This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
File:                     9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json)
Hash identifier:          Voj2MPcbUGEttZBZRfqFg1NYb3YkYphO7g04NCrHe0Q=
Subject key identifier:   6A:17:72:19:3E:99:52:29:20:94:DC:76:C4:0D:1B:7A:32:A8:F0:24
Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D
Certificate issuer:       /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D
Certificate serial:       0579
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
Manifest number:          0573
Signing time:             Sun 28 Dec 2025 22:30:14 +0000
Manifest this update:     Sun 28 Dec 2025 22:30:13 +0000
Manifest next update:     Sun 04 Jan 2026 22:30:13 +0000
Files and hashes:         1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: kTHUZvwOnk0zni1Py57BAX5PQtwCHCw4hfgm5VbRo2o=)
                          2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: GBlJBvL9mw9TcJgwkIpDEFzq0c16HJn6FF84wJKDCP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl
                          rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 22:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401 (0x579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91852BA, serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D
        Validity
            Not Before: Dec 28 22:30:13 2025 GMT
            Not After : Jan  4 22:30:13 2026 GMT
        Subject: CN=6951af75-0eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:a1:24:87:e9:9f:b7:c2:7a:4a:1c:f8:5c:
                    45:9b:1d:96:9e:7c:cd:71:e1:ef:ce:92:2f:27:93:
                    a9:9d:46:a0:0f:76:48:4d:65:25:15:f4:77:68:bb:
                    d2:6b:ed:b4:cb:32:38:bb:c5:0e:44:35:0d:c2:79:
                    ce:89:03:72:6e:ed:ac:ca:31:45:a0:75:c4:10:96:
                    79:43:62:36:a9:1f:52:c0:30:cd:4d:fa:53:b1:14:
                    61:30:03:b7:d5:5e:a4:df:9a:1f:46:ec:32:98:ee:
                    67:48:8e:dc:da:61:46:3c:07:84:86:a9:de:50:3c:
                    0c:4c:0a:85:86:d6:6e:d0:59:87:72:4d:f3:36:ca:
                    3b:47:bf:8f:f0:d9:29:0b:1d:4b:91:1b:cd:be:48:
                    f9:77:b2:cc:89:01:d5:22:9b:17:b8:41:a4:47:aa:
                    7b:6d:40:60:67:eb:ca:7a:ea:5a:42:10:e8:d3:4c:
                    59:37:cb:d0:b3:af:fb:e4:51:2d:77:d7:6d:85:4b:
                    ef:5c:6d:5c:54:50:7a:b3:e0:1e:8f:4d:10:c6:a2:
                    6e:81:f3:e4:fb:0b:0d:06:dd:57:34:ec:6b:ef:08:
                    38:c4:11:77:08:aa:d9:73:07:d9:e3:aa:95:8c:e5:
                    a0:12:28:ba:56:18:1a:0c:13:04:f7:89:dc:08:55:
                    60:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:17:72:19:3E:99:52:29:20:94:DC:76:C4:0D:1B:7A:32:A8:F0:24
            X509v3 Authority Key Identifier:
                keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a4:10:51:1d:59:12:3d:f0:c7:ca:01:c2:2d:b2:ee:e5:8d:
         1f:f0:9e:95:12:ec:16:1f:9f:06:f3:16:e8:55:bc:6d:9f:b4:
         52:c9:9e:d0:2e:df:a1:ab:b5:73:d9:df:b2:17:5b:56:c1:98:
         ae:73:82:05:a1:24:2e:ad:b9:67:76:16:c9:b2:9c:09:97:4e:
         ca:d0:97:6b:b1:5a:9c:c2:62:63:0d:52:9c:a4:c6:24:a9:3b:
         b3:76:25:a8:f4:db:e8:a4:9d:30:9c:33:ed:f5:e3:d6:fc:7b:
         81:28:ec:c8:9c:b9:16:3f:70:21:3f:b2:d7:0a:6d:2d:fb:f5:
         8b:f6:d1:ed:2a:54:33:17:a6:75:cc:2e:81:c9:af:63:2a:a3:
         a3:35:99:8f:a2:6d:ce:df:9d:48:68:38:7e:ca:96:34:5e:4d:
         ad:bb:37:e3:b5:9e:40:81:1f:49:b9:ae:8f:a1:c5:78:ed:a9:
         75:9e:51:2d:c0:3d:73:d1:44:09:f2:2d:5e:8c:18:15:a2:29:
         cd:fc:36:a3:b3:1b:4f:14:89:d4:c1:0c:25:5e:16:cd:8a:6d:
         f0:24:28:52:04:36:96:c9:05:cc:63:da:d5:46:8c:64:87:9e:
         75:c6:72:4c:d0:9a:7e:ec:eb:d7:d0:b1:5e:93:44:87:e3:81:
         7c:28:79:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5
RDBBMTdBNEQwHhcNMjUxMjI4MjIzMDEzWhcNMjYwMTA0MjIzMDEzWjAYMRYwFAYD
VQQDDA02OTUxYWY3NS0wZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAppKhJIfpn7fCekoc+FxFmx2WnnzNceHvzpIvJ5OpnUagD3ZITWUlFfR3aLvS
a+20yzI4u8UORDUNwnnOiQNybu2syjFFoHXEEJZ5Q2I2qR9SwDDNTfpTsRRhMAO3
1V6k35ofRuwymO5nSI7c2mFGPAeEhqneUDwMTAqFhtZu0FmHck3zNso7R7+P8Nkp
Cx1LkRvNvkj5d7LMiQHVIpsXuEGkR6p7bUBgZ+vKeupaQhDo00xZN8vQs6/75FEt
d9dthUvvXG1cVFB6s+Aej00QxqJugfPk+wsNBt1XNOxr7wg4xBF3CKrZcwfZ46qV
jOWgEii6VhgaDBME94ncCFVgEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoXchk+
mVIpIJTcdsQNG3oyqPAkMB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC
Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl
azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTJCQS84NTY1MTdDMDBCQ0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpU
ZDJIVGlZRmRQSjZkQ2hlazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAapBBRHVkSPfDHygHCLbLu5Y0f8J6VEuwWH58G8xboVbxtn7RSyZ7Q
Lt+hq7Vz2d+yF1tWwZiuc4IFoSQurblndhbJspwJl07K0JdrsVqcwmJjDVKcpMYk
qTuzdiWo9NvopJ0wnDPt9ePW/HuBKOzInLkWP3AhP7LXCm0t+/WL9tHtKlQzF6Z1
zC6Bya9jKqOjNZmPom3O351IaDh+ypY0Xk2tuzfjtZ5AgR9Jua6PocV47al1nlEt
wD1z0UQJ8i1ejBgVoinN/DajsxtPFInUwQwlXhbNim3wJChSBDaWyQXMY9rVRoxk
h551xnJM0Jp+7OvX0LFek0SH44F8KHny
-----END CERTIFICATE-----
Generated at Mon Dec 29 08:31:42 2025 by rpki-client