This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft
File:                     s-AwGXTWpAg9ufSdWtbloVd5KgY.mft (raw, json)
Hash identifier:          GqAK+R8bn/Yj4TqNj2afM6LVDBrzYkjzgMFwEGj8RCs=
Subject key identifier:   3D:FC:2D:8E:CC:DC:8F:97:9C:85:8F:57:B0:95:0D:C5:D7:B2:3F:EE
Authority key identifier: B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06
Certificate issuer:       /CN=A9116B43/serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06
Certificate serial:       06B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft
Manifest number:          06B4
Signing time:             Sat 06 Dec 2025 14:45:33 +0000
Manifest this update:     Sat 06 Dec 2025 14:45:33 +0000
Manifest next update:     Sat 13 Dec 2025 14:45:33 +0000
Files and hashes:         1: s-AwGXTWpAg9ufSdWtbloVd5KgY.crl (hash: cDLYnwzEc5aet5lxoE7pEOJ5aRgO7frwuklx8DV7axk=)
                          2: 3A77AE12CB9C11EC9230F70BC4F9AE02.roa (hash: TwjuoGTydiIvsI8500O496Q/mOvNfgRtaZ3KwMAE5xE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl
                          rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720 (0x6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116B43, serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06
        Validity
            Not Before: Dec  6 14:45:33 2025 GMT
            Not After : Dec 13 14:45:33 2025 GMT
        Subject: CN=6934418d-4dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:dc:64:6f:ab:cc:c2:73:b1:4e:ee:48:42:
                    7b:87:b5:bb:19:2e:5a:a2:3a:c5:bc:89:7d:73:e5:
                    00:34:49:12:cb:24:4d:40:b8:d0:3b:ca:b0:c8:43:
                    8a:e1:57:53:b1:07:eb:77:9f:36:b6:82:1f:42:29:
                    43:96:f9:d1:24:03:3d:8f:a2:95:69:2d:e7:4c:5c:
                    4d:cc:53:b7:31:5e:65:0b:e2:5c:a7:25:a8:3e:c2:
                    09:eb:40:c2:51:8a:8e:40:16:f7:1d:36:8c:32:46:
                    ab:44:41:22:f6:17:42:97:b7:35:95:3f:19:82:f0:
                    be:1b:6e:c2:b0:22:25:0a:c1:17:89:1c:22:a2:c1:
                    1e:5d:63:8f:04:0c:38:ce:33:ee:43:77:43:86:ba:
                    88:7d:1e:c6:9e:54:2a:f2:16:d1:a5:cb:2e:c6:71:
                    58:93:df:32:98:3f:71:53:e7:72:da:cd:29:e2:bd:
                    16:e1:06:95:30:88:45:9f:b0:f7:1e:3b:27:74:18:
                    38:6a:b7:14:79:01:07:7b:c1:8f:65:f4:7d:86:05:
                    7c:28:8f:89:8c:3c:a3:ea:4d:fc:16:de:31:05:48:
                    6f:62:37:c9:1e:fd:d9:5b:fa:ef:4d:c3:83:e9:01:
                    02:fc:fc:8a:86:e9:22:e0:c7:4e:87:38:1a:2a:45:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FC:2D:8E:CC:DC:8F:97:9C:85:8F:57:B0:95:0D:C5:D7:B2:3F:EE
            X509v3 Authority Key Identifier:
                keyid:B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7d:93:a4:a9:2e:d5:5e:4a:4f:fc:c6:43:a2:1c:44:16:07:
         99:fd:f9:b1:63:1d:75:f4:80:17:41:2f:4a:58:47:9e:31:58:
         43:1a:c2:b1:56:e9:13:0d:5f:51:c7:6a:ea:1d:bf:4e:d9:fe:
         b8:c4:0c:dd:b5:75:cf:c3:33:99:3b:c8:83:c3:22:8e:56:81:
         2a:84:5a:e0:7d:82:18:62:dc:36:3d:89:9b:78:11:83:f3:7e:
         5b:a2:93:ba:41:7c:f2:6e:ce:63:70:aa:0a:fa:a2:7b:d6:61:
         3b:84:ff:22:67:20:79:9a:c6:08:88:c9:20:eb:70:18:b1:37:
         5c:56:e3:be:e0:c6:9b:b9:0d:07:9c:bd:49:01:9e:b5:a2:3d:
         38:13:bb:b3:91:c0:5c:b6:94:f8:cc:8b:26:df:67:f7:43:67:
         10:db:14:c7:2d:61:73:f8:11:b5:74:83:44:99:7d:bc:96:38:
         97:ad:c9:9d:8d:08:f4:a4:c2:04:50:99:70:b2:cf:54:4a:52:
         61:f2:14:74:ce:1d:fe:cf:10:17:22:69:f2:10:3e:c0:84:99:
         69:44:e2:39:47:d4:b6:83:ba:3e:e7:0a:0f:6b:db:81:74:5b:
         20:98:91:9d:92:a7:f5:be:a9:4f:d9:2b:9f:04:3b:30:25:2c:
         24:a5:4c:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZCNDMxMTAvBgNVBAUTKEIzRTAzMDE5NzRENkE0MDgzREI5RjQ5RDVBRDZFNUEx
NTc3OTJBMDYwHhcNMjUxMjA2MTQ0NTMzWhcNMjUxMjEzMTQ0NTMzWjAYMRYwFAYD
VQQDEw02OTM0NDE4ZC00ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwafcZG+rzMJzsU7uSEJ7h7W7GS5aojrFvIl9c+UANEkSyyRNQLjQO8qwyEOK
4VdTsQfrd582toIfQilDlvnRJAM9j6KVaS3nTFxNzFO3MV5lC+JcpyWoPsIJ60DC
UYqOQBb3HTaMMkarREEi9hdCl7c1lT8ZgvC+G27CsCIlCsEXiRwiosEeXWOPBAw4
zjPuQ3dDhrqIfR7GnlQq8hbRpcsuxnFYk98ymD9xU+dy2s0p4r0W4QaVMIhFn7D3
HjsndBg4arcUeQEHe8GPZfR9hgV8KI+JjDyj6k38Ft4xBUhvYjfJHv3ZW/rvTcOD
6QEC/PyKhuki4MdOhzgaKkVQXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD38LY7M
3I+XnIWPV7CVDcXXsj/uMB8GA1UdIwQYMBaAFLPgMBl01qQIPbn0nVrW5aFXeSoG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI0My81OTQyMUE0RThE
N0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BBZzl1ZlNkV3RibG9WZDVL
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3MtQXdHWFRXcEFnOXVmU2RXdGJsb1ZkNUtnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkI0My81OTQyMUE0RThEN0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BB
Zzl1ZlNkV3RibG9WZDVLZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgfZOkqS7VXkpP/MZDohxEFgeZ/fmxYx119IAXQS9KWEeeMVhDGsKx
VukTDV9Rx2rqHb9O2f64xAzdtXXPwzOZO8iDwyKOVoEqhFrgfYIYYtw2PYmbeBGD
835bopO6QXzybs5jcKoK+qJ71mE7hP8iZyB5msYIiMkg63AYsTdcVuO+4MabuQ0H
nL1JAZ61oj04E7uzkcBctpT4zIsm32f3Q2cQ2xTHLWFz+BG1dINEmX28ljiXrcmd
jQj0pMIEUJlwss9USlJh8hR0zh3+zxAXImnyED7AhJlpROI5R9S2g7o+5woPa9uB
dFsgmJGdkqf1vqlP2SufBDswJSwkpUyY
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:18:27 2025 by rpki-client