This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
File:                     125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json)
Hash identifier:          lCSxqqxKjfkEvkWB9vR+uYhGuxPvUaehB3fR+lhDHG4=
Subject key identifier:   93:AB:0D:8A:DC:BF:5F:5B:4C:00:E8:5B:98:8E:AD:2A:B7:E9:B6:65
Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC
Certificate issuer:       /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
Certificate serial:       0579
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
Manifest number:          0571
Signing time:             Tue 30 Dec 2025 22:33:19 +0000
Manifest this update:     Tue 30 Dec 2025 22:33:19 +0000
Manifest next update:     Tue 06 Jan 2026 22:33:19 +0000
Files and hashes:         1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: HrNkl6Kqy6FDIm/GAFb1wOm/K0J1c33Tb3EQNKcLMZE=)
                          2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: 8MfWeNhYxhDpcu3Q2id403p9h7HPr5MWk8+ke8t8UDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl
                          rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 22:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401 (0x579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187C44, serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
        Validity
            Not Before: Dec 30 22:33:19 2025 GMT
            Not After : Jan  6 22:33:19 2026 GMT
        Subject: CN=6954532f-01c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:40:34:e0:84:2b:d8:e0:07:e6:f2:d0:5f:
                    70:76:21:91:a7:5b:48:7a:43:d8:c6:67:a6:7c:9a:
                    5e:15:e7:f9:77:1f:69:19:60:ce:12:5a:b7:c1:86:
                    65:7a:4f:82:fa:22:5d:dd:fe:b2:17:30:d6:2f:75:
                    6b:1f:5d:f5:e2:4b:a9:a7:3f:f1:e6:04:de:2c:e4:
                    92:3c:0c:47:ef:65:31:d6:3c:36:15:74:39:dc:65:
                    57:bc:28:25:d3:67:66:e2:f7:81:93:67:20:5e:5e:
                    11:47:20:61:19:a9:c2:6c:09:e1:ed:2e:33:6a:92:
                    37:fc:5a:f9:9d:51:d9:2b:34:2e:47:c6:e3:b4:1e:
                    fa:15:d2:05:6a:a8:ff:11:df:f7:82:96:80:27:14:
                    73:6c:92:4f:33:68:58:7b:3d:50:93:fc:2e:cd:6e:
                    53:2e:78:72:a4:71:9c:8e:f6:6f:21:e6:1f:b9:e4:
                    c7:17:d8:23:33:8f:aa:13:00:69:51:ff:30:bd:59:
                    53:37:a2:3e:89:fc:23:8a:6c:a3:d3:82:7a:2d:e1:
                    0b:e0:71:90:f4:e0:fd:30:57:98:fb:1e:5f:52:b1:
                    8d:4d:53:08:2f:e0:41:33:2a:86:8d:e6:34:46:02:
                    a8:b2:02:cf:e0:75:a2:f9:36:2a:49:75:93:4c:f0:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AB:0D:8A:DC:BF:5F:5B:4C:00:E8:5B:98:8E:AD:2A:B7:E9:B6:65
            X509v3 Authority Key Identifier:
                keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:05:f4:31:05:9f:98:88:00:f7:17:a1:01:00:d9:47:4e:7e:
         80:82:8a:df:0b:e2:c9:18:90:39:45:fc:f5:7d:b2:d5:db:52:
         48:77:87:45:11:14:48:02:9b:b0:6d:bd:a0:df:30:fd:78:8d:
         65:14:81:7b:6d:19:93:c1:b2:5c:29:f8:ec:84:c5:3e:c9:bb:
         ee:ad:ac:b7:92:56:e8:e6:53:da:92:28:ee:2d:c5:16:b4:87:
         a5:6f:2a:b5:c7:b0:ce:33:e6:de:f1:74:25:a5:b2:05:6c:27:
         f7:1d:1a:52:51:b2:25:dd:41:df:4d:53:6b:47:19:60:94:92:
         ef:55:fd:f5:dd:16:a5:78:d2:96:b2:27:6f:df:9b:8d:37:68:
         74:f3:ce:72:07:a1:dd:51:b2:d9:6b:6a:a5:55:54:57:71:c5:
         d7:a2:f7:ab:e5:8d:26:78:a4:af:85:be:88:c6:1f:7f:39:3a:
         7a:f5:1a:ab:02:c6:9c:e0:3c:26:bd:9a:3a:2f:8e:05:cf:80:
         a7:a5:7e:6a:69:87:0a:22:4d:9a:42:df:92:bf:e5:77:96:6b:
         29:9f:c8:f3:4d:af:f2:bb:97:32:36:74:c7:68:71:b3:fe:07:
         12:69:71:df:76:ee:4e:6e:ff:58:32:1e:02:c0:ce:86:d4:35:
         7d:cc:90:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 22:50:31 2025 by rpki-client