This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
File:                     f99iGPoBXQoAdKhEJFGAaij53fU.mft (raw, json)
Hash identifier:          S7Ed+FBqt+EljowNHTE4wgQLrvLq2HXnDhg9I/Lwy5g=
Subject key identifier:   29:BF:A5:C8:AA:72:27:6E:63:6B:3F:95:32:F5:62:8C:9C:EF:0C:C8
Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5
Certificate issuer:       /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
Certificate serial:       0812
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
Manifest number:          080B
Signing time:             Thu 18 Dec 2025 20:28:40 +0000
Manifest this update:     Thu 18 Dec 2025 20:28:39 +0000
Manifest next update:     Thu 25 Dec 2025 20:28:39 +0000
Files and hashes:         1: f99iGPoBXQoAdKhEJFGAaij53fU.crl (hash: 8XnJT/sC85fCuyM19lHZTxmyKs0GsJHgwIBPIrQ05tY=)
                          2: 7FAEDE3A03B411EBBB548A5EC4F9AE02.roa (hash: zYkuWCX1X2lloXdYhvISAPhidi7ivs3H5XjhpAN4fng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl
                          rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2066 (0x812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173060, serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
        Validity
            Not Before: Dec 18 20:28:39 2025 GMT
            Not After : Dec 25 20:28:39 2025 GMT
        Subject: CN=694463f7-6aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:b1:63:f9:bd:56:f8:25:e4:bb:2b:ef:d4:
                    84:89:5f:bf:70:46:72:60:51:f1:64:80:a9:fd:4c:
                    92:d4:8b:99:47:52:da:72:96:49:cb:3a:d2:b4:63:
                    88:5e:04:5c:2f:89:ef:74:ef:12:15:d2:96:db:c4:
                    9b:7a:09:48:25:38:ae:58:b3:cb:16:42:5f:f7:65:
                    3b:95:7a:a1:16:85:55:94:f1:b6:8a:d2:ef:b6:1d:
                    9b:bc:ed:0a:78:c6:79:1f:56:95:1e:c0:88:c7:91:
                    ee:c9:c7:af:d2:62:f5:4b:19:71:96:f3:b3:c5:55:
                    4c:55:7a:6c:ce:d3:e0:96:02:da:2b:c4:97:9e:53:
                    32:84:01:00:50:63:a3:b2:d3:dd:1a:70:37:f2:ba:
                    b0:c6:9f:e4:07:4a:74:68:76:1a:1f:dd:25:fc:d0:
                    a8:db:48:2e:2d:95:e2:e9:f7:9a:af:5c:c4:c6:09:
                    dd:53:4d:c5:3e:cd:4a:4b:c5:08:63:06:8a:6f:96:
                    82:14:7c:2e:3b:4c:a6:c1:c4:b7:12:5c:40:dc:b6:
                    bd:34:dd:50:50:0d:10:a1:b6:3e:a6:19:d7:57:6c:
                    b8:9f:92:5c:c8:cf:d0:e5:a2:e8:f2:e4:59:e7:70:
                    3f:6e:59:57:d7:cc:f0:0d:97:50:ce:32:ba:9b:bd:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BF:A5:C8:AA:72:27:6E:63:6B:3F:95:32:F5:62:8C:9C:EF:0C:C8
            X509v3 Authority Key Identifier:
                keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8d:e9:72:c0:9b:30:25:7e:ec:db:af:59:61:d8:a6:80:dc:
         63:29:86:ea:4b:c5:1e:fd:99:a3:ed:9b:0a:b4:5c:5a:3e:f2:
         1e:30:38:68:1e:4e:dc:7c:9c:e6:9e:8c:2a:df:6d:f0:f1:fa:
         9b:e5:7b:da:59:d4:e0:0a:d0:d2:41:d4:a0:8b:98:75:a9:68:
         ce:15:5a:dd:cf:e1:67:0a:69:88:d1:a9:59:a1:d1:dc:1a:61:
         46:6f:b2:74:f6:f2:78:a6:83:b4:cf:0a:13:a2:bc:c1:20:cf:
         73:da:c0:b2:4d:f0:b6:3d:da:5a:07:f0:ce:1d:f6:a3:51:39:
         20:58:8e:70:f6:41:a2:e5:7d:40:1c:c1:2d:e5:1f:14:4c:01:
         0e:20:a7:35:9a:43:c7:79:7a:b0:a1:00:9b:47:9f:32:4f:8f:
         a9:bf:82:e9:aa:5a:27:27:37:0d:5c:17:bb:e4:ca:38:aa:3f:
         98:19:d9:09:77:e3:90:f7:97:63:d3:b8:43:e3:96:a0:44:62:
         99:bb:99:cf:1e:18:75:14:da:5d:ad:ff:26:7a:7f:03:eb:b2:
         a7:ed:47:29:56:a0:08:4a:23:e5:e5:f6:1b:e5:7b:d2:21:5f:
         72:ba:00:ed:c4:3f:3f:ee:9f:1f:45:a0:cb:e2:d7:70:c2:0d:
         61:c5:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:50:24 2025 by rpki-client