This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
File:                     9h-6phkp0QD6mdvUgM6MLE7nP_E.mft (raw, json)
Hash identifier:          lsiuXJGIkdEPhZ3ZpPckfBIXVEbEEY87xBVcwqaYRQE=
Subject key identifier:   51:DA:EC:7A:BF:C9:AF:EF:39:08:E8:F9:10:36:98:06:C9:D4:6B:21
Authority key identifier: F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1
Certificate issuer:       /CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1
Certificate serial:       0B22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
Manifest number:          0B12
Signing time:             Thu 18 Dec 2025 18:58:41 +0000
Manifest this update:     Thu 18 Dec 2025 18:58:40 +0000
Manifest next update:     Thu 25 Dec 2025 18:58:40 +0000
Files and hashes:         1: 9h-6phkp0QD6mdvUgM6MLE7nP_E.crl (hash: GMrDK9MoV4wKduJrcdX+OxTNt8S7nc5d6BhMnUckWlE=)
                          2: FDF734905C9D11EA91DB3C7CC4F9AE02.roa (hash: ZB/XfqBKM35BChOfNeH73Xcv15BjLpg57liIwDqKZNM=)
                          3: 8DB89FC2572311EA9D4ED562C4F9AE02.roa (hash: 1aqtxp2J2JsvIo1/VQw5SrYLRxMsUviaPnpmuA9JAhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl
                          rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2850 (0xb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EAFB, serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1
        Validity
            Not Before: Dec 18 18:58:40 2025 GMT
            Not After : Dec 25 18:58:40 2025 GMT
        Subject: CN=69444ee1-d0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:dd:7a:78:09:26:ce:f2:d9:8e:4c:e1:a4:
                    64:a6:bb:39:c8:77:76:7a:a4:c0:99:97:d4:71:15:
                    cf:2a:04:ac:31:ee:fb:4b:e4:09:87:5d:07:18:1b:
                    cc:c6:be:29:ab:e5:88:ff:f4:1d:6a:7f:1b:1f:68:
                    fc:75:69:87:07:ea:69:7d:c3:b4:a0:b6:90:3d:d1:
                    b2:c7:c5:2a:5b:bc:db:56:b9:8e:b8:c5:a0:7b:bb:
                    bb:86:2a:f1:54:b7:c4:c1:cd:57:56:f2:2e:4a:69:
                    55:71:df:3d:8f:ea:b0:52:57:17:65:62:f5:d5:42:
                    40:73:39:03:09:2a:0d:99:a9:3c:c6:aa:53:c0:4b:
                    7b:69:eb:67:ac:c1:65:8b:30:05:e9:91:69:2e:14:
                    2a:50:b5:24:03:ec:10:2e:a2:69:36:38:e6:b9:2a:
                    d4:6d:31:35:b6:99:9e:c4:0c:62:0c:4a:36:60:83:
                    32:e2:d6:2d:fb:c1:5e:a4:e7:51:72:18:b5:35:24:
                    42:d4:84:b4:9b:95:f9:ff:50:1c:96:f7:7a:8c:ab:
                    aa:31:3e:1c:04:83:c8:51:b3:2e:80:0c:dd:4b:6f:
                    f5:c8:e0:c0:df:7a:e0:74:c1:16:58:ee:63:e1:42:
                    7c:ee:b7:1d:f8:58:70:23:e2:b4:ca:df:dd:9b:21:
                    e8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DA:EC:7A:BF:C9:AF:EF:39:08:E8:F9:10:36:98:06:C9:D4:6B:21
            X509v3 Authority Key Identifier:
                keyid:F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:06:b7:4a:e3:bd:76:23:c8:53:74:28:16:ec:9e:b3:94:8e:
         d7:f1:d9:e2:52:13:11:73:1d:2e:88:a6:dc:78:bc:1d:eb:a6:
         52:84:5d:dd:8b:d9:d6:4d:f0:9b:74:e2:13:70:37:86:da:2c:
         74:06:95:08:e4:7e:c1:a6:6e:93:e9:24:44:d1:50:df:92:cd:
         04:4c:06:0c:27:56:50:7e:a1:d7:a0:e6:4f:ea:67:9f:97:72:
         df:bb:23:6e:2a:cf:f8:01:63:63:7c:48:f0:1c:e4:1d:37:a1:
         b6:e2:c7:a7:a6:9a:a3:c9:50:d5:2e:79:b6:8d:a5:6d:30:d2:
         ad:e9:71:53:40:9e:31:38:38:81:fb:da:f6:4a:cc:74:9c:28:
         a9:bb:26:a7:c0:eb:af:13:b2:e2:77:d2:0d:8b:21:b3:c1:e9:
         09:e3:62:fa:91:d1:9c:19:57:fa:e9:94:8a:4e:32:b1:4c:48:
         ab:ca:90:23:17:27:c9:ba:e1:76:ae:48:46:f3:b6:61:bb:14:
         7d:20:b4:de:16:ed:dc:8f:3e:89:fe:e9:40:4a:3c:2f:76:ff:
         3e:2c:94:62:e2:18:7b:d3:84:f1:5b:5c:5d:d0:da:bd:cc:5d:
         ba:cb:f2:52:12:07:c1:b0:4b:d8:ee:89:2c:97:a2:83:95:07:
         83:e5:b6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:01:52 2025 by rpki-client