This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
File:                     -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json)
Hash identifier:          s4CL0vH9ux1GOKZ4PEwYiKr+yMmUxu920GYFpvnK9Aw=
Subject key identifier:   75:0F:0A:67:04:6C:DF:3F:5E:7C:B6:DB:34:87:5D:27:61:79:12:8D
Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
Certificate issuer:       /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
Manifest number:          9D
Signing time:             Fri 19 Dec 2025 05:25:29 +0000
Manifest this update:     Fri 19 Dec 2025 05:25:28 +0000
Manifest next update:     Fri 26 Dec 2025 05:25:28 +0000
Files and hashes:         1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: 5pGFcdcIksc5O67zd+1s+5+kwudbF87v0B2uv98+HB0=)
                          2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: 0+vRm59ex9NMyreeXhWeUcmkTmPtMjioToFn5xjtXJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
                          rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
        Validity
            Not Before: Dec 19 05:25:28 2025 GMT
            Not After : Dec 26 05:25:28 2025 GMT
        Subject: CN=6944e1c9-0e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:7f:90:c3:5d:6f:8c:ec:7b:6c:5f:5f:b9:
                    c3:a4:77:7c:17:32:e1:6b:f2:c1:a6:68:c1:53:65:
                    00:b4:c5:a7:26:1e:52:63:18:cd:47:c4:22:d6:4a:
                    49:df:46:61:4e:d6:05:b7:62:6e:bf:12:38:1c:4f:
                    7f:3b:22:5c:77:f8:d0:cb:a1:5b:47:00:5f:41:d5:
                    4b:75:5a:77:26:1d:c1:5a:5c:ab:c1:8a:fe:5c:a2:
                    50:e6:5d:57:15:09:04:bf:53:71:7b:68:96:5f:15:
                    76:00:4a:70:6a:99:1f:92:2b:48:3c:e3:a3:a8:32:
                    b1:d0:59:79:66:4c:99:07:ca:04:94:9b:da:19:37:
                    52:47:ca:da:bb:9c:96:c5:f6:0e:b1:52:e8:51:3e:
                    89:a4:ea:5c:15:51:9d:24:c8:bc:25:27:92:55:b2:
                    b3:fc:fd:ec:7d:cf:0c:c1:36:41:34:fc:9d:75:71:
                    41:b8:e2:3c:a4:47:1d:91:ae:c1:d0:5b:39:95:42:
                    7f:ef:30:68:95:45:eb:df:80:a1:3b:45:64:b2:bc:
                    8f:6f:97:c3:2d:19:4a:d4:35:b2:08:f3:20:b1:96:
                    eb:91:33:bb:86:57:e3:24:7e:f5:4e:4b:45:7d:66:
                    0d:74:68:bb:f5:bd:7e:d8:a3:6b:39:20:6c:92:cb:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0F:0A:67:04:6C:DF:3F:5E:7C:B6:DB:34:87:5D:27:61:79:12:8D
            X509v3 Authority Key Identifier:
                keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e7:83:ea:bc:30:e2:2e:24:1f:03:92:26:82:d1:65:2c:14:
         fc:4a:3d:e7:e7:7b:ce:a3:7d:da:92:f7:fa:c5:bf:3b:ee:44:
         4c:82:69:da:94:59:95:e9:5d:eb:66:4b:c2:16:5a:10:06:e8:
         5c:02:2e:86:05:2f:25:16:9b:38:fa:92:14:67:b9:56:94:31:
         b2:0b:b7:17:9a:1a:8a:95:81:15:5d:ff:56:b8:42:82:26:3f:
         ca:32:32:5e:2a:da:28:38:ec:40:df:5f:b8:ea:22:2c:51:fc:
         10:97:49:d8:9c:68:f1:d8:d5:8c:46:c0:ca:af:4b:5f:b2:a8:
         30:0c:0d:8c:db:d4:b3:1c:44:ac:5b:a1:ff:ce:7c:88:12:04:
         94:5d:72:a8:a5:e5:20:4a:f4:3f:5f:39:da:e8:65:f4:f3:44:
         86:2e:ad:1d:33:ef:18:60:03:50:26:9a:08:52:f8:ae:d7:ed:
         68:4d:cf:73:99:58:86:8f:39:04:09:2d:a4:56:33:68:6e:1c:
         37:48:b4:a2:95:9f:13:c4:a2:7e:aa:7a:32:61:97:50:51:6b:
         be:59:d4:f2:b8:e5:91:73:13:6c:38:f9:fd:cc:15:00:1a:29:
         a5:7d:0a:94:00:90:e1:5e:cd:0a:f3:ab:32:0e:76:6a:f3:22:
         61:70:c8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:39 2025 by rpki-client