This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
File:                     d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json)
Hash identifier:          6s3XDCqp3Q/LCAHI+wT0iG76jjedgbwksLk7TMQIgcA=
Subject key identifier:   69:C2:F7:93:EB:0A:97:9B:0A:32:3D:00:39:E9:21:D7:51:2C:3B:9A
Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF
Certificate issuer:       /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF
Certificate serial:       34E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
Manifest number:          34E3
Signing time:             Sat 06 Dec 2025 14:57:00 +0000
Manifest this update:     Sat 06 Dec 2025 14:56:59 +0000
Manifest next update:     Sat 13 Dec 2025 14:56:59 +0000
Files and hashes:         1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: NbhKFpCMNwrDCheopyrwEw5+i1Q0ne+cioOS2L4dpTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl
                          rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13539 (0x34e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D23, serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF
        Validity
            Not Before: Dec  6 14:56:59 2025 GMT
            Not After : Dec 13 14:56:59 2025 GMT
        Subject: CN=6934443c-d9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e1:2c:a8:08:d1:2b:cb:3a:b4:fe:6a:2a:f0:
                    f3:4f:ba:47:c1:71:4e:b4:0a:25:50:3f:53:9c:5e:
                    52:24:03:2b:01:9f:41:40:7a:fe:26:ed:ed:fd:97:
                    d6:87:18:4a:04:c5:23:1d:35:b6:4d:cf:b0:87:b0:
                    8b:1b:04:30:d9:6e:39:54:73:86:30:af:e3:1c:0b:
                    c2:3d:2b:3a:1b:c6:44:9e:8d:dd:b8:a1:df:ac:16:
                    f4:96:66:fc:54:f9:21:e7:75:04:05:ff:db:e7:61:
                    2f:18:03:b9:97:85:9b:3d:f2:e0:14:77:40:e6:a2:
                    31:8a:6c:20:4a:15:4d:01:0a:0e:f9:35:7e:e0:5e:
                    94:2c:0c:b1:00:a3:29:3d:87:25:23:90:91:68:5d:
                    ef:67:7b:29:59:bd:16:b6:bf:5c:2b:59:f5:03:08:
                    c1:30:1a:4f:2c:a3:2d:1e:e4:8c:d0:e5:12:45:71:
                    3e:b2:ed:76:5d:b9:db:9d:86:21:fd:90:ba:cb:b7:
                    c6:8b:12:c1:9e:e8:a1:f4:f5:cf:73:6f:66:e7:cc:
                    a8:1b:10:55:c6:e4:01:56:03:fe:71:e2:24:a0:81:
                    78:c7:8a:78:f3:bd:8d:2b:27:66:1f:b6:4c:01:62:
                    b3:cf:d9:bd:91:82:06:05:7b:4b:73:ab:1a:45:57:
                    fe:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C2:F7:93:EB:0A:97:9B:0A:32:3D:00:39:E9:21:D7:51:2C:3B:9A
            X509v3 Authority Key Identifier:
                keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:37:5c:f2:e6:75:c7:07:9e:f7:bd:d1:ac:08:9c:b5:f1:7f:
         71:63:b0:97:65:d6:5b:9f:03:db:0d:20:d8:18:b9:88:a4:25:
         e4:32:93:bb:86:ec:d7:5d:f4:a7:c7:45:7f:81:e6:3e:a7:f3:
         0b:38:cb:9b:71:30:58:64:3c:5b:b6:e8:6b:a3:95:90:5f:55:
         cf:73:dd:97:3f:3e:21:7c:52:a1:2c:d4:93:69:1a:8b:52:9a:
         c1:9a:de:e8:1b:b8:2d:80:8e:7d:36:ab:78:c3:5a:e9:44:07:
         fa:72:f3:e9:ee:ec:8f:58:2a:21:40:db:0b:3d:99:0f:31:51:
         ee:04:73:40:71:07:98:d7:c6:8d:be:3e:74:ee:1e:7b:e1:55:
         15:bb:e2:59:d4:4b:b5:87:99:31:24:64:97:d0:2b:48:be:b1:
         84:ca:3c:e0:cc:a0:69:15:57:10:bd:df:51:3b:2b:01:14:b2:
         ae:d6:9c:f0:0a:b5:e7:12:81:a7:70:8c:f7:b7:e7:95:d1:df:
         a9:4b:54:1e:cf:67:35:af:7d:db:78:68:90:cc:d2:c2:ec:84:
         9f:76:93:d9:04:1e:57:02:86:a8:7c:2a:83:2c:f6:e0:5c:1c:
         a5:b3:23:37:ac:3b:2e:62:3d:ea:80:9a:7c:cb:f7:86:9c:9f:
         b7:1e:33:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTREMjMxMTAvBgNVBAUTKDc3RkVEQjUyQUMxMjg5NTA0OUUzNDAyN0UxMTI2QTZG
RDE1MTFFRUYwHhcNMjUxMjA2MTQ1NjU5WhcNMjUxMjEzMTQ1NjU5WjAYMRYwFAYD
VQQDEw02OTM0NDQzYy1kOWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6eEsqAjRK8s6tP5qKvDzT7pHwXFOtAolUD9TnF5SJAMrAZ9BQHr+Ju3t/ZfW
hxhKBMUjHTW2Tc+wh7CLGwQw2W45VHOGMK/jHAvCPSs6G8ZEno3duKHfrBb0lmb8
VPkh53UEBf/b52EvGAO5l4WbPfLgFHdA5qIximwgShVNAQoO+TV+4F6ULAyxAKMp
PYclI5CRaF3vZ3spWb0Wtr9cK1n1AwjBMBpPLKMtHuSM0OUSRXE+su12XbnbnYYh
/ZC6y7fGixLBnuih9PXPc29m58yoGxBVxuQBVgP+ceIkoIF4x4p4872NKydmH7ZM
AWKzz9m9kYIGBXtLc6saRVf+QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnC95Pr
CpebCjI9ADnpIddRLDuaMB8GA1UdIwQYMBaAFHf+21KsEolQSeNAJ+ESam/RUR7v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyMy8wNDY5MDk3ODFE
QTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lWQko0MEFuNFJKcWI5RlJI
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RfN2JVcXdTaVZCSjQwQW40UkpxYjlGUkh1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEQyMy8wNDY5MDk3ODFEQTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lW
Qko0MEFuNFJKcWI5RlJIdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRN1zy5nXHB573vdGsCJy18X9xY7CXZdZbnwPbDSDYGLmIpCXkMpO7
huzXXfSnx0V/geY+p/MLOMubcTBYZDxbtuhro5WQX1XPc92XPz4hfFKhLNSTaRqL
UprBmt7oG7gtgI59Nqt4w1rpRAf6cvPp7uyPWCohQNsLPZkPMVHuBHNAcQeY18aN
vj507h574VUVu+JZ1Eu1h5kxJGSX0CtIvrGEyjzgzKBpFVcQvd9ROysBFLKu1pzw
CrXnEoGncIz3t+eV0d+pS1Qez2c1r33beGiQzNLC7ISfdpPZBB5XAoaofCqDLPbg
XBylsyM3rDsuYj3qgJp8y/eGnJ+3HjNQ
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:12:04 2025 by rpki-client