This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          wQxwosEexBSgGVHw8a63n6nJe9YB6j54+2t+bqHHPeU=
Subject key identifier:   ED:D1:A6:F2:EA:E8:E3:6E:6B:2D:78:BD:3D:AA:70:67:30:8D:8F:FF
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       709E533E2CB25EAB0FB7CA570D94D28C6CF93D8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          0854
Signing time:             Fri 19 Dec 2025 17:58:38 +0000
Manifest this update:     Fri 19 Dec 2025 17:53:38 +0000
Manifest next update:     Sat 20 Dec 2025 20:53:38 +0000
Files and hashes:         1: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=)
                          2: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=)
                          3: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=)
                          4: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=)
                          5: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=)
                          6: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=)
                          7: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=)
                          8: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=)
                          9: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: 0+5A0BBnTvwtAyFe+3NRGCYLnVFhKwV+yp5Q1FLf9tE=)
                          10: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=)
                          11: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 20:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9e:53:3e:2c:b2:5e:ab:0f:b7:ca:57:0d:94:d2:8c:6c:f9:3d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Dec 19 17:53:38 2025 GMT
            Not After : Dec 20 20:53:38 2025 GMT
        Subject: CN=EDD1A6F2EAE8E36E6B2D78BD3DAA7067308D8FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:b3:6d:ef:13:23:19:e4:f1:db:74:9c:a7:
                    ac:f1:c4:bf:a8:84:9b:4b:a8:a6:14:9d:39:18:8e:
                    cc:6b:12:55:26:6d:0b:27:93:55:df:77:25:c4:92:
                    d6:02:c9:e2:e1:e0:95:8a:be:44:ad:41:a9:93:2f:
                    0f:a3:ed:e5:b4:09:f8:c2:2c:3d:aa:08:2e:b7:0b:
                    0e:02:e3:02:c5:4b:3c:8a:3d:ca:45:99:14:e7:e6:
                    ce:3c:02:d9:01:ec:51:80:29:05:f8:a4:de:e1:a4:
                    ec:4a:45:e0:a1:c7:0e:9d:78:b3:02:ff:be:c1:31:
                    7c:fa:75:ae:80:0c:46:36:3f:bc:b7:28:6d:8c:47:
                    b2:55:05:2b:21:2e:bb:46:38:35:8c:15:38:ab:c6:
                    41:95:e0:4b:71:78:57:d7:8a:e2:ec:4a:60:96:79:
                    a0:fa:9e:a6:40:e0:cb:1f:2b:81:48:2d:58:ef:1d:
                    83:75:19:d7:50:43:de:f5:60:9c:a6:63:5c:1b:0f:
                    df:b8:d2:18:5e:ee:5f:69:02:21:6d:65:fb:26:f6:
                    0c:e1:a3:8a:0b:a2:9a:25:59:67:3c:f8:a9:2e:97:
                    c7:45:c3:4b:c3:1c:fb:2b:27:81:9e:67:45:83:8b:
                    e2:dc:8d:fc:8b:bb:c9:a7:67:1a:c1:7c:8c:0a:03:
                    d4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D1:A6:F2:EA:E8:E3:6E:6B:2D:78:BD:3D:AA:70:67:30:8D:8F:FF
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a0:00:b4:d1:18:39:e0:72:7f:32:bf:05:19:fa:d3:af:ef:
         22:46:7d:8d:03:5b:89:a9:2f:1c:2b:cb:0b:ae:a8:03:8e:2d:
         d1:08:b2:42:c9:52:19:6d:06:52:cb:18:33:8d:5c:c1:9c:9b:
         86:57:25:2b:9b:9f:a9:8f:de:c0:90:65:a6:37:22:84:42:9a:
         e4:1a:6a:e2:7c:cd:d1:a1:23:a5:31:6a:e1:99:d9:cc:5c:66:
         e9:f8:37:c1:6a:11:b0:39:f5:6e:c7:41:9f:f9:23:f1:6a:68:
         86:4a:4f:18:8b:ea:38:68:61:36:c2:eb:c2:cb:34:3b:97:59:
         e9:96:8f:ea:9d:64:9a:ec:8e:5e:28:5b:62:07:8f:0c:80:fe:
         72:23:9f:90:5c:c9:72:df:ae:4b:ee:43:89:25:c8:14:c5:c9:
         86:a8:6f:82:10:d2:69:8d:fb:60:09:32:ab:e5:f8:55:3a:5b:
         0e:61:e3:cb:2b:a4:04:78:e9:3e:5e:90:b9:ea:cd:aa:84:3e:
         45:c3:c5:25:63:f8:74:47:00:6a:b3:dd:52:ba:5a:a4:a8:a4:
         43:9d:f1:b8:8f:41:90:64:50:ce:fb:25:9c:5a:80:d4:50:19:
         1f:9a:82:da:ae:59:05:cb:dc:87:8b:f4:71:0e:cb:6d:3b:a3:
         a4:a4:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:40 2025 by rpki-client