This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
File:                     mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json)
Hash identifier:          mPmSgFOcieA+SxlpGb4FqnCY8CWj0K0TzxJt1ndCo50=
Subject key identifier:   C1:4F:AB:F0:89:4C:1B:9A:46:7E:F3:C7:14:1B:FA:71:C7:87:0F:BE
Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09
Certificate issuer:       /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
Certificate serial:       0589
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
Manifest number:          0584
Signing time:             Thu 18 Dec 2025 22:37:49 +0000
Manifest this update:     Thu 18 Dec 2025 22:37:49 +0000
Manifest next update:     Thu 25 Dec 2025 22:37:49 +0000
Files and hashes:         1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: sFFYFxuxatO9FcxGHj6d+pnfwMahEbiL/Sko+53PDnc=)
                          2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: POPDOMnD2vV8xWQMiufmv3X0702RYs86sixhHrnG1/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl
                          rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178D2A, serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
        Validity
            Not Before: Dec 18 22:37:49 2025 GMT
            Not After : Dec 25 22:37:49 2025 GMT
        Subject: CN=6944823d-1330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:71:7e:5e:27:2d:aa:96:3b:a3:1c:4a:7b:
                    33:2e:a7:43:95:e9:ad:a2:ff:91:09:1b:7e:2c:5d:
                    43:55:cd:0e:19:f0:d5:2c:97:b5:94:5e:24:b3:f2:
                    f6:26:36:55:5c:7a:f4:99:12:62:f9:cd:57:9f:7a:
                    3d:cd:11:81:07:c4:0a:5f:0a:30:e6:bf:04:df:32:
                    83:b3:f3:f5:f5:d4:b2:d3:93:5f:cb:b5:2a:fd:0a:
                    a7:32:37:6a:93:46:bb:64:ae:03:df:3b:10:3a:ef:
                    d6:05:7a:91:7f:11:3e:46:4d:a2:1e:0c:88:2b:92:
                    c7:4d:e5:9c:c7:18:52:7d:2e:4d:ad:63:ce:56:f5:
                    df:dc:ca:d5:1d:20:e7:fb:51:b0:63:ab:79:d4:7f:
                    8d:2c:72:e8:96:e3:79:85:18:97:8f:07:8d:90:b6:
                    b6:8b:fe:bc:e7:93:24:e1:f0:6a:d2:36:44:fe:9b:
                    cc:35:2a:a1:81:1e:7c:98:28:77:92:b3:ec:66:75:
                    f5:a8:c5:1a:66:4d:3d:23:79:a4:39:31:f9:12:e1:
                    23:9f:fa:67:ee:94:46:d1:8d:c2:dd:73:60:0f:49:
                    b1:59:74:c3:11:ea:53:a0:d3:36:cd:b9:23:2b:ea:
                    d8:f4:39:fd:4c:21:96:f8:2c:b8:41:2a:48:42:aa:
                    f7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4F:AB:F0:89:4C:1B:9A:46:7E:F3:C7:14:1B:FA:71:C7:87:0F:BE
            X509v3 Authority Key Identifier:
                keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d8:d1:b7:44:80:ce:79:7e:f5:b5:b5:ca:46:a2:61:6b:30:
         63:13:4b:34:0d:4e:de:c1:83:d1:44:86:a5:47:6d:74:2f:5f:
         a7:d6:6f:59:4a:1a:ae:6e:59:10:23:ae:8b:ff:96:a9:43:7b:
         8e:67:3c:ae:f0:20:20:89:5f:d9:ee:ba:ab:75:3a:ef:ce:6b:
         bc:6e:7f:00:71:fb:d6:54:90:ca:75:ae:5c:4d:dc:67:38:a2:
         63:07:34:47:6e:b9:ad:5c:5d:85:2a:a3:38:24:5e:37:b5:3f:
         d6:e3:a4:28:df:0b:1f:fe:17:14:5d:2d:35:cb:66:1b:2c:75:
         26:e7:41:80:0b:c8:3d:dd:40:9d:a3:52:96:f7:de:bb:89:4f:
         a4:50:ce:3d:47:80:6b:dd:7d:87:c0:35:ea:c8:23:8e:b3:c5:
         73:a8:5d:dc:0a:c2:a1:30:67:6f:c9:6b:68:f3:b3:1f:b5:73:
         9a:da:54:d6:17:a3:69:17:df:3e:12:d0:2f:e0:4c:98:60:20:
         ed:af:d3:17:93:db:1e:20:a0:7d:15:e7:a6:d1:5f:b4:13:7e:
         aa:80:a2:bf:cb:44:e5:5b:96:0c:6b:bf:3e:1b:f0:89:bb:7b:
         90:20:63:ca:ed:49:35:33:09:c9:b0:16:04:e9:40:db:b5:08:
         94:3d:36:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:34 2025 by rpki-client