This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
File:                     n82PZ2ktvYIee95qb7vWfHgHV_k.mft (raw, json)
Hash identifier:          qJU7YKiMkOgD29XXWlawhuE7QHph/tkuDvfalK4WFMk=
Subject key identifier:   6A:55:36:EA:A6:66:59:AB:66:8B:2E:C9:8F:75:32:A4:06:E6:81:D1
Authority key identifier: 9F:CD:8F:67:69:2D:BD:82:1E:7B:DE:6A:6F:BB:D6:7C:78:07:57:F9
Certificate issuer:       /CN=A9196780/serialNumber=9FCD8F67692DBD821E7BDE6A6FBBD67C780757F9
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
Manifest number:          5C
Signing time:             Fri 19 Dec 2025 06:06:07 +0000
Manifest this update:     Fri 19 Dec 2025 06:06:07 +0000
Manifest next update:     Fri 26 Dec 2025 06:06:07 +0000
Files and hashes:         1: n82PZ2ktvYIee95qb7vWfHgHV_k.crl (hash: loUV/JliLi5jwcTaZ69BCbzdQzWIuTSSlJkmwB1+Ilw=)
                          2: 8CB6031052AB11F0BFD3D952C4F9AE02.roa (hash: 7wTyCg/0wP3GL3JeAUaulyMMeddiOEV7adzs5N2hvf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.crl
                          rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196780, serialNumber=9FCD8F67692DBD821E7BDE6A6FBBD67C780757F9
        Validity
            Not Before: Dec 19 06:06:07 2025 GMT
            Not After : Dec 26 06:06:07 2025 GMT
        Subject: CN=6944eb4f-ff19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:50:95:60:1d:86:aa:1e:6c:66:19:3c:ba:b0:
                    65:e8:bf:a5:fd:3e:28:d2:05:92:da:8c:14:8d:f7:
                    0c:9a:d9:a6:b4:9f:6f:a5:d8:55:59:41:c7:f0:c3:
                    db:aa:cf:5d:71:bd:14:ff:8d:b5:ea:b5:a5:56:76:
                    0a:1e:10:99:6d:8e:76:e4:51:51:19:db:59:0f:80:
                    9d:35:d3:7e:52:38:27:4c:d6:e1:18:a5:8f:ca:ae:
                    a0:ec:9a:53:5b:15:6c:93:f4:5f:06:eb:8a:6a:7f:
                    da:99:aa:b7:cd:b6:1c:6a:f6:4f:2a:c4:bb:0e:e5:
                    ad:72:df:2a:6e:63:38:65:eb:6a:69:49:91:b7:c6:
                    78:d5:30:e9:aa:20:da:79:f7:69:62:82:e4:15:66:
                    c1:c8:48:19:67:22:be:73:e4:56:b8:1b:6d:7e:de:
                    3d:2e:3f:9c:4f:4f:62:6f:07:86:95:63:de:69:78:
                    2f:20:84:51:b8:88:98:9c:f3:cf:08:21:17:bb:9b:
                    80:be:47:bc:06:06:4a:c6:b3:46:19:4f:99:26:1b:
                    8d:ff:f7:0b:ee:90:ef:44:8a:bc:62:dd:95:da:ad:
                    e4:75:b6:a4:1a:93:5c:dd:38:75:0b:94:1d:a4:21:
                    31:79:c2:bf:33:ea:30:95:03:44:2a:bf:e3:ed:48:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:55:36:EA:A6:66:59:AB:66:8B:2E:C9:8F:75:32:A4:06:E6:81:D1
            X509v3 Authority Key Identifier:
                keyid:9F:CD:8F:67:69:2D:BD:82:1E:7B:DE:6A:6F:BB:D6:7C:78:07:57:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:91:0d:83:f0:1a:d7:4c:d5:e2:7e:fe:2b:6a:fb:90:f2:bc:
         e5:15:ab:b1:b8:54:a7:e5:38:e0:70:f7:d6:85:f5:ff:59:83:
         c5:dc:c1:d8:1e:69:c2:0f:03:15:63:d5:8d:c5:eb:a9:3e:4a:
         6f:59:fa:be:82:4c:51:cd:4a:5b:c3:35:f5:df:60:a9:f3:ac:
         55:19:fc:36:66:03:2d:4f:ef:88:48:75:f4:46:a5:3d:f9:78:
         31:ef:b6:ee:ae:3e:29:bb:d6:78:1d:b5:a8:6e:2f:3c:46:4f:
         79:7d:d7:84:bb:87:6e:f0:4e:69:3b:1b:ec:92:c0:09:9d:c1:
         11:33:df:12:48:e9:9a:0e:cb:6f:1a:c5:2d:36:66:60:00:19:
         78:f0:c2:2f:00:22:dc:9e:48:80:09:c0:61:01:8c:93:74:c7:
         01:88:d0:70:54:92:86:55:c5:96:ae:70:fb:08:17:25:81:b0:
         b9:44:a4:02:9c:2b:2b:8f:8a:49:21:13:53:7e:11:f3:80:17:
         5c:31:5e:e1:89:a6:4f:3c:77:23:61:97:1d:b4:8f:bf:d0:a7:
         f5:45:47:cc:94:ba:d5:9a:c0:02:8a:41:1f:60:f3:f6:99:71:
         a3:bb:48:10:70:2a:ab:f4:d5:09:64:cc:ca:42:4a:80:1b:9d:
         e9:02:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:54:37 2025 by rpki-client