This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
File:                     paap6sGs925VLHi914unT-3dP_k.mft (raw, json)
Hash identifier:          0MhNKlb9NxP/fyDtQ113GQBjJuggyQMoTf8WbLychGw=
Subject key identifier:   42:2F:DE:3B:9E:13:B9:B1:6C:49:01:C8:FD:7C:D7:BE:67:DC:50:34
Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9
Certificate issuer:       /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
Certificate serial:       2C18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
Manifest number:          2C07
Signing time:             Sat 06 Dec 2025 15:19:48 +0000
Manifest this update:     Sat 06 Dec 2025 15:19:47 +0000
Manifest next update:     Sat 13 Dec 2025 15:19:47 +0000
Files and hashes:         1: paap6sGs925VLHi914unT-3dP_k.crl (hash: pfE8DDMe8Pt3d2mbIr+lGKshAcwQdO7yK5fCC8up6a0=)
                          2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: R++b1RX/a7NEbUz016JCFWbEE+Lh/qyAEqbc/YB/qKw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl
                          rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11288 (0x2c18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
        Validity
            Not Before: Dec  6 15:19:47 2025 GMT
            Not After : Dec 13 15:19:47 2025 GMT
        Subject: CN=69344993-8def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:f2:f5:0e:80:e6:1c:9c:1a:2a:8a:9b:0a:
                    0e:fa:f2:64:91:cf:54:38:81:d3:0b:b0:05:9d:33:
                    34:d1:68:30:e2:b3:7d:90:ba:97:98:e7:c0:ac:83:
                    50:76:39:2f:87:f6:d3:ac:6c:90:d9:87:bd:02:ae:
                    c5:c8:46:d9:f5:c2:bb:16:b7:77:3d:e6:32:5f:64:
                    a0:27:52:c1:29:f1:c9:97:1f:2b:50:6b:0d:41:5a:
                    2e:a7:39:53:02:cc:c7:73:c3:be:84:cf:04:4c:c3:
                    7f:ee:c5:f4:31:65:a8:35:aa:20:2f:22:64:1b:1f:
                    d7:dc:b3:73:37:8d:f9:e2:c6:00:ec:12:4a:54:1d:
                    a5:c4:d8:56:72:11:1a:f6:35:ed:2a:36:de:d2:f1:
                    8f:2e:50:bd:72:1e:1e:ae:28:7e:05:bb:b7:11:15:
                    60:27:2d:f9:bf:6b:75:3f:0e:78:f4:5c:6a:d7:af:
                    e1:93:ae:6d:cd:2e:f0:38:24:0a:6b:4d:3c:ef:ea:
                    de:ab:b8:b5:62:a9:b9:f4:1f:0a:45:03:f5:6b:76:
                    85:ad:6b:be:ea:e2:c3:90:d5:20:03:68:2a:af:72:
                    b9:95:97:a0:b1:b9:e8:8c:79:f3:de:1c:1b:78:b4:
                    1e:ec:8f:14:37:de:41:10:a4:3d:78:6d:c6:db:b5:
                    7b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2F:DE:3B:9E:13:B9:B1:6C:49:01:C8:FD:7C:D7:BE:67:DC:50:34
            X509v3 Authority Key Identifier:
                keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7f:35:9e:ea:a1:05:42:ac:81:6c:2e:6e:45:fc:99:8f:15:
         c8:6d:9b:02:18:3a:32:77:3f:a4:7b:b4:fc:35:56:2b:ab:2e:
         49:27:0a:b9:9b:a5:08:19:31:e4:d9:ad:45:06:0d:d1:6a:53:
         1d:fe:39:db:9b:f6:06:02:00:36:0b:63:62:89:64:88:d3:8f:
         b6:b0:1a:c9:ad:e7:29:23:5e:9a:92:5c:85:42:23:7a:bc:a4:
         15:54:80:18:ba:7b:78:c6:9d:e7:a3:93:2c:b4:35:99:3e:81:
         e1:f7:d8:f4:53:cd:f5:33:9f:3e:3f:62:11:cc:77:c5:6b:4b:
         04:dd:4d:a4:a6:00:02:f8:9b:84:d7:de:39:f7:68:a4:c0:72:
         27:fa:fe:8f:d9:6c:cd:26:30:c2:86:5d:6c:4e:dc:d2:31:d0:
         13:c9:25:3d:ac:d1:0b:6f:cf:47:a7:c6:f4:9c:43:ac:3a:45:
         3a:73:f3:71:c2:0c:2a:23:c4:d1:1e:78:8f:21:a1:b9:34:77:
         ec:9b:c8:82:5d:7c:79:07:06:9e:79:ec:2b:97:ed:38:a1:fe:
         c0:1b:05:58:5a:73:af:a6:05:73:f6:14:38:d3:16:3d:45:8d:
         61:95:99:24:85:d0:de:49:e1:76:35:9a:36:2d:94:a8:62:5a:
         18:7d:0a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:35 2025 by rpki-client