This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
File:                     v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json)
Hash identifier:          vuGuG/tOLvefOG5vD0wv11WOikqzdGLL2jmhNhGNM/E=
Subject key identifier:   15:5C:31:10:1B:4F:41:55:13:EF:06:8F:46:BD:A6:D2:DF:A5:44:F4
Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
Certificate issuer:       /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Certificate serial:       0AE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
Manifest number:          0AC3
Signing time:             Sat 06 Dec 2025 18:44:56 +0000
Manifest this update:     Sat 06 Dec 2025 18:44:55 +0000
Manifest next update:     Sat 13 Dec 2025 18:44:55 +0000
Files and hashes:         1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: esp5ocRQb4IAIgoSqJWS9fFbeofao39WnWNmM+7mAJA=)
                          2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: UQI8Fd4IsbMRQfXyTMFvSmN0fjZzMOEN8kbfmrroqXA=)
                          3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: SvGpd5pCGO9/pwIUeRowgxIT0zcF1gs1tLMG2Scm/1Q=)
                          4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: O6xTukSXkRkmptzUfSfbkc6euxNs5PIvwDcK/m8EIkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl
                          rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2787 (0xae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
        Validity
            Not Before: Dec  6 18:44:55 2025 GMT
            Not After : Dec 13 18:44:55 2025 GMT
        Subject: CN=693479a7-d4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:61:70:65:63:06:b8:90:3d:b9:53:74:41:8e:
                    00:02:3b:51:3a:e1:46:08:38:4b:37:73:60:b5:db:
                    93:21:e6:91:8f:81:12:bd:9e:23:63:83:4d:46:cb:
                    be:7c:da:5f:e5:08:6c:90:e5:e0:91:28:5c:56:04:
                    b6:a2:4b:79:34:d5:94:0a:40:eb:8a:dd:a0:86:c8:
                    18:91:88:b6:d0:be:ba:b9:da:a1:13:30:f6:69:d7:
                    46:8b:55:68:0e:3d:0d:02:82:a3:01:20:81:69:64:
                    2e:3c:1a:5d:30:f6:ca:68:44:93:c9:41:5e:9a:9e:
                    b5:fc:65:82:1f:a9:80:cb:37:b9:0a:d7:2d:a1:68:
                    86:60:70:c9:5d:f2:13:ce:9a:62:90:c3:25:ab:b0:
                    44:18:3e:79:05:2d:58:fd:0d:fe:45:97:5d:f6:ba:
                    69:d1:b5:c2:25:ec:0c:4d:c4:dc:59:35:5c:26:ff:
                    e2:2f:8a:c7:3b:f1:8a:24:5b:8c:b2:07:1b:0c:8a:
                    13:8f:b0:16:e4:c9:6c:4e:27:2f:12:36:25:bf:9e:
                    22:65:94:1a:61:49:d3:16:0b:0f:eb:d3:1d:a8:1f:
                    93:f4:e2:78:f7:47:3a:a0:90:8a:c7:c4:91:23:6d:
                    50:2a:60:c3:9c:70:57:46:94:8b:93:32:25:48:51:
                    b6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5C:31:10:1B:4F:41:55:13:EF:06:8F:46:BD:A6:D2:DF:A5:44:F4
            X509v3 Authority Key Identifier:
                keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3e:91:11:87:d3:5c:e0:d6:28:2e:12:69:96:97:e2:3e:1e:
         ab:ad:2d:b5:bf:71:e3:be:7b:e5:ff:61:5c:e8:e2:4a:df:8b:
         76:e1:bb:c1:13:fa:18:10:48:00:4c:8d:9c:1c:8d:66:7d:a1:
         48:9b:c8:47:c1:6d:e9:43:06:56:96:7b:3a:df:73:39:85:a4:
         7e:2f:2f:47:e6:10:9a:90:1c:41:46:bd:98:13:82:3b:3d:32:
         61:7e:3c:cf:bf:8c:d6:3b:02:30:b0:ff:47:9c:20:4d:ad:33:
         6e:4d:e2:cf:c2:27:1b:a2:76:87:89:1f:9d:67:84:53:2f:42:
         8e:5a:58:a0:e6:ba:f7:a4:ed:a8:90:72:52:8c:a5:25:73:4f:
         e3:c7:2b:b6:c9:a6:48:1f:b1:33:e8:66:89:5a:8b:49:4f:d2:
         6f:7d:27:7f:21:6d:b9:cc:99:a5:61:51:35:cc:21:53:7c:df:
         7c:36:7a:18:10:2b:b3:29:05:ef:df:10:35:4b:df:f4:9f:bc:
         83:ff:06:35:fb:43:16:68:98:3a:5b:0f:fa:e3:47:d0:96:f2:
         f1:4e:60:df:fa:c0:29:0f:f4:e2:43:71:28:87:13:9d:53:c5:
         f6:27:93:dc:a2:da:29:55:44:2a:20:f7:b5:bf:57:a2:70:25:
         df:69:07:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:33:39 2025 by rpki-client