This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
File:                     P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json)
Hash identifier:          ZZEm91p9pV/1DCKzgddm3ip0KPruC8Tlo1qvEsPfjKw=
Subject key identifier:   94:67:C0:B5:C4:F3:62:B1:FB:BB:05:EC:7F:81:11:4E:BC:68:46:BF
Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D
Certificate issuer:       /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
Certificate serial:       0556
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
Manifest number:          0551
Signing time:             Sat 06 Dec 2025 22:11:48 +0000
Manifest this update:     Sat 06 Dec 2025 22:11:47 +0000
Manifest next update:     Sat 13 Dec 2025 22:11:47 +0000
Files and hashes:         1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: L8fk4L8XAhtSzuzRg1v58Xzbdo4t47pv63bGbKu0VNI=)
                          2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: oYHvUKynZFPSJ3FylmI/CTRVw9bAxjjFqxPHbv5+ER8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl
                          rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
        Validity
            Not Before: Dec  6 22:11:47 2025 GMT
            Not After : Dec 13 22:11:47 2025 GMT
        Subject: CN=6934aa23-ba62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:76:a2:18:03:b8:72:fd:0b:2e:b3:60:94:fd:
                    d0:c3:67:91:0b:d2:1e:21:d1:ab:8b:9c:c8:b9:e0:
                    85:48:e8:69:4b:aa:c8:26:12:80:00:3f:87:e9:1e:
                    a3:8c:e2:5b:35:7a:10:71:fd:e3:89:4b:52:29:44:
                    18:40:f3:82:4d:b8:c5:74:27:3c:2e:f2:18:10:a1:
                    11:36:64:c7:31:f6:d3:86:72:18:e3:d7:ac:26:2a:
                    6b:95:2f:7c:bc:7b:c3:0a:8e:66:2f:70:29:dd:cc:
                    38:15:ec:37:c0:5e:e0:6c:75:d8:86:5d:0e:5b:1e:
                    ca:b0:df:34:20:7a:d5:60:ee:b6:20:ec:3a:09:38:
                    47:90:0c:cc:82:9c:09:24:69:a0:29:3f:67:ed:fb:
                    10:7c:96:ff:29:09:d1:9f:05:29:90:57:b9:1e:76:
                    03:a4:30:f6:c1:6e:62:d2:93:7f:07:45:14:76:ed:
                    72:ab:9e:28:40:ff:f5:c2:ae:b4:1e:f2:ac:46:df:
                    de:ee:f9:42:24:ee:59:e1:1f:2f:50:35:3e:cb:0c:
                    53:70:84:ad:92:02:9d:aa:8f:bb:ec:71:29:ac:29:
                    d1:89:7c:f0:39:0c:34:16:b3:6c:d7:b5:5f:4b:96:
                    5a:45:fd:9d:b9:31:13:5e:31:e2:fc:68:6f:e6:ca:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:67:C0:B5:C4:F3:62:B1:FB:BB:05:EC:7F:81:11:4E:BC:68:46:BF
            X509v3 Authority Key Identifier:
                keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:f6:9f:d6:d8:a6:d8:54:13:44:e2:e6:26:89:b8:69:54:
         0f:31:2c:ee:ce:0f:37:f0:d1:7f:cd:17:eb:7b:09:91:92:a6:
         a3:9f:41:20:52:00:ca:ba:9a:6b:1d:40:e7:18:75:bb:cf:ca:
         d2:fd:1a:35:8b:36:f1:15:05:27:9a:9c:79:fe:27:ef:c8:e9:
         2e:59:88:2f:41:35:d5:00:de:e8:e3:24:f0:83:c3:7b:43:77:
         1e:50:c0:46:84:31:ae:83:bd:4b:01:a3:00:e9:7c:e5:85:fc:
         e5:d6:7b:02:ef:a6:bb:7d:a4:2a:94:54:0d:1c:71:fd:81:52:
         13:0b:7d:d8:dd:b5:7b:e1:68:73:f4:e5:3b:19:8f:f2:40:97:
         0c:c7:e3:c5:94:6a:c1:75:6d:3e:6a:86:4e:69:8b:9f:54:26:
         1c:eb:e7:b8:aa:04:95:14:8f:30:76:07:1a:15:96:31:5c:02:
         4e:fc:b6:d4:62:d1:ea:2c:8b:33:27:d3:b0:5d:fb:09:63:cf:
         0a:16:9c:7c:e4:e2:20:11:ea:7a:d0:52:19:e5:51:3e:08:51:
         13:40:97:c1:fc:f0:d6:1b:7e:c5:55:1c:73:d5:17:29:b3:e9:
         bb:e6:38:a8:e0:e9:25:44:f1:70:3e:50:d1:40:82:fb:f6:3f:
         9c:19:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:44:11 2025 by rpki-client