This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
File:                     xv9_8XAyqWoLIW8LwszDXwIgwnI.mft (raw, json)
Hash identifier:          5AY49zS5FzSBfoIBZqn//lQt7MStTPtDeY6omb25wIQ=
Subject key identifier:   5A:61:5D:74:89:ED:CC:0B:E9:6B:BA:7B:69:2C:13:11:90:F0:0D:E4
Authority key identifier: C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
Certificate issuer:       /CN=A91B7929/serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
Manifest number:          0C
Signing time:             Fri 19 Dec 2025 06:57:04 +0000
Manifest this update:     Fri 19 Dec 2025 06:57:03 +0000
Manifest next update:     Fri 26 Dec 2025 06:57:03 +0000
Files and hashes:         1: xv9_8XAyqWoLIW8LwszDXwIgwnI.crl (hash: ZLCPl6OwZqCUHy7IqdDvhP9RTzZUB6kHKgF1KPItwR0=)
                          2: 8709BBD4DB2011F0B6C890B887D3641D.roa (hash: 2W5ZVPIw3ewF45gJcZZK6fFAiCn6TPFyHTrg1IlJBvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7929, serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
        Validity
            Not Before: Dec 19 06:57:03 2025 GMT
            Not After : Dec 26 06:57:03 2025 GMT
        Subject: CN=6944f740-c56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:9b:68:d8:37:8a:89:5c:71:68:e3:9e:6b:
                    0a:08:d5:8e:9c:57:a7:b3:61:18:8f:5e:11:79:30:
                    4a:a9:b3:90:c2:4c:4b:78:4b:5f:43:2d:cd:73:2f:
                    49:d9:fc:38:c2:9b:cb:bd:ae:d3:6a:38:29:3f:b6:
                    b1:fb:77:ad:07:74:4a:7f:eb:c7:ba:7b:61:7c:0f:
                    bc:6c:21:3f:54:73:84:b2:c0:5a:c9:aa:7a:1b:ad:
                    d0:c9:0c:7d:ca:52:8c:2b:07:b0:c1:0b:80:eb:d4:
                    cc:f9:f0:47:ef:6b:28:11:6b:1e:0a:44:86:d0:63:
                    9a:72:8e:1c:9e:d9:b2:78:b9:c0:bd:9f:26:87:76:
                    54:c2:de:21:9a:d5:74:69:d5:a8:c3:60:ec:d5:f7:
                    aa:f3:0d:6f:c5:55:95:31:99:9a:a3:c5:31:3c:a5:
                    8e:3a:b9:bc:ec:1a:10:cf:1f:4d:2f:11:4d:71:75:
                    2d:ba:cb:b9:a3:55:81:12:b5:95:36:2f:71:63:5c:
                    a3:7f:45:f4:65:dc:88:43:b1:06:88:23:1e:90:51:
                    47:e8:9e:57:e4:9c:72:53:41:2f:2d:f7:da:ca:d5:
                    76:2a:41:d3:4b:63:f0:8a:6e:1e:7c:b6:f1:51:71:
                    ab:1a:20:ab:47:78:8a:fc:bb:af:e3:6a:04:81:00:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:61:5D:74:89:ED:CC:0B:E9:6B:BA:7B:69:2C:13:11:90:F0:0D:E4
            X509v3 Authority Key Identifier:
                keyid:C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d3:a3:3d:18:7c:f4:e0:27:47:86:a2:b0:10:57:47:4c:c9:
         d3:ee:31:ec:40:61:8b:43:e3:db:1c:10:6b:8d:54:14:50:ce:
         db:17:28:0e:ce:e9:42:51:79:7e:6c:be:ff:ef:b8:cf:57:84:
         fc:ca:f4:eb:55:aa:e6:18:67:fd:92:66:c3:d4:56:64:66:be:
         15:7a:df:2d:43:65:37:9b:f8:9b:91:7b:de:af:7c:a3:1d:87:
         7b:98:c2:66:c4:c4:cf:44:9f:02:29:2c:75:25:ec:47:60:ec:
         56:89:26:a2:a3:8e:50:ab:b5:a2:e8:b1:e6:ba:7e:1c:d8:d1:
         84:28:90:fd:2f:34:3c:63:71:9c:1f:11:78:ac:1e:3c:e9:8a:
         b8:6a:7e:84:67:32:80:fe:6e:2f:0f:0d:22:69:2f:57:a3:93:
         b3:df:c5:c6:6b:b5:8e:84:54:5a:e1:f3:93:ee:fb:15:bc:06:
         9f:d8:02:28:15:25:3d:df:fe:70:29:e0:e3:48:6c:18:db:e0:
         f9:de:ff:ba:07:f8:c8:fb:32:ab:94:c4:2d:b9:89:5c:d2:d1:
         a4:97:b3:cf:43:07:c7:cf:dc:ed:dd:45:99:66:d3:6e:a2:09:
         82:4b:f5:da:07:69:e1:0b:81:77:d5:28:a6:26:74:68:5a:4b:
         9c:75:6f:71
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NzkyOTExMC8GA1UEBRMoQzZGRjdGRjE3MDMyQTk2QTBCMjE2RjBCQzJDQ0MzNUYw
MjIwQzI3MjAeFw0yNTEyMTkwNjU3MDNaFw0yNTEyMjYwNjU3MDNaMBgxFjAUBgNV
BAMMDTY5NDRmNzQwLWM1NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFWpto2DeKiVxxaOOeawoI1Y6cV6ezYRiPXhF5MEqps5DCTEt4S19DLc1zL0nZ
/DjCm8u9rtNqOCk/trH7d60HdEp/68e6e2F8D7xsIT9Uc4SywFrJqnobrdDJDH3K
UowrB7DBC4Dr1Mz58EfvaygRax4KRIbQY5pyjhye2bJ4ucC9nyaHdlTC3iGa1XRp
1ajDYOzV96rzDW/FVZUxmZqjxTE8pY46ubzsGhDPH00vEU1xdS26y7mjVYEStZU2
L3FjXKN/RfRl3IhDsQaIIx6QUUfonlfknHJTQS8t99rK1XYqQdNLY/CKbh58tvFR
casaIKtHeIr8u6/jagSBANAVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWmFddInt
zAvpa7p7aSwTEZDwDeQwHwYDVR0jBBgwFoAUxv9/8XAyqWoLIW8LwszDXwIgwnIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3OTI5L0M0NDc0ODU0Q0U3
MzExRjA4Q0Y4MjIxNEM0RjlBRTAyL3h2OV84WEF5cVdvTElXOEx3c3pEWHdJZ3du
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveHY5XzhYQXlxV29MSVc4THdzekRYd0lnd25JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3
OTI5L0M0NDc0ODU0Q0U3MzExRjA4Q0Y4MjIxNEM0RjlBRTAyL3h2OV84WEF5cVdv
TElXOEx3c3pEWHdJZ3duSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABDToz0YfPTgJ0eGorAQV0dMydPuMexAYYtD49scEGuNVBRQztsXKA7O
6UJReX5svv/vuM9XhPzK9OtVquYYZ/2SZsPUVmRmvhV63y1DZTeb+JuRe96vfKMd
h3uYwmbExM9EnwIpLHUl7Edg7FaJJqKjjlCrtaLosea6fhzY0YQokP0vNDxjcZwf
EXisHjzpirhqfoRnMoD+bi8PDSJpL1ejk7PfxcZrtY6EVFrh85Pu+xW8Bp/YAigV
JT3f/nAp4ONIbBjb4Pne/7oH+Mj7MquUxC25iVzS0aSXs89DB8fP3O3dRZlm026i
CYJL9doHaeELgXfVKKYmdGhaS5x1b3E=
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:58:58 2025 by rpki-client