This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
File:                     rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json)
Hash identifier:          3ZnjLFHq1wZYt4DEkWMysMuSsNCLKQlmLCCgmlP9e4Y=
Subject key identifier:   62:58:F9:44:A3:8E:18:EE:91:7C:77:1A:16:2A:10:92:7B:30:C7:91
Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80
Certificate issuer:       /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80
Certificate serial:       3586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
Manifest number:          3540
Signing time:             Tue 16 Dec 2025 14:40:06 +0000
Manifest this update:     Tue 16 Dec 2025 14:40:06 +0000
Manifest next update:     Tue 23 Dec 2025 14:40:06 +0000
Files and hashes:         1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: jA8ls47IvQge90gxg/JaLeWU4xaVNt+fY1ZFtqjS1PQ=)
                          2: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: h9F1tXbUdsyNYFPUVJCB1ist/+nNZLk15lU+6OKai0c=)
                          3: F8A618E05E3511F0ACCE4C26C4F9AE02.roa (hash: m2j1B34dLV8e+8aZDtrd8sUHvxPLnZ+q1nP+VwT9JTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl
                          rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 14:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191A09, serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80
        Validity
            Not Before: Dec 16 14:40:06 2025 GMT
            Not After : Dec 23 14:40:06 2025 GMT
        Subject: CN=69416f46-362e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:07:03:af:67:bf:62:d4:73:e7:04:29:22:
                    17:c1:78:54:65:a9:db:91:dd:61:4f:c6:ce:e3:b1:
                    55:02:1d:de:28:7d:b0:75:96:76:19:21:2a:6a:7f:
                    3f:3e:82:d6:d8:c9:27:48:2e:fd:ac:0f:19:45:4f:
                    c2:38:27:0e:09:92:76:10:48:97:e7:9b:32:47:67:
                    bc:ba:62:bf:ff:57:c0:f5:c0:a9:b7:46:ee:7c:46:
                    83:76:5e:e8:a3:57:d4:05:71:b4:1d:07:89:7f:f6:
                    cd:ee:87:a3:73:ac:fa:79:c5:da:9d:d3:ef:9b:63:
                    e2:53:cb:6f:a4:2f:16:0f:e1:7a:d7:44:18:8f:a1:
                    e0:05:bb:00:7e:25:16:d4:52:bf:21:1c:e2:e4:e6:
                    ae:d1:41:ed:62:94:37:e6:9c:79:07:10:f6:37:4b:
                    8d:fd:ae:fa:fc:f1:0a:50:e0:ec:9a:57:1e:60:1f:
                    a7:02:63:6b:da:b9:89:72:5e:cf:69:94:c1:01:c9:
                    94:14:65:44:d2:bf:35:5a:5e:c6:26:f4:a1:14:ac:
                    49:00:0c:bc:0c:7b:9c:ea:4e:ea:bb:22:22:f5:f8:
                    28:cb:3c:35:07:33:50:bc:15:fd:7a:80:9f:aa:93:
                    d7:e3:dc:9b:b5:0f:93:f9:8b:29:3c:f1:e2:c1:ca:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:58:F9:44:A3:8E:18:EE:91:7C:77:1A:16:2A:10:92:7B:30:C7:91
            X509v3 Authority Key Identifier:
                keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a9:dc:f8:0b:82:66:8c:90:4b:89:1b:e3:46:88:f1:2a:73:
         e3:0e:1f:3c:ed:e3:ed:18:1d:97:51:15:5a:a3:ed:a0:a8:ef:
         13:7b:d9:2b:11:0d:14:7e:b3:f1:a7:9e:7c:d6:c3:a7:13:03:
         3e:6f:96:83:d7:73:41:46:cf:47:38:ed:17:65:2d:05:45:89:
         0e:44:e2:80:33:a5:bb:a8:1a:15:6c:9f:11:d5:9f:e8:6f:da:
         9d:89:54:06:ae:0d:d7:ee:c5:e6:1b:82:bb:1e:29:ab:8d:56:
         85:c5:b9:90:16:b0:ec:11:60:cf:04:59:54:73:36:a9:0f:55:
         7e:be:0e:cb:77:af:97:e1:fb:6b:05:8a:46:5f:19:64:55:c3:
         94:1b:1b:47:bb:f0:84:b1:8d:74:07:f4:8e:b7:d5:a6:f0:35:
         0f:0a:70:88:80:ab:f0:39:7b:3a:f6:21:6c:97:7f:03:5a:07:
         91:28:bf:11:ab:3b:31:e7:5a:bb:4a:e7:74:e5:c9:85:dc:a0:
         66:a4:a8:51:c4:68:49:7f:f0:b9:4d:2b:6e:ea:7e:27:02:3c:
         56:23:db:63:3b:27:29:4f:c9:21:a3:24:ed:4c:4b:04:39:4d:
         01:02:7f:2f:d3:d1:f5:05:1a:79:21:9f:0b:4e:b9:d2:d4:ab:
         73:bc:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:40:39 2025 by rpki-client