This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
File:                     p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json)
Hash identifier:          ZY/WNodA1UWDmBxWJds3rM9wHORly9FVZJfTU6n4H0A=
Subject key identifier:   46:47:18:A1:33:33:F5:F6:90:D3:3E:2B:6D:2E:87:D3:95:D0:84:62
Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
Certificate issuer:       /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Certificate serial:       03DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
Manifest number:          03CA
Signing time:             Wed 24 Dec 2025 23:44:54 +0000
Manifest this update:     Wed 24 Dec 2025 23:44:54 +0000
Manifest next update:     Wed 31 Dec 2025 23:44:54 +0000
Files and hashes:         1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: zB/ArLX7YUSQs1OHU6WlAvit8WsIWw0XC1qVsmfSdlw=)
                          2: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: rNtzGSiDY85AOdHWF1WEqXphhPwCBrWlPSRqHgAFmu0=)
                          3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: t8VvneVUYRJgPgj481YthbBCTMCZ/uaBbHMKrlXT7S0=)
                          4: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: +FxqoXH/7KKQFGXsUL0/yNpB7+vOLI4FjqU3Tid4D+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 23:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
        Validity
            Not Before: Dec 24 23:44:54 2025 GMT
            Not After : Dec 31 23:44:54 2025 GMT
        Subject: CN=694c7af6-1f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:9c:32:aa:8c:32:84:c8:8d:4d:91:6e:90:
                    26:01:f4:57:90:b3:11:77:cb:a8:04:a0:e2:a5:e0:
                    ac:91:79:20:11:72:58:4e:25:08:6f:30:2d:c9:11:
                    43:b9:a5:90:85:61:33:9d:53:cf:a0:fa:b4:fc:cd:
                    6f:fc:41:c2:6e:f2:65:dd:7d:c2:2d:a6:2f:33:95:
                    7b:e8:58:8c:d9:df:3c:c9:fa:c7:52:69:f1:4c:9b:
                    cf:00:7c:9e:a6:b2:83:79:46:14:e5:e4:48:d0:30:
                    9a:2a:0d:8a:44:89:d0:1e:c7:6f:49:16:d1:4e:bc:
                    d4:6b:34:c2:08:ec:32:a7:64:c9:2d:12:64:23:ad:
                    ec:cc:ff:d9:7f:7f:05:2b:18:4c:59:72:5c:cd:96:
                    41:66:4f:6f:67:fa:15:00:78:33:f4:43:2b:45:ff:
                    d7:c5:95:6b:cc:34:b8:65:a4:4e:e7:ad:fa:5f:7a:
                    3b:97:1f:df:77:1a:f4:a3:9f:7a:01:9d:2b:d6:5c:
                    18:f6:a3:3c:7a:25:76:ca:4a:44:27:6b:00:1f:53:
                    06:8c:64:00:62:84:6c:ed:84:40:57:50:4d:e2:46:
                    53:ef:bd:65:fc:a8:8d:1c:21:a0:02:04:68:da:3e:
                    bc:3e:e9:b5:4a:31:47:f1:6e:07:e9:22:4c:dd:0e:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:47:18:A1:33:33:F5:F6:90:D3:3E:2B:6D:2E:87:D3:95:D0:84:62
            X509v3 Authority Key Identifier:
                keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8c:6c:51:c2:b4:41:21:93:55:61:0e:00:cf:50:71:3f:d8:
         5e:90:d0:0f:91:aa:9d:4c:91:fe:84:18:0d:6e:70:e4:87:6d:
         c7:9f:dc:8f:cc:77:27:ea:75:8f:2c:ad:53:51:4b:dc:b8:0e:
         a4:54:0c:99:c0:a6:bc:0d:df:9c:cd:5a:3a:20:be:19:b0:e3:
         03:fb:2b:ca:be:f3:26:61:c2:bf:67:aa:2d:3b:46:b4:b7:d9:
         c4:b1:e8:cd:26:65:65:c9:45:b8:ac:50:f3:4f:c3:e4:1a:08:
         b4:a8:51:61:2e:f0:66:a6:f8:90:cd:29:d6:c0:78:54:d3:54:
         cb:e8:62:f1:20:17:bb:67:86:b5:8f:ee:08:17:13:51:2a:82:
         1c:8d:66:ea:0a:5a:e7:be:e8:a5:08:59:86:7a:54:f2:81:e9:
         57:22:59:77:09:a0:9a:fa:c2:2d:f5:b2:de:d0:b9:95:f7:a3:
         42:ae:51:85:a1:f4:56:f3:b1:63:ea:c8:22:c5:2e:c3:45:3f:
         a2:99:38:a0:32:cc:4c:33:83:cc:6e:9b:45:07:ee:3e:0a:ee:
         5d:69:bb:19:01:1a:fe:f8:ef:b8:82:33:70:f0:eb:9c:6e:a4:
         a5:4e:73:f2:08:49:44:76:43:a9:78:15:89:61:a9:bf:c9:fb:
         0a:60:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 09:36:04 2025 by rpki-client