This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
File:                     10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json)
Hash identifier:          BOZwqH8F61A0ut2ymx6yaQiSniArAo3QNhFjUPiR4Mc=
Subject key identifier:   1D:E8:1F:8B:AF:87:AE:8E:10:F8:1E:23:43:A7:83:06:FD:70:EB:3D
Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
Certificate issuer:       /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
Manifest number:          0160
Signing time:             Wed 31 Dec 2025 03:14:43 +0000
Manifest this update:     Wed 31 Dec 2025 03:14:43 +0000
Manifest next update:     Wed 07 Jan 2026 03:14:43 +0000
Files and hashes:         1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: VB5juJwdgafasUA7F0Lf1Hrz5juEKq3T8sSQCuIKfxk=)
                          2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: LAsIeNhYt5BHF0IaKn+G+8QXRLdvDCA/uEEEFG9I+DM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl
                          rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 03:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BAF, serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
        Validity
            Not Before: Dec 31 03:14:43 2025 GMT
            Not After : Jan  7 03:14:43 2026 GMT
        Subject: CN=69549523-5912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:51:c7:a1:c8:a4:3f:72:22:8e:98:68:63:
                    bf:b9:f7:c5:3d:b4:36:f0:7a:3c:bb:99:11:80:cf:
                    0b:3d:03:7b:3e:70:79:5e:c9:55:49:fa:f9:07:5d:
                    2f:0d:79:27:80:14:81:77:98:49:a9:2f:08:5b:34:
                    a9:2e:3c:9d:23:24:a9:12:99:88:5f:dd:52:fc:69:
                    66:c1:2c:6d:e9:d2:ce:ec:d8:dd:ed:ae:05:c1:1f:
                    c7:a4:a6:64:12:82:16:26:06:73:e4:7e:f0:a4:11:
                    ee:01:26:64:af:e3:f2:d1:e2:3c:5f:de:7d:e0:6c:
                    2e:c2:c7:4a:a8:da:c9:a9:38:36:4f:a7:e0:00:3a:
                    b0:57:cd:8f:16:6d:f7:87:73:10:86:33:bd:06:04:
                    8e:02:12:03:c1:a4:02:c2:92:b7:a1:3f:fd:ea:48:
                    21:ce:f1:b4:91:8d:7e:0c:34:aa:05:0c:e8:80:fb:
                    1f:b4:7f:37:ea:0d:87:05:a5:bd:12:8d:dc:db:21:
                    b7:ba:73:86:c6:2b:97:52:f1:48:fe:33:c3:ce:af:
                    c5:8a:11:59:77:94:40:72:1c:36:8c:32:e5:24:4f:
                    a7:94:af:7d:61:aa:be:03:15:68:8f:40:7f:1b:ac:
                    b2:dd:e7:bc:a2:15:86:3a:19:6e:1d:b4:06:7e:5f:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E8:1F:8B:AF:87:AE:8E:10:F8:1E:23:43:A7:83:06:FD:70:EB:3D
            X509v3 Authority Key Identifier:
                keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:b9:33:d7:c7:ac:e8:0b:98:c1:92:88:47:bc:38:43:2d:d1:
         c9:69:6d:23:bc:8b:5d:0a:e5:b1:0e:de:d5:d0:b9:b6:a4:15:
         b7:20:83:77:58:eb:f8:79:7d:3a:31:ab:4e:67:90:27:f0:b0:
         54:e8:f7:fc:6b:a4:ca:ea:1a:6f:28:ba:52:1f:7d:85:b1:1d:
         10:cd:0d:12:4e:15:0d:db:0e:ae:b0:9d:24:db:55:28:bd:21:
         37:f4:08:21:12:27:49:45:42:19:94:64:66:dd:d9:11:d3:34:
         99:e8:76:76:b4:a1:aa:f4:db:c9:04:8b:92:ba:7b:2e:b1:80:
         3c:66:16:eb:9a:8a:15:9d:6d:e3:ef:b7:62:16:e8:40:cd:87:
         ab:47:36:ef:5f:5b:33:19:2f:b3:b1:55:f2:e1:8b:18:1d:c6:
         7d:07:a7:5b:9f:ef:ab:bf:5f:29:04:93:01:cb:d8:f2:13:ac:
         c8:22:10:71:86:b5:84:c7:a6:71:0e:97:9f:f7:25:34:a8:a7:
         9c:99:c7:20:35:c2:e0:3d:fa:89:4d:91:6a:f5:70:e4:dc:ee:
         5e:a8:f5:26:2d:ee:1a:4a:f6:70:aa:eb:d6:00:3c:4c:99:15:
         de:b8:9e:e7:e1:ff:30:4c:e0:92:83:7d:ec:eb:ae:93:95:36:
         c0:c1:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 10:25:53 2025 by rpki-client