This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
File:                     i9h5ncunV8W0WNZuOcYMnKP3mms.mft (raw, json)
Hash identifier:          EaHKQqfj1Hs7zz6IjtV9ILkOJFtEOg0yL8Gc0uRLvvs=
Subject key identifier:   F7:4C:96:FF:7C:D0:9A:CC:F6:49:D0:81:18:51:65:2D:D8:58:71:47
Authority key identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B
Certificate issuer:       /CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B
Certificate serial:       07D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
Manifest number:          07CF
Signing time:             Thu 04 Dec 2025 20:16:45 +0000
Manifest this update:     Thu 04 Dec 2025 20:16:44 +0000
Manifest next update:     Thu 11 Dec 2025 20:16:44 +0000
Files and hashes:         1: i9h5ncunV8W0WNZuOcYMnKP3mms.crl (hash: VKGvP8bYi5hTRMZgfUggB2Y3gNraSn8uGGL7jH1cXPs=)
                          2: 2EEE5DDCB88011EB9C88057CC4F9AE02.roa (hash: SWfmHsYgLeX6Ajo70XLTCcdA8vnlSbHKd4shqjdVG6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl
                          rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2006 (0x7d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BCCF, serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B
        Validity
            Not Before: Dec  4 20:16:44 2025 GMT
            Not After : Dec 11 20:16:44 2025 GMT
        Subject: CN=6931ec2c-5b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cb:89:e5:d3:63:a4:5d:bc:4d:4e:6d:44:8f:
                    5a:eb:aa:ea:66:59:1b:8d:e8:df:13:3b:09:7a:46:
                    7b:3c:f8:46:39:e6:21:94:4b:88:42:36:86:b4:07:
                    13:f5:33:43:61:c5:a4:24:a3:1d:4b:d3:fa:d2:21:
                    4b:a3:d2:13:0f:78:22:d6:d5:b2:d9:78:db:35:7b:
                    ca:03:b5:93:d7:4b:1e:bc:18:c8:3d:94:e5:53:2c:
                    38:85:8d:56:10:f7:e1:5b:92:46:c0:60:b1:39:eb:
                    99:1e:76:22:8d:14:49:70:10:04:21:d4:e5:62:3d:
                    26:35:b8:b8:f6:77:a9:c9:f6:ca:57:34:2f:42:18:
                    80:ce:1e:0c:11:fa:0a:d8:1d:99:6f:78:a7:ba:6e:
                    2d:e1:13:63:40:67:1c:2b:89:84:1a:a8:b8:a3:6d:
                    19:29:5d:f7:e5:8b:24:25:6d:b0:d3:e0:30:0b:16:
                    67:e1:c4:89:d4:84:7b:5f:77:65:93:0a:5c:6f:0f:
                    6e:32:3f:24:e7:fc:59:83:48:08:a1:af:90:c1:31:
                    2d:84:25:61:e1:15:33:01:79:20:06:97:7d:2c:e0:
                    23:57:b1:1d:2f:6a:c8:4a:30:e4:c4:b2:e3:9e:be:
                    37:14:29:d4:01:ab:b1:7c:9a:95:9b:28:13:04:9b:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4C:96:FF:7C:D0:9A:CC:F6:49:D0:81:18:51:65:2D:D8:58:71:47
            X509v3 Authority Key Identifier:
                keyid:8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2f:67:f9:ac:be:b3:ea:eb:51:af:36:df:89:f6:33:a2:70:
         fc:0e:1f:80:fa:9b:1f:e6:49:e7:01:fa:97:94:bf:4b:71:d8:
         06:10:2e:9a:22:82:83:b7:f0:2a:7b:54:fb:8c:17:b0:15:a6:
         12:91:1b:c2:e9:75:ce:cb:76:9e:c6:d3:eb:d9:de:9a:b7:c6:
         53:c6:cd:04:b1:08:85:e1:2b:31:3f:b4:0e:a8:24:2a:82:41:
         d3:15:a6:66:55:2f:5c:c3:14:76:ff:ba:be:0d:76:24:b6:87:
         71:59:da:ea:40:05:15:51:a0:ff:76:4e:f7:28:6b:33:1a:88:
         98:2c:1f:84:12:cc:da:3c:96:9f:36:eb:5d:e5:6a:c5:05:55:
         79:bf:72:f8:5c:06:ca:21:85:3d:92:dd:58:35:00:77:be:51:
         f0:18:65:1b:c1:84:37:9e:13:26:87:29:63:8b:4b:3a:f4:30:
         51:bf:f8:79:af:f5:91:4d:cc:02:90:c7:15:ff:85:03:c0:88:
         69:01:ad:28:fa:a6:fd:16:2e:da:bc:41:31:05:8d:4a:44:1f:
         5e:3c:e5:53:5a:9e:cc:6a:59:1a:93:4d:01:c2:51:ef:2c:36:
         e8:1c:e8:8d:d9:0a:1e:ad:8a:5b:5b:fc:83:cc:00:9c:f7:0f:
         24:f1:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:08 2025 by rpki-client