This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
File:                     Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json)
Hash identifier:          tKmXM7zyFJ21zmiD2k6ScIwx63wW8KWAj+N68bm43aY=
Subject key identifier:   24:15:73:F2:6C:6D:50:B6:A7:93:CF:E6:9D:39:DC:51:01:10:57:66
Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
Certificate issuer:       /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Certificate serial:       0AA9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
Manifest number:          0A9D
Signing time:             Thu 18 Dec 2025 19:10:04 +0000
Manifest this update:     Thu 18 Dec 2025 19:10:04 +0000
Manifest next update:     Thu 25 Dec 2025 19:10:04 +0000
Files and hashes:         1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: MwyOnXzXQJPWDBvvF/oqQ/AQSKBkYaMqbmSRrc/kBjA=)
                          2: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: l+8n3K0f3AeAooimvYQKJeBLoOspZqrmvhsLjnatcyU=)
                          3: 74637BD8AB5911F0A8E57D4AC4F9AE02.roa (hash: 80PaCFFuMnuRM+D3EQkPjurblzfq2cyz9MfOJnMFwd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
                          rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2729 (0xaa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
        Validity
            Not Before: Dec 18 19:10:04 2025 GMT
            Not After : Dec 25 19:10:04 2025 GMT
        Subject: CN=6944518c-f3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:09:92:f3:b9:e9:85:9a:a4:4e:97:1f:e6:65:
                    bf:d7:64:01:df:e8:6e:ac:7d:b5:1d:aa:21:ba:e5:
                    73:91:db:c0:0e:95:2b:8a:06:b8:12:18:30:93:7f:
                    4b:94:66:a1:72:05:ef:62:7c:a1:c8:95:4f:dd:38:
                    9b:4a:ff:f1:ff:73:88:c7:f9:05:d2:3a:90:55:4b:
                    fe:3b:e1:4d:5b:40:09:58:a3:51:33:7e:a6:67:c3:
                    c2:ff:ea:41:4c:8c:be:e8:99:66:9a:31:14:21:e9:
                    b9:3f:0b:8b:a3:f9:39:fe:90:ca:e9:f1:33:bd:2d:
                    61:19:71:13:63:0b:33:70:22:6d:21:07:b2:4b:49:
                    5a:e5:04:47:15:63:a3:83:98:df:5f:a4:40:3d:91:
                    0c:5e:16:d6:a7:72:d3:73:78:ab:a1:75:3d:0e:43:
                    6e:e0:cc:54:93:dc:b2:45:19:2b:01:0b:43:fa:a4:
                    52:13:7e:3d:8a:37:a8:60:89:a2:eb:6e:54:45:c7:
                    29:c6:69:83:1c:36:e0:5c:fe:54:6e:ca:ab:91:99:
                    14:3b:9a:af:3a:c0:d5:b2:ec:87:17:ff:28:80:a6:
                    8e:82:2a:e8:f9:7a:2b:e8:7d:7f:4c:62:7e:ce:48:
                    6c:6d:b3:65:58:f5:6a:5f:d4:e4:e9:37:d7:12:31:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:15:73:F2:6C:6D:50:B6:A7:93:CF:E6:9D:39:DC:51:01:10:57:66
            X509v3 Authority Key Identifier:
                keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3e:07:38:99:f5:3d:60:84:76:0f:d5:3a:e2:b4:d0:cd:c1:
         dd:39:53:44:4d:ec:4e:6c:86:c4:de:33:0d:b5:4c:7a:43:8b:
         b0:48:04:ef:35:f6:c4:21:50:3c:53:db:10:c6:01:d6:09:eb:
         a6:b1:9e:cf:be:09:ce:fa:e7:38:ef:05:8f:ba:f2:1f:9c:d6:
         03:6c:40:e2:b1:20:d0:23:35:0b:d0:55:10:d6:1e:91:13:cf:
         ea:8d:88:9b:0f:ae:f7:1e:10:e4:fc:63:ae:c0:a9:40:1e:0c:
         a5:9a:da:ac:9b:91:2f:0b:bb:75:50:27:c3:01:fc:f2:40:ca:
         9f:17:f8:82:07:ab:59:7f:6d:25:55:c4:56:a1:c2:83:c7:dd:
         9b:89:fa:dc:8e:ce:94:f0:ea:24:bd:ba:91:10:b8:0b:e6:0a:
         4d:ba:b8:09:16:fa:cb:a2:2d:fd:f3:5e:ae:f3:35:b1:ea:f6:
         ea:42:d5:82:f0:b7:36:8b:ef:54:51:cc:92:fe:b8:df:fe:65:
         4a:7f:16:11:75:38:86:f6:75:55:2e:0a:f9:66:da:5e:54:fe:
         51:6d:21:af:aa:41:d1:15:cc:af:cd:88:3c:c0:75:28:37:1c:
         c6:45:5f:91:09:9c:bc:aa:ce:40:c1:e0:3f:35:69:a3:8e:15:
         2b:0a:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:27:48 2025 by rpki-client