This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
File:                     cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json)
Hash identifier:          q0d8QT1ABgTs8DHd1ZjpOAsIoETT8fGZWchyz+QtRzM=
Subject key identifier:   7B:30:7C:26:E5:4F:32:FF:D5:B6:E5:11:9B:12:CC:4A:4B:E9:C1:C0
Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7
Certificate issuer:       /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
Manifest number:          E0
Signing time:             Sun 21 Dec 2025 04:43:03 +0000
Manifest this update:     Sun 21 Dec 2025 04:43:02 +0000
Manifest next update:     Sun 28 Dec 2025 04:43:02 +0000
Files and hashes:         1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: r1abITQ0g460NDt9jw16azzQdge2oBKg2VrFzSNiGpQ=)
                          2: 24DBC31AB1BA11F080D32309C4F9AE02.roa (hash: DjittWRdAffVgO8I1/RanskoHfF+LyXiqCMNUerKMSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl
                          rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
        Validity
            Not Before: Dec 21 04:43:02 2025 GMT
            Not After : Dec 28 04:43:02 2025 GMT
        Subject: CN=69477ad7-f098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d6:54:f0:fe:d7:af:fd:63:13:89:38:85:98:
                    04:a2:3e:9d:6b:00:40:1a:68:19:c0:94:54:f5:0b:
                    c9:db:7f:38:f5:f6:40:06:d7:6e:41:c1:bb:1c:cc:
                    50:34:d8:fe:de:94:15:c5:52:ac:91:ed:9d:b1:55:
                    4c:f5:0b:87:83:dd:25:d0:49:6b:3b:e3:9f:80:52:
                    69:93:43:fd:18:a2:82:e2:1f:fb:21:f6:29:2a:0f:
                    75:c3:4c:f8:0c:07:12:a2:65:5e:17:d0:26:65:d9:
                    4e:cb:cc:e7:00:65:9b:5c:ab:77:de:de:73:12:cb:
                    00:ea:82:73:90:a9:c6:d9:38:11:f2:31:2f:e1:c2:
                    85:cb:7a:4e:81:bb:7d:5e:f6:b4:6a:b4:cf:fb:d5:
                    6b:c9:2e:8e:7a:99:b4:89:0a:29:49:1a:ef:ae:68:
                    02:ff:3b:40:d3:58:2b:80:16:c3:1d:61:0c:e3:2e:
                    6b:9f:80:7f:74:9d:17:ca:ef:40:62:21:31:a2:5a:
                    d2:04:aa:b6:3b:92:53:0c:c4:10:d4:ee:15:da:ee:
                    03:29:5f:9d:ca:e4:b1:c8:41:7b:69:a4:30:c7:79:
                    c4:34:a3:74:4d:80:c9:44:48:b6:9a:51:c9:59:7d:
                    ae:31:03:d1:65:cf:7a:3a:f5:e1:30:11:1e:37:68:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:30:7C:26:E5:4F:32:FF:D5:B6:E5:11:9B:12:CC:4A:4B:E9:C1:C0
            X509v3 Authority Key Identifier:
                keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c2:7b:c1:a5:9f:bc:68:fe:00:80:77:2d:73:6e:51:58:f0:
         f1:44:7d:5b:f5:c9:46:9f:61:56:f7:60:e1:45:e4:00:37:d6:
         39:d3:0a:d1:af:06:be:31:55:1c:d9:6a:1b:df:ef:c4:19:74:
         5a:52:90:82:54:4c:04:35:ad:03:5f:d8:4a:f4:2b:43:1c:7d:
         c2:5f:79:bb:fd:25:f1:bf:5d:fc:a8:94:d7:97:de:9b:e2:e6:
         2b:c8:49:09:eb:ff:6f:87:76:70:4f:61:d6:54:75:de:10:73:
         2c:1d:ad:32:96:16:7b:a1:c0:18:06:cf:36:74:39:a7:69:70:
         2f:2a:82:ca:c3:bd:8f:af:cc:2f:31:c5:fd:27:99:26:84:71:
         fb:b0:48:40:08:a3:cc:be:dc:19:c3:25:90:52:06:46:41:41:
         0a:15:bf:70:84:a3:59:7c:2f:49:92:00:eb:1d:47:00:1a:91:
         c2:32:b6:85:b2:cc:12:39:b3:e1:e3:64:6b:99:68:84:2c:83:
         eb:f0:42:e3:bb:0b:ce:fe:94:d3:66:38:4b:d5:a8:33:4e:19:
         99:50:0a:79:c7:27:f4:3c:08:18:03:43:ca:f6:02:8b:41:af:
         a0:46:3d:9f:8c:3d:1a:e2:e7:6d:b3:02:4d:cc:e5:9c:89:27:
         59:39:88:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:42:27 2025 by rpki-client