QXRLdvDCA/uEEEFG9I+DM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl
                          rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BAF, serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
        Validity
            Not Before: Dec 19 03:21:30 2025 GMT
            Not After : Dec 26 03:21:30 2025 GMT
        Subject: CN=6944c4ba-cb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:da:81:24:f7:39:e3:d3:80:9c:92:fd:34:
                    89:12:d6:4c:9a:b5:3e:59:5f:db:84:e9:e9:b9:b5:
                    c3:dd:87:2e:7b:6b:16:19:6e:79:59:f4:41:bc:e2:
                    cc:38:89:67:93:f1:1f:41:75:6a:a9:11:80:b7:e7:
                    58:7b:0c:f2:00:52:bf:b0:00:87:b3:c0:2f:bd:b0:
                    01:44:06:82:2b:5b:8a:df:8b:31:72:29:7f:d8:6f:
                    d0:2d:7d:69:10:19:6d:6d:0a:92:71:f1:ee:a7:74:
                    62:1e:18:24:fc:70:d4:ca:ed:45:38:f6:a6:64:53:
                    9d:c0:67:ad:f5:63:f2:ba:ec:84:e6:d8:ad:0c:0a:
                    80:6b:62:01:81:b3:1d:7b:27:5f:80:a3:8e:9d:30:
                    67:c2:97:0a:cf:53:7b:f1:01:9f:02:de:bb:bb:f5:
                    5e:78:1f:8b:2f:37:ad:c4:86:03:07:eb:54:92:4a:
                    f1:b7:7c:30:c9:be:c7:e8:79:be:ff:79:94:b7:89:
                    d8:3c:16:07:6c:2e:3c:ed:e3:ed:8b:79:a9:a5:0a:
                    c0:bd:d5:82:17:ca:4a:35:3d:64:14:d2:02:91:f5:
                    75:9a:d7:d9:1a:b2:bd:05:7d:62:55:25:af:64:a4:
                    c4:61:9c:4e:8b:1e:a9:0f:36:55:3a:c8:df:ef:31:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:61:04:B0:29:75:2E:82:30:F3:3A:93:43:B0:AC:6A:6C:41:B2:6E
            X509v3 Authority Key Identifier:
                keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:46:45:99:73:d6:76:f2:f0:e4:13:91:a6:91:63:8e:e3:28:
         79:5a:c7:25:a7:09:1c:df:fe:3c:6d:7a:16:4a:c7:08:4d:01:
         7f:cd:52:37:3d:13:5c:8b:ba:cd:5c:14:8d:04:7f:d8:85:23:
         23:6b:70:b6:46:d2:06:85:8c:56:b5:d0:2d:05:1e:24:cd:d1:
         83:9b:1c:46:9f:35:3d:f2:a3:8e:be:d5:d6:5c:ac:0c:a5:9e:
         e2:1a:a5:21:85:6a:05:5b:05:ca:c4:0b:81:58:84:96:f8:1d:
         3e:25:f2:28:77:63:df:d5:f5:f2:bb:47:a0:9c:35:f0:be:ec:
         8b:d2:22:73:3c:47:af:9d:92:45:29:35:c5:26:d5:bd:04:f5:
         d4:2e:fa:75:60:31:c1:d3:00:1a:79:6d:e7:da:0f:e9:53:b0:
         55:a8:26:ff:61:a1:ba:a3:b4:0e:5a:b7:43:b9:bc:a2:36:b0:
         00:9e:af:c5:d7:01:63:4a:d8:82:bb:25:8f:63:9a:0f:ea:dc:
         4c:ed:24:9c:ff:39:e0:7f:04:2e:74:d8:6b:ba:c7:29:57:c4:
         80:dc:f4:fe:03:8e:3a:2c:58:00:e4:c5:d4:5b:bb:1c:90:a0:
         bc:ab:97:5a:9b:0c:ac:87:34:b6:51:50:58:ae:ee:47:4a:1f:
         12:32:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:38 2025 by rpki-client