This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
File:                     1Q7mk8tIRN0udgNL7L02qIHDeJc.mft (raw, json)
Hash identifier:          oEn2WgLEruPoZMg3UwKzSLLQIlOBfQ96xsidniJESis=
Subject key identifier:   B1:6B:91:1C:16:13:65:E4:AA:49:14:B9:42:70:75:D4:91:28:58:1E
Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97
Certificate issuer:       /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
Certificate serial:       10FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
Manifest number:          10E5
Signing time:             Wed 31 Dec 2025 17:02:48 +0000
Manifest this update:     Wed 31 Dec 2025 17:02:47 +0000
Manifest next update:     Wed 07 Jan 2026 17:02:47 +0000
Files and hashes:         1: 1Q7mk8tIRN0udgNL7L02qIHDeJc.crl (hash: F5JQPRWbdeJT26Yw9+ibEwLiCsAlzQCV92ooET7OX/U=)
                          2: 0FC30B10264211EEB9FAAA43C4F9AE02.roa (hash: x/lWlD9SNRm3Ra3Juz0ScqnsIpd3eUHkeQs8wFQ7pns=)
                          3: AFDA40003AB511E9A79AA42DC4F9AE02.roa (hash: 3gmCEFiYlMlievK4CwoMawO55eg7L6f6YvnH2KxpTBg=)
                          4: B0790AC83AB511E9A79AA42DC4F9AE02.roa (hash: iuD1AmPPjauf4FdFiWRN/+tIFnT8RVbtSKHxTeRsXmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl
                          rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 17:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4350 (0x10fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
        Validity
            Not Before: Dec 31 17:02:47 2025 GMT
            Not After : Jan  7 17:02:47 2026 GMT
        Subject: CN=69555738-1adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:c2:5d:08:d7:2b:2f:ad:48:3f:3f:aa:13:
                    18:36:57:45:fa:a0:50:d0:36:d5:70:81:9d:4e:7b:
                    52:f1:81:85:15:da:37:d4:8f:7b:dc:97:50:b3:05:
                    a0:39:ee:5f:23:96:73:9a:6c:7b:54:0f:85:d8:b2:
                    73:36:2d:e7:a9:c8:6a:00:04:89:1c:40:8e:08:5a:
                    4a:be:8d:c9:d1:44:dd:92:6c:04:89:5e:89:85:19:
                    d9:3a:8c:3f:56:30:b6:0a:c6:dd:5f:12:ab:a9:4c:
                    e1:ff:2c:1f:22:e1:6b:c4:62:34:46:a9:8b:7f:41:
                    3e:e3:9e:d2:94:2d:88:46:c2:b0:29:a5:b7:91:c3:
                    e5:a3:3e:09:4f:e5:b2:fd:92:cd:7c:eb:18:68:ab:
                    02:91:07:47:13:3a:09:d3:bb:24:83:71:10:9f:9a:
                    f8:31:a8:3f:d3:35:61:8a:9f:dc:02:b5:f7:2d:09:
                    b4:22:e7:c8:72:74:1f:69:01:39:ab:07:c9:5b:4d:
                    d1:cb:5c:6b:20:c2:08:a7:21:26:3d:a5:c5:96:87:
                    3a:9b:70:3d:f0:1b:7b:d5:75:cb:2c:8d:55:65:f7:
                    9a:1d:fb:1b:74:dc:d8:5c:60:16:df:c3:e8:ce:09:
                    7d:f0:a9:51:27:a6:fb:fb:ff:ca:06:92:e3:79:86:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6B:91:1C:16:13:65:E4:AA:49:14:B9:42:70:75:D4:91:28:58:1E
            X509v3 Authority Key Identifier:
                keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:02:49:09:53:df:0a:60:23:75:0d:66:2c:0d:d2:9f:c7:57:
         a6:d5:ff:9f:d5:d9:3f:3c:e6:ef:7d:e1:3a:c0:70:f0:25:01:
         3b:d4:53:14:e9:d9:6d:22:af:f1:36:7d:de:61:4d:2e:eb:bb:
         c9:2a:87:fe:9d:f4:8e:8d:29:ba:1d:6f:3c:e2:ae:07:17:dd:
         a2:04:67:c4:85:11:6f:98:05:80:d7:ac:0a:b4:2e:2c:5e:69:
         82:48:33:34:45:fa:20:0a:8f:97:f2:eb:ab:c1:d7:94:fc:05:
         94:46:33:c4:a3:b9:db:db:25:b2:d1:17:ce:1d:3e:ff:ed:2a:
         99:d0:60:9a:01:52:2f:a0:17:ae:ee:51:cd:11:f9:2c:ec:41:
         b3:b6:c4:b5:64:3c:9b:8c:46:ba:ac:11:23:6b:e9:b7:b8:d6:
         06:bd:85:c0:75:ce:93:bc:0b:b7:da:76:15:b8:55:57:2e:d8:
         cb:a8:f5:63:b1:3b:8e:0e:61:85:94:63:91:36:7c:84:be:05:
         67:ad:04:75:03:07:c6:15:a4:97:da:44:23:89:bf:45:69:0d:
         0e:51:24:a4:b7:76:e2:2c:8e:59:42:13:94:52:82:97:cb:d9:
         55:28:df:b7:fd:d9:84:68:3a:f7:33:a8:44:43:aa:5a:b9:0f:
         29:94:26:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 11:05:57 2026 by rpki-client