This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
File:                     -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json)
Hash identifier:          S+jYjiqSsh067dPuLhWZaWSNLkHsq3EM7axJZgeGaaA=
Subject key identifier:   0B:18:45:51:F6:48:3C:2A:59:DD:9E:63:4E:24:54:3C:E4:06:12:EF
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Certificate issuer:       /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial:       0D21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
Manifest number:          0D03
Signing time:             Thu 18 Dec 2025 17:53:25 +0000
Manifest this update:     Thu 18 Dec 2025 17:53:24 +0000
Manifest next update:     Thu 25 Dec 2025 17:53:24 +0000
Files and hashes:         1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: Qr1500ENG2iXq6QXilMlFgkOVrC1ISxun64poH9uq0M=)
                          2: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=)
                          3: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0=)
                          4: 4AD97410632C11EE96048122C4F9AE02.roa (hash: Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3361 (0xd21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
        Validity
            Not Before: Dec 18 17:53:24 2025 GMT
            Not After : Dec 25 17:53:24 2025 GMT
        Subject: CN=69443f94-d845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b5:5c:ef:23:9c:97:0f:02:84:aa:a9:96:31:
                    72:16:20:e6:a4:fa:cd:ac:fa:9e:3b:db:b5:43:d7:
                    23:bf:cd:df:c0:f1:be:f3:06:fa:0d:e5:a6:cd:a5:
                    21:32:95:cf:df:f0:be:41:20:d7:9f:b2:a4:1e:69:
                    aa:f3:e5:8e:85:a5:05:e6:61:68:a7:fb:69:57:b9:
                    2e:17:6a:2d:2b:b5:58:28:74:21:4d:65:d1:f9:f5:
                    4d:70:78:0a:43:a8:62:d1:9f:40:c6:6a:fc:f7:1a:
                    5e:f4:b2:cc:cf:15:ab:87:61:04:30:be:3e:a4:42:
                    c2:e7:c4:d6:07:bd:4a:5e:a9:51:37:94:b9:4e:f3:
                    fa:31:af:8a:88:f0:fb:75:f8:e2:ef:3b:c1:22:32:
                    72:1d:aa:e2:e7:4f:2b:cf:f9:30:82:57:f8:00:40:
                    36:ae:40:2e:78:26:eb:6e:14:38:62:34:a7:54:fa:
                    07:6f:9d:90:8f:9d:d1:00:1d:f7:e1:a9:8b:70:07:
                    ed:83:cb:eb:0d:0e:b8:c9:ac:86:56:99:b6:db:88:
                    f9:ef:da:24:5f:3b:76:f5:52:3a:f4:98:2d:52:41:
                    a2:c2:55:07:92:73:78:b8:2b:e5:07:8d:4f:4e:61:
                    b2:44:2f:42:61:8d:03:ee:10:0c:64:42:f8:26:e9:
                    89:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:18:45:51:F6:48:3C:2A:59:DD:9E:63:4E:24:54:3C:E4:06:12:EF
            X509v3 Authority Key Identifier:
                keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:c2:85:62:a7:0c:9b:fc:0c:54:ba:50:6c:db:cd:c3:42:2d:
         48:3a:80:ad:d2:00:e6:33:a4:12:21:26:63:df:45:65:91:53:
         7e:3b:dc:18:15:4d:0d:99:2b:af:b9:38:31:4e:39:79:61:c8:
         71:e7:1c:85:83:66:0b:6f:c5:c1:02:65:24:c1:15:54:49:ad:
         c6:99:91:68:0f:e1:8e:67:9f:aa:69:41:c5:fa:33:3f:de:14:
         76:f5:d8:5d:f5:4f:20:b1:b4:a9:bc:6b:35:b3:8b:c6:14:f5:
         a9:15:e7:a2:43:a2:3e:5e:33:71:bc:0c:ab:25:c8:ad:11:b0:
         b7:97:7d:bb:e3:1c:72:39:86:00:fb:ec:14:53:bb:02:93:25:
         35:46:f6:a2:88:62:99:ce:fe:01:3c:75:15:46:4d:77:96:85:
         59:b8:44:75:68:cb:24:44:5d:7f:1d:72:99:ce:b9:83:d4:43:
         ec:da:5e:51:3c:ea:3b:59:12:b4:79:5f:68:20:3b:62:d5:7a:
         f6:ef:63:cd:b4:c8:71:fc:6a:25:ad:00:d6:b1:00:77:63:d1:
         dd:e6:be:50:6a:27:12:ea:43:43:0b:79:87:ed:eb:54:96:ea:
         1c:13:33:2e:4d:94:fd:4d:4e:b5:f2:06:b7:b8:ca:91:c2:87:
         ac:05:5e:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE
QjFBNTBEQTQwHhcNMjUxMjE4MTc1MzI0WhcNMjUxMjI1MTc1MzI0WjAYMRYwFAYD
VQQDDA02OTQ0M2Y5NC1kODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3rVc7yOclw8ChKqpljFyFiDmpPrNrPqeO9u1Q9cjv83fwPG+8wb6DeWmzaUh
MpXP3/C+QSDXn7KkHmmq8+WOhaUF5mFop/tpV7kuF2otK7VYKHQhTWXR+fVNcHgK
Q6hi0Z9Axmr89xpe9LLMzxWrh2EEML4+pELC58TWB71KXqlRN5S5TvP6Ma+KiPD7
dfji7zvBIjJyHari508rz/kwglf4AEA2rkAueCbrbhQ4YjSnVPoHb52Qj53RAB33
4amLcAftg8vrDQ64yayGVpm224j579okXzt29VI69JgtUkGiwlUHknN4uCvlB41P
TmGyRC9CYY0D7hAMZEL4JumJEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsYRVH2
SDwqWd2eY04kVDzkBhLvMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2
N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R
U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDqwoVipwyb/AxUulBs283DQi1IOoCt0gDmM6QSISZj30VlkVN+O9wY
FU0NmSuvuTgxTjl5Ychx5xyFg2YLb8XBAmUkwRVUSa3GmZFoD+GOZ5+qaUHF+jM/
3hR29dhd9U8gsbSpvGs1s4vGFPWpFeeiQ6I+XjNxvAyrJcitEbC3l3274xxyOYYA
++wUU7sCkyU1RvaiiGKZzv4BPHUVRk13loVZuER1aMskRF1/HXKZzrmD1EPs2l5R
POo7WRK0eV9oIDti1Xr272PNtMhx/GolrQDWsQB3Y9Hd5r5QaicS6kNDC3mH7etU
luocEzMuTZT9TU618ga3uMqRwoesBV5i
-----END CERTIFICATE-----
Generated at Sat Dec 20 03:23:23 2025 by rpki-client