This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft
File:                     9wpgFV53FUM_JUSW4nuAimPIyXQ.mft (raw, json)
Hash identifier:          E0v2VfOZf7Iq88jpEwrjlEEMH1SYuNO+DcPjuvcqBjE=
Subject key identifier:   65:61:C2:E9:EC:D2:FA:99:EA:8C:C4:EA:9C:DB:09:41:35:01:C5:C0
Authority key identifier: F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74
Certificate issuer:       /CN=A919F83E/serialNumber=F70A60155E7715433F254496E27B808A63C8C974
Certificate serial:       0EC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft
Manifest number:          0EB4
Signing time:             Thu 18 Dec 2025 17:28:22 +0000
Manifest this update:     Thu 18 Dec 2025 17:28:22 +0000
Manifest next update:     Thu 25 Dec 2025 17:28:22 +0000
Files and hashes:         1: 9wpgFV53FUM_JUSW4nuAimPIyXQ.crl (hash: 5ZzPKvLC/zR6ahJPlakSnmpFxRGO0drYnxjW/D+wyWc=)
                          2: A44F5CE29E1B11E9AE66905DC4F9AE02.roa (hash: v/1JOuF1wbI90UcR7urzQr8Y5tNoqPwF+BDce/tPjb8=)
                          3: A4DF63AA9E1B11E9AE66905DC4F9AE02.roa (hash: 4WHPjB+m4yRCXMy3983Y9jSkNEd4vDiMQ+e+khb3JCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl
                          rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3779 (0xec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F83E, serialNumber=F70A60155E7715433F254496E27B808A63C8C974
        Validity
            Not Before: Dec 18 17:28:22 2025 GMT
            Not After : Dec 25 17:28:22 2025 GMT
        Subject: CN=694439b6-5c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:9d:ce:12:dc:36:21:70:40:6f:66:c6:e6:
                    11:fe:e8:4f:dd:74:5b:a6:1d:c9:56:6c:d3:23:b5:
                    92:4f:ec:f4:8a:13:55:b5:68:2b:30:9c:39:c1:18:
                    4c:6e:bf:36:8c:b5:50:e5:cb:a0:95:4e:02:08:5b:
                    6b:7f:f8:ce:71:f7:09:68:06:4a:c5:59:91:a6:f1:
                    9b:ec:d7:f7:17:ab:63:f8:f4:5f:2d:b2:37:7d:90:
                    99:47:a7:b0:10:a3:ae:27:a8:c5:d4:08:c1:82:62:
                    4c:0f:bb:50:c6:4d:b9:ea:af:a3:82:44:e7:c3:4f:
                    25:b0:3f:9c:3f:bb:66:4e:b3:f9:82:16:c4:1e:89:
                    b1:ac:0c:a5:91:c0:92:98:57:86:7a:5c:65:97:ee:
                    d3:8c:f0:bc:90:e7:66:cf:ba:18:86:c3:2a:5d:57:
                    dc:ce:61:44:ee:73:3a:73:17:ac:1d:ae:2c:79:08:
                    62:8c:51:8e:50:47:20:86:dd:a0:b1:fb:fb:ed:27:
                    03:25:bb:44:91:51:ad:b6:d1:91:40:cf:2a:9c:2c:
                    22:c3:9e:a7:b7:20:9f:c7:5c:2f:7e:33:70:49:a9:
                    b2:c2:d6:f8:5f:56:fc:b2:0f:45:e1:e8:5d:fd:66:
                    c3:a7:de:6c:4a:68:20:78:c8:08:f1:7a:e2:75:04:
                    41:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:61:C2:E9:EC:D2:FA:99:EA:8C:C4:EA:9C:DB:09:41:35:01:C5:C0
            X509v3 Authority Key Identifier:
                keyid:F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e8:f4:f8:ac:29:89:56:28:ac:2c:67:22:89:68:8e:18:92:
         b7:1b:36:5a:90:c0:cb:67:60:c4:07:93:0a:8f:df:45:38:e6:
         9e:76:84:73:b1:c3:9a:03:9b:88:7a:52:8b:d7:77:f0:ce:67:
         4c:5b:ce:4c:eb:c1:3d:fc:3f:b3:7a:11:44:d3:b1:5b:b7:39:
         d4:b6:31:bf:69:8e:cc:68:e6:81:03:af:8b:7f:5b:5b:2a:3c:
         60:f9:68:3b:5c:f5:d5:80:11:9c:3f:0e:15:f9:fb:48:a8:c1:
         b6:4d:fe:fc:e2:d2:6e:86:d9:65:7b:4c:a0:80:87:d3:98:12:
         48:9b:d5:ac:2e:d9:fe:f7:5f:4e:3d:2e:46:3c:25:7f:a3:cb:
         5e:d2:1b:33:71:ce:40:c7:f7:f7:16:de:d0:f7:75:1b:92:73:
         2f:a3:b4:57:12:58:79:4d:ec:a2:3f:c7:53:6e:e9:e4:63:61:
         49:ca:d4:0d:9f:61:8b:01:00:ca:42:18:de:8b:2a:83:04:b6:
         ae:57:e6:4a:c0:b7:0b:d9:4c:3d:86:5f:34:b1:75:66:36:47:
         22:b4:b8:a4:85:6e:60:72:8b:be:e9:b7:3d:52:53:03:01:45:
         b6:e3:bf:06:56:42:16:04:fe:f5:6d:e0:4c:12:f0:5a:22:b2:
         8a:c8:29:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:32 2025 by rpki-client