This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
File:                     -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json)
Hash identifier:          8JG/zawq1qkKIT1rlldskAoDRRLWuIOU2TWPOapZHSs=
Subject key identifier:   B8:8D:B4:BF:BB:0F:77:DE:79:81:1C:C6:07:8B:1C:69:DC:72:74:A0
Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0
Certificate issuer:       /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0
Certificate serial:       0877
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
Manifest number:          086E
Signing time:             Thu 04 Dec 2025 19:43:37 +0000
Manifest this update:     Thu 04 Dec 2025 19:43:36 +0000
Manifest next update:     Thu 11 Dec 2025 19:43:36 +0000
Files and hashes:         1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: FMMU3Sa6S87zOWF/l5ExbxjhXbdPOs5UAOhd1bKZbtE=)
                          2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: uybnkX1k8gPyTR5CU7p1ceux1tCfl8jTIgkNDS2MSjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl
                          rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2167 (0x877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0
        Validity
            Not Before: Dec  4 19:43:36 2025 GMT
            Not After : Dec 11 19:43:36 2025 GMT
        Subject: CN=6931e468-4095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fb:6e:a2:c1:bf:64:aa:38:38:e2:c5:29:7c:
                    26:9a:80:96:46:e5:88:f7:99:e4:58:d3:08:ab:4e:
                    5c:86:27:05:1c:c3:18:c9:cc:c0:53:fc:b7:10:1e:
                    45:37:ef:5f:17:45:a6:41:f3:27:a5:85:e9:c5:ee:
                    74:78:b9:57:5e:9b:b5:d5:b2:ef:53:ac:e4:86:10:
                    b6:a3:9f:ae:95:e0:62:23:16:82:20:43:8a:93:3b:
                    b3:01:97:e4:99:a4:65:6d:f9:21:a9:71:e4:6c:6f:
                    af:05:b5:c3:f8:f4:7c:9a:d6:78:85:4d:53:cc:13:
                    66:34:b2:3a:47:fb:21:cf:64:9b:3d:34:ff:ce:5e:
                    ab:5c:f1:1c:b9:f8:06:84:7c:66:84:8a:43:c9:dd:
                    e0:d0:e7:dc:be:43:a9:f0:78:67:4a:34:48:84:e0:
                    39:0f:ec:d9:56:2f:00:1c:89:53:44:f6:1b:23:a1:
                    8f:08:77:ae:82:d9:9e:7d:83:9d:e5:65:48:89:bc:
                    b4:ad:25:be:26:86:bd:df:ea:cb:0e:1d:7c:ac:3a:
                    fa:5f:78:4b:38:15:41:42:79:45:86:8e:26:a0:ee:
                    02:bd:84:ee:0a:8a:92:5b:f7:9c:56:cd:e5:d1:75:
                    1b:18:67:8b:f6:31:66:db:0f:03:1d:52:99:77:a2:
                    00:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8D:B4:BF:BB:0F:77:DE:79:81:1C:C6:07:8B:1C:69:DC:72:74:A0
            X509v3 Authority Key Identifier:
                keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:32:b1:08:3a:0e:d6:aa:6d:9d:5c:57:81:42:70:29:65:c9:
         2e:9d:52:04:f8:cc:c8:95:d6:d0:b0:06:4d:bc:f0:35:fc:03:
         2c:bf:1a:64:58:fb:b9:b8:a8:21:99:28:b4:6c:34:7d:e3:4b:
         3e:c4:21:ea:41:1a:82:ad:17:b0:65:e7:b1:79:20:bf:71:29:
         c9:fc:5a:71:76:c1:c7:07:93:eb:c8:cc:46:ee:8d:dc:dc:b4:
         a3:cc:95:70:4f:39:e4:45:3f:04:76:9e:1a:4e:ab:a0:13:64:
         6e:05:cc:ef:ac:7c:af:6c:3a:19:00:d2:b8:53:a4:db:41:5b:
         ee:41:30:15:2f:c4:21:d5:1f:0f:80:68:2c:49:0b:ab:93:16:
         b6:66:87:90:25:4f:07:0e:91:40:29:82:71:4f:6e:15:2f:4e:
         ad:a1:17:0e:28:91:6e:9d:20:50:e7:5f:3b:d7:65:e9:19:d4:
         45:96:8e:25:f2:44:5c:a1:c2:82:c9:f0:75:ed:7a:ad:a8:de:
         a0:c2:e5:f0:7e:77:53:d3:fb:35:29:86:a9:fa:92:de:47:c7:
         1f:5e:e2:7a:73:63:e4:7b:f4:d0:8c:ba:1f:25:16:0c:81:e5:
         71:43:85:99:0b:f5:87:69:8d:df:94:06:73:1b:61:b1:06:5b:
         bf:10:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:36:27 2025 by rpki-client