This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File:                     siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier:          bcsG2rrp8S6fBE6AtmbYLxDSowdvURk5Pp1q//0jHY0=
Subject key identifier:   1E:1B:50:9B:7C:D3:BC:CC:39:B6:FF:AE:FD:7E:84:D6:4C:A3:42:D8
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number:          0187
Signing time:             Sat 27 Dec 2025 17:23:40 +0000
Manifest this update:     Sat 27 Dec 2025 17:23:40 +0000
Manifest next update:     Sat 03 Jan 2026 17:23:40 +0000
Files and hashes:         1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: Iz74q4E5PnRjt++3+JdoZD5QZYs9hctbRNvZI/b1RJM=)
                          2: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: aDzusaC8Tp4Xh29QzEkDqXm9UtTCSIlF3bFjfnnKcb4=)
                          3: ABCE17E0E15511F0A05B89F1756F56BC.roa (hash: bEqFzt4iqjMszLsbKerzNS5dHxf3l4GzKg2aJu4NNeY=)
                          4: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: yi/JlbD7n+64UZKPjWeRYXCwO+TbmKfGvCIR+gFBIgU=)
                          5: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: 4bqguqQkO2NdVWuTGwGDP28FXTuH4VtBBVIWhIpTMAk=)
                          6: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: Rw5/f7mwiL2A4bDLQlquOGpfyNbiDbGp1uerfy4o6ls=)
                          7: BB17221E211611F08D31C34DC4F9AE02.roa (hash: ROJzIN797AliUmkcNaXXEwujC8/puzfhlC19YDeoFFk=)
                          8: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: EN6MJJBs25VJA8BxPoTDjeqUMnebmHL6ptBQ7dXtzww=)
                          9: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: 9NSBUz8m7XvUpzDF2q/kWtrtqPYOWvRlzQxmdt8OCJc=)
                          10: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: 5GSc16lAwm/VgJPQr9dFvZJgXnG3knNsBXTvWJ5YEVU=)
                          11: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: kdnh0lY80uMfga5l6WUOTwTWs5iXaL/0Tn0l6KDoAeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 17:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Dec 27 17:23:40 2025 GMT
            Not After : Jan  3 17:23:40 2026 GMT
        Subject: CN=6950161c-7c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:04:44:1f:e6:12:26:66:e4:b9:bd:4e:d3:
                    32:9b:c1:78:12:9d:4e:03:b3:55:d0:c8:82:f9:07:
                    4d:e3:d6:be:24:0a:8f:d7:b1:77:2c:61:e0:93:95:
                    5e:2a:05:ad:1d:fc:c2:2e:c4:a8:3d:0e:a7:81:da:
                    db:3a:bb:7a:b0:21:a7:02:3d:a4:ba:95:98:e4:27:
                    4c:6a:58:c1:31:db:7b:1d:af:77:b7:22:90:41:79:
                    b7:1a:8c:43:c4:05:af:65:a7:87:bd:41:f4:fc:67:
                    8b:c0:37:2e:4a:2a:e3:7a:c0:a8:ce:2b:4c:ec:e9:
                    f3:df:86:9c:ee:fd:c5:12:f1:1f:13:1f:86:35:f3:
                    a6:7c:fa:3f:f8:ae:de:35:ae:61:bc:ba:c8:85:3e:
                    2d:64:d3:be:bd:e3:47:70:9e:96:53:05:87:17:f9:
                    e1:15:b1:91:8a:eb:99:54:b7:2c:2d:de:72:d9:f4:
                    f6:e2:d7:f8:d6:86:e6:8a:e9:5d:60:3e:13:99:44:
                    87:90:cf:cd:fb:cd:16:43:b5:fa:7b:b1:2e:9a:16:
                    cd:4a:47:f9:97:60:37:50:79:6a:30:0f:f0:b6:59:
                    7c:52:44:1d:5a:da:26:2f:b9:12:93:fa:44:8e:53:
                    55:6f:66:c9:6e:32:1f:4a:de:dc:69:80:af:19:7d:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1B:50:9B:7C:D3:BC:CC:39:B6:FF:AE:FD:7E:84:D6:4C:A3:42:D8
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:fd:e4:6a:bd:74:62:49:18:35:1b:06:00:fd:72:91:df:cb:
         34:e3:39:0e:04:bf:6f:06:d3:27:34:67:b1:ee:73:b0:09:ff:
         f0:de:ff:f9:f5:70:e5:eb:27:ba:63:e8:45:7f:9c:b7:d9:05:
         ff:69:f0:a9:cc:b4:11:96:59:df:35:79:fe:15:4e:b5:c9:22:
         0c:ea:d7:3e:1f:0e:7e:2f:cb:e2:ae:33:08:54:c6:8d:9f:14:
         f4:e7:8f:78:97:f3:4d:ea:86:cb:bd:ec:09:cc:4d:2e:be:95:
         8b:d0:4e:87:00:02:2d:12:ba:d9:bf:f4:5b:ef:ff:08:97:a6:
         0a:d6:73:c7:c0:a7:52:0b:c7:83:70:c4:65:56:c0:93:b3:93:
         f8:48:27:9f:4a:03:fc:cc:41:20:46:ee:73:f6:89:5d:2e:2d:
         eb:d9:23:09:6c:67:60:10:6a:24:02:a6:18:cf:f7:b4:55:65:
         0f:44:f9:6d:d2:9a:29:46:ef:45:1b:51:bf:97:a4:b3:df:0d:
         f2:06:b6:42:52:80:8b:bd:d6:bf:42:41:1c:81:6d:aa:e1:96:
         ee:d9:d3:a7:51:65:93:5e:d4:d4:79:33:cb:84:c6:ff:d0:71:
         0b:59:84:97:df:17:39:cd:d3:aa:d5:86:d6:68:2a:ea:bd:2b:
         c9:d1:76:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 23:43:43 2025 by rpki-client