This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
File:                     eZj15wgWto199ez2dy57XKI634M.mft (raw, json)
Hash identifier:          bt+SYqhbHRa0IpUwptyDf2F0IdoZ+LTSysscd0/J9vg=
Subject key identifier:   B5:47:B1:DC:02:F1:A9:1A:B3:0E:EF:74:21:FA:8E:53:1B:99:4C:74
Authority key identifier: 79:98:F5:E7:08:16:B6:8D:7D:F5:EC:F6:77:2E:7B:5C:A2:3A:DF:83
Certificate issuer:       /CN=A9127C10/serialNumber=7998F5E70816B68D7DF5ECF6772E7B5CA23ADF83
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
Manifest number:          017F
Signing time:             Fri 05 Dec 2025 01:53:57 +0000
Manifest this update:     Fri 05 Dec 2025 01:53:56 +0000
Manifest next update:     Fri 12 Dec 2025 01:53:56 +0000
Files and hashes:         1: eZj15wgWto199ez2dy57XKI634M.crl (hash: FVJp9ONBlMvcsT05HButDz5+nQlwmtKXbox6hrUnTMA=)
                          2: 5D1B0906890E11EE90BBB457C4F9AE02.roa (hash: 2IfO0tpd6nP0EzE4lLUKFL+xnPcYShRu8sAR7M9jaXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.crl
                          rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127C10, serialNumber=7998F5E70816B68D7DF5ECF6772E7B5CA23ADF83
        Validity
            Not Before: Dec  5 01:53:56 2025 GMT
            Not After : Dec 12 01:53:56 2025 GMT
        Subject: CN=69323b35-93e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6d:db:00:4f:5b:73:2d:5e:97:5a:9e:fa:ce:
                    32:c2:07:a6:62:c6:9b:20:c8:fd:61:f1:a7:e9:f4:
                    40:23:c0:5e:8e:d1:87:c2:25:d2:1d:47:1e:88:03:
                    97:19:ce:78:de:2a:3a:09:80:32:46:e1:12:28:ce:
                    9b:99:04:4f:1b:b9:c3:39:08:97:aa:7f:32:66:6f:
                    c6:a6:ed:bb:48:59:55:a8:5d:74:58:d7:46:96:ef:
                    b6:1f:76:4c:6f:5e:20:36:3b:ab:25:0a:a1:d9:fb:
                    9f:f0:31:53:d0:87:3b:ab:47:c1:c2:84:b6:40:15:
                    64:63:74:41:85:75:5b:29:5d:dc:6e:ae:f9:8d:24:
                    4f:73:48:c3:bb:9c:7e:9b:75:94:d2:99:0a:3a:a3:
                    e1:6d:3e:ba:4d:bd:aa:49:d7:ac:4d:ce:70:04:4c:
                    a1:c7:cd:78:cd:07:de:d0:8b:1f:7d:be:25:38:86:
                    3e:d5:3b:38:f4:71:d1:de:14:12:90:12:f6:a6:b3:
                    25:08:29:f6:be:43:2d:29:40:42:79:83:56:04:24:
                    cc:d7:d6:54:40:82:75:8c:da:8e:b1:72:d1:f0:dc:
                    2a:89:e1:58:55:52:8b:f2:be:c9:7e:1d:23:cc:6b:
                    a9:23:ac:44:ae:a9:af:4b:32:83:fb:1c:8d:95:5a:
                    ff:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:47:B1:DC:02:F1:A9:1A:B3:0E:EF:74:21:FA:8E:53:1B:99:4C:74
            X509v3 Authority Key Identifier:
                keyid:79:98:F5:E7:08:16:B6:8D:7D:F5:EC:F6:77:2E:7B:5C:A2:3A:DF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a4:a2:a7:b4:1e:bc:a6:28:7b:aa:0e:85:47:b8:3e:dc:c8:
         4a:51:b2:91:93:53:bc:f6:9c:98:c6:01:34:08:d0:b5:b1:b9:
         d5:68:00:d7:ea:c8:a5:42:31:81:70:21:c3:17:18:44:d5:d2:
         34:9d:02:1b:c4:dc:e8:1d:cc:32:49:6f:71:94:86:ea:9a:c6:
         99:cc:e9:a1:82:f0:8a:f9:12:01:13:21:9e:97:ed:fa:99:ba:
         4d:73:41:03:02:de:eb:df:5f:26:91:e7:7b:cd:80:c0:d2:66:
         e0:40:7d:23:a2:70:3f:85:a7:47:ec:15:8a:93:b7:de:1d:2a:
         6b:5c:a7:ab:88:1d:bd:84:ef:f8:c8:4b:af:c0:44:67:94:10:
         94:38:39:b2:1b:b1:6e:dc:3e:9b:46:46:39:86:7d:bd:95:21:
         87:cd:27:a3:e0:a3:b4:d9:b8:ad:91:4b:e9:cd:a5:a9:83:98:
         c7:8b:af:c9:03:6a:e9:e1:cf:b0:bd:bf:de:57:6f:aa:f6:bc:
         71:bb:2d:dc:d0:4e:ca:af:5b:ad:de:58:8b:c4:d5:d2:3b:39:
         c5:08:2c:d8:be:c3:07:38:0c:95:a7:a5:75:02:85:14:47:60:
         40:18:0b:77:6d:35:19:88:16:a6:20:d8:39:38:00:77:d4:8a:
         0e:ff:ae:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:53:49 2025 by rpki-client