This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
File:                     T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json)
Hash identifier:          mfPNuPidUK2L4KGK8wHQmXd+Tv0tIcL3zeb6xb0MHJ0=
Subject key identifier:   1D:BF:2E:8B:44:65:6D:D3:08:08:35:E6:B1:6B:86:36:C9:1B:FE:EF
Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
Certificate issuer:       /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
Manifest number:          0196
Signing time:             Fri 19 Dec 2025 02:37:09 +0000
Manifest this update:     Fri 19 Dec 2025 02:37:08 +0000
Manifest next update:     Fri 26 Dec 2025 02:37:08 +0000
Files and hashes:         1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: BVVqtemlPcGvhKpmDuUMeWsR8O+PzYdatBqSvp9Zo+g=)
                          2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: 7rc08NoUx6luLOLc4SLZl6pXq3BAAEvf8G5/Y6oZSx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
                          rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
        Validity
            Not Before: Dec 19 02:37:08 2025 GMT
            Not After : Dec 26 02:37:08 2025 GMT
        Subject: CN=6944ba54-2351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:05:5a:bf:8c:46:73:69:94:ea:b0:88:c7:91:
                    01:40:cd:29:db:a5:6a:7c:ef:4b:0d:3d:3d:4f:6c:
                    df:36:17:19:5f:aa:cb:a0:04:65:8e:64:59:80:62:
                    39:fd:25:0f:98:7a:c6:cf:d4:3b:5b:da:29:cc:da:
                    81:f6:e4:71:cd:52:65:8e:d1:42:d1:46:39:d6:6b:
                    1b:a2:28:1d:e9:ea:1b:87:6a:dd:50:43:b0:5f:5b:
                    a3:73:2e:f4:54:09:07:12:7a:14:2d:e6:9c:5a:f4:
                    57:79:71:2d:b3:a7:1a:45:30:25:d9:75:42:fe:4c:
                    61:5c:69:a4:e3:0a:c0:cc:6e:28:9e:1e:ba:e3:ef:
                    e7:a8:47:0c:71:54:50:2d:dd:d5:72:78:f7:a1:58:
                    29:89:92:e9:80:34:4a:1d:16:82:f9:7d:b1:e7:54:
                    be:c7:ad:3f:72:38:7b:93:a7:ce:44:2a:d9:c6:d6:
                    7f:f1:e9:67:00:37:e3:50:b5:e6:42:8a:67:c0:fd:
                    66:5f:ab:16:85:1b:78:97:55:1f:c9:65:a6:f7:a3:
                    b8:a4:a4:6b:4f:8b:9f:9c:53:8e:27:ea:66:3a:a9:
                    3f:1b:06:2d:e1:04:f5:2e:53:80:9c:04:87:b8:79:
                    aa:20:a2:b1:63:54:46:26:42:93:70:e1:2d:21:f4:
                    42:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BF:2E:8B:44:65:6D:D3:08:08:35:E6:B1:6B:86:36:C9:1B:FE:EF
            X509v3 Authority Key Identifier:
                keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3a:9b:45:82:c4:6b:26:2d:3f:fd:9c:e9:e0:30:a4:a8:04:
         5d:06:de:29:05:1f:59:2c:20:d6:c2:65:6a:ac:72:31:3c:74:
         88:1e:ba:1f:c6:64:ad:91:7e:a7:de:35:7b:75:d3:9c:d4:65:
         e0:22:cb:2a:d7:0d:77:47:17:72:8e:48:15:14:cb:87:a4:3c:
         15:a3:a9:b1:75:9f:d8:47:a3:15:a8:ff:1d:38:0c:0a:20:21:
         ce:d8:09:f7:34:2e:5b:0c:46:5c:b2:1f:45:a6:ec:26:f3:73:
         4b:32:e1:3e:ca:48:81:87:c3:38:76:cb:36:58:fb:a0:4b:6d:
         37:56:21:65:28:21:b8:15:95:ba:82:8d:35:8d:a6:ff:e0:e9:
         26:5b:57:2b:df:22:8d:21:9c:c6:cc:fe:aa:2d:26:ed:31:f4:
         f1:f1:c2:75:1e:8a:0e:c2:a1:fa:12:d0:c1:26:bd:dd:77:38:
         42:ef:f2:f3:fc:57:b1:88:bf:07:0f:b0:1d:11:5a:95:cc:9d:
         53:b3:24:62:57:f9:ec:7a:c0:63:84:00:c9:21:75:30:2f:7f:
         fe:48:94:a3:07:c0:8e:43:14:a3:d8:06:c3:12:ba:40:27:0d:
         51:43:68:89:60:e4:44:9d:47:5c:76:b0:d8:85:6e:c2:56:16:
         fe:99:ee:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:33 2025 by rpki-client