This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
File:                     84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json)
Hash identifier:          0vcQb1IxIxlr39EG1jw5BONWUD+/5+gJcZkR7Fe7paw=
Subject key identifier:   CA:93:0D:11:97:00:60:6B:E3:3A:F4:18:91:D6:53:C9:A9:C4:32:CB
Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D
Certificate issuer:       /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D
Certificate serial:       048D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
Manifest number:          0488
Signing time:             Thu 04 Dec 2025 22:35:51 +0000
Manifest this update:     Thu 04 Dec 2025 22:35:51 +0000
Manifest next update:     Thu 11 Dec 2025 22:35:51 +0000
Files and hashes:         1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: FAXAswEsXBxoUStSN6YZMupccfa7qIPsjk0VNDJg0PU=)
                          2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: ri0TS1kyJCp5RGAizutNu/7/M8+Gqg86bvQl1YYvFEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl
                          rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1165 (0x48d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D
        Validity
            Not Before: Dec  4 22:35:51 2025 GMT
            Not After : Dec 11 22:35:51 2025 GMT
        Subject: CN=69320cc7-4139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:12:5c:4b:bc:dd:aa:ca:6b:be:a6:82:97:
                    a8:45:98:58:45:d1:0c:1f:e5:97:d0:8a:59:17:24:
                    e1:8f:d6:e0:63:de:3b:2c:32:21:6d:50:9f:a2:90:
                    8e:fc:73:c0:1f:26:80:2f:cd:44:8a:0f:32:3b:be:
                    67:09:0b:84:f4:36:1e:a2:0d:fc:47:cd:a0:d9:6d:
                    18:40:5f:f7:3b:fd:8d:48:6b:63:28:28:ba:06:b7:
                    dc:48:dd:43:a1:cf:ab:38:d3:68:92:64:2f:65:fa:
                    c7:64:3d:b7:84:69:98:e2:ee:dc:53:08:f1:94:30:
                    25:70:f9:a1:00:b1:22:6e:fc:81:75:6f:fe:82:76:
                    80:80:ed:ee:e6:84:24:e9:d8:fd:bf:3f:3a:57:e7:
                    53:66:ac:3d:73:6d:03:d6:3f:92:86:17:44:ac:d1:
                    70:18:1c:5d:da:fa:26:bc:5d:a8:5b:26:f8:1e:67:
                    3d:35:f5:aa:c0:a1:4d:6b:c3:31:d1:bf:56:c1:fb:
                    c4:82:a5:7a:92:47:69:98:f9:53:c6:32:e0:90:d2:
                    14:63:b3:8d:e6:dd:aa:62:9d:a1:c9:17:97:4a:b9:
                    c8:83:ba:ba:48:2f:7c:2b:f3:8f:6b:de:f4:a5:b0:
                    76:b3:2d:02:bc:16:19:69:40:6b:c3:fa:0d:5a:fe:
                    0a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:93:0D:11:97:00:60:6B:E3:3A:F4:18:91:D6:53:C9:A9:C4:32:CB
            X509v3 Authority Key Identifier:
                keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:76:1b:9c:d9:34:1f:14:ca:f9:56:88:f5:fb:a0:08:8f:7b:
         e9:ed:1d:15:d2:64:11:74:e7:2d:68:f7:0e:7c:c7:48:69:64:
         a9:e9:9d:04:5a:b2:cd:7f:52:05:c9:87:4d:a5:95:82:09:27:
         39:a1:12:93:be:f9:dc:bc:7b:b0:40:41:45:9c:5c:bc:8d:6d:
         de:fa:bf:a4:16:3a:f0:58:87:16:57:b2:de:f7:fb:42:63:56:
         30:e0:33:54:b6:24:ab:c0:d6:87:a2:b2:76:cd:08:28:46:f7:
         22:97:0e:2c:49:98:42:bb:80:4b:bc:b3:7c:a3:fa:4b:04:2b:
         83:a8:61:6d:76:4a:cd:6b:a3:a8:98:56:fe:d1:64:12:ec:98:
         cd:8a:6e:88:25:a6:cf:fa:25:19:f9:7a:23:9f:46:c5:ca:74:
         78:1e:cc:de:4e:6e:66:22:73:42:fd:b6:59:98:29:8c:d2:ae:
         be:e3:af:77:77:21:1d:f2:f4:98:9d:55:a8:e4:8c:a5:e4:07:
         8a:1e:82:b6:0c:2b:9b:27:d0:22:1f:d2:81:1d:8a:37:ca:7a:
         7c:fc:ae:2f:db:f4:04:09:cb:cb:d7:7a:2c:b1:4a:8a:02:50:
         50:f4:76:0b:8d:13:33:3c:8e:d2:69:2b:94:5a:05:ce:9a:91:
         25:0e:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:51:33 2025 by rpki-client