This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
File:                     sLGl1VkrzlyB63JtRkDKlVEEzpM.mft (raw, json)
Hash identifier:          UQxF/R7eRyhB6XFgM0g1m5oia2dFEKBNASxyANKCkkA=
Subject key identifier:   E1:EB:99:73:C6:E2:4A:37:63:44:5D:F9:A7:6B:A5:03:35:DB:68:2A
Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93
Certificate issuer:       /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
Certificate serial:       0B79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
Manifest number:          0B6C
Signing time:             Sat 20 Dec 2025 18:42:58 +0000
Manifest this update:     Sat 20 Dec 2025 18:42:58 +0000
Manifest next update:     Sat 27 Dec 2025 18:42:58 +0000
Files and hashes:         1: sLGl1VkrzlyB63JtRkDKlVEEzpM.crl (hash: 0ij/IUycyWkitiY+sdmmAnNvc2bS0In5z7DXgDmuKCM=)
                          2: E91D4C42E19011EC8E1ECA75C4F9AE02.roa (hash: ZetAVFLz5a9A9d96t5a3lmM5CeQl7iCEfmN2/6tRSWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl
                          rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 18:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2937 (0xb79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181259, serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
        Validity
            Not Before: Dec 20 18:42:58 2025 GMT
            Not After : Dec 27 18:42:58 2025 GMT
        Subject: CN=6946ee32-6c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5e:03:77:52:eb:56:27:99:91:56:fa:1e:c1:
                    2f:cb:e3:82:a5:ff:84:33:ab:9c:f7:9a:c2:44:6a:
                    d3:80:17:d3:21:b5:be:4c:b9:ce:af:d8:42:af:63:
                    21:ae:0f:46:80:f4:e9:d3:88:61:e6:19:71:78:c5:
                    05:38:44:04:03:01:37:2f:b8:fe:7a:86:f1:b2:89:
                    35:c1:89:60:6d:73:75:b8:4e:8c:d6:4c:af:a6:be:
                    c8:04:8a:dd:e7:79:70:6a:e6:5d:ac:e0:df:46:c9:
                    7f:41:ab:91:3b:63:b1:20:52:0f:ac:7f:97:23:6d:
                    db:4c:0e:ca:62:3c:82:7a:d0:d2:db:04:00:e3:fb:
                    22:5e:74:c8:c0:ec:85:07:6a:fd:87:73:ec:c0:8e:
                    3b:3a:9c:af:c0:da:6a:d1:27:94:c2:ea:dd:3e:76:
                    9e:3b:36:f3:4b:e8:33:e2:3d:6a:58:1d:ed:71:e6:
                    b2:fe:f9:62:72:63:d0:f6:54:78:02:2b:d3:75:a5:
                    dc:8a:c4:a4:60:c1:18:c0:2e:a0:b9:03:f3:98:b3:
                    8a:3f:aa:82:1f:ef:3d:2b:ba:e6:91:7a:66:b2:1d:
                    f0:54:62:1d:31:4a:2b:1d:b4:68:be:d9:cd:78:85:
                    a4:2a:ed:82:9a:4f:71:cb:44:91:3f:50:05:67:a3:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EB:99:73:C6:E2:4A:37:63:44:5D:F9:A7:6B:A5:03:35:DB:68:2A
            X509v3 Authority Key Identifier:
                keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ae:ec:85:61:4e:0f:0e:26:99:8f:d8:12:38:c6:a6:dc:09:
         da:8d:e3:4f:26:48:11:37:63:4b:32:e8:d7:dd:c5:82:9b:53:
         e1:c2:40:89:b0:f7:a9:bc:76:fb:26:4d:df:44:6c:3e:a5:95:
         72:01:2e:81:22:6f:ad:79:39:5d:53:4d:cb:85:4e:62:ed:02:
         d3:a4:50:8a:9c:2e:2a:f6:25:e3:09:a0:3f:70:90:2b:54:89:
         cf:56:b6:8a:3b:df:f0:86:d5:de:04:46:cb:0f:c4:e0:5a:c5:
         9f:52:d8:09:02:a8:83:9e:8f:c0:36:81:1d:08:a7:c0:2f:90:
         24:c0:0c:95:af:61:6f:ea:bf:59:a4:97:ad:f6:66:b6:5f:00:
         60:04:a8:e7:d2:e4:51:6c:37:4b:6e:96:12:a8:db:4d:44:6a:
         35:42:59:cf:17:46:f1:36:63:f0:83:6e:d2:c7:4d:40:27:6a:
         bd:e3:4b:b6:3b:d1:d7:c6:84:35:28:81:e4:6e:7a:e7:17:66:
         b6:e7:1f:5f:2e:0a:8d:1b:8e:9d:40:ab:ed:26:0f:e8:bb:5a:
         a6:ce:47:5c:49:a7:9a:6d:f6:68:91:41:b7:27:10:34:50:b1:
         ff:2f:bb:b1:d0:9d:36:8e:6b:b1:ed:36:a7:76:6f:69:10:20:
         3b:86:af:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:34:28 2025 by rpki-client