This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
File:                     9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json)
Hash identifier:          WnDVGNBBrUryy/HRq1qHF8o5Hh/UN4HmOEVZGLR2euA=
Subject key identifier:   C2:90:CC:0C:61:B5:3C:4B:12:F9:6A:D8:2F:CE:E6:48:C2:2F:7E:86
Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
Certificate issuer:       /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
Manifest number:          66
Signing time:             Fri 05 Dec 2025 04:52:46 +0000
Manifest this update:     Fri 05 Dec 2025 04:52:45 +0000
Manifest next update:     Fri 12 Dec 2025 04:52:45 +0000
Files and hashes:         1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: wte1YesTK4FOEkGU6qVuOlp0EAr490PmkXSmF/g0mR0=)
                          2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl
                          rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
        Validity
            Not Before: Dec  5 04:52:45 2025 GMT
            Not After : Dec 12 04:52:45 2025 GMT
        Subject: CN=6932651d-acf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8f:02:48:d2:68:ce:10:13:48:ac:c9:a0:73:
                    b6:06:13:94:bc:06:62:9d:cc:68:c6:c6:aa:c9:be:
                    80:50:a3:62:b4:59:d5:c1:ae:f0:0c:57:29:d9:d4:
                    10:11:79:73:be:ff:15:0a:c7:13:8b:db:39:04:b3:
                    72:4a:c6:89:2b:1f:8e:71:ae:16:62:6c:97:03:89:
                    fc:d8:21:a7:bb:85:4d:b9:e9:07:11:da:9e:4d:69:
                    a7:29:df:73:33:90:06:b2:c9:73:11:cd:13:3c:dc:
                    36:15:f9:92:ac:88:e6:97:80:e3:a5:25:d2:73:14:
                    08:a0:dc:45:69:17:d3:e5:10:4f:46:5f:e5:9d:53:
                    80:0f:33:4a:1f:cc:f0:39:c4:39:c0:c0:74:59:db:
                    01:c7:76:d3:49:f3:b8:26:f8:23:1f:0e:ae:b3:c6:
                    0b:e0:9a:40:c3:82:c4:9f:78:bc:f9:b2:68:10:41:
                    8d:5f:9e:cd:06:ce:7e:bd:15:d8:4a:85:eb:1d:3c:
                    c3:d3:75:48:47:3d:ca:1f:c2:30:1c:1d:64:6e:f9:
                    45:53:4f:66:66:34:83:03:5c:e8:24:73:77:91:f8:
                    6e:53:35:88:4e:95:34:49:c6:56:55:14:d4:76:ee:
                    a2:c1:7e:b8:a6:70:51:b2:78:2c:ad:e4:73:d7:a2:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:90:CC:0C:61:B5:3C:4B:12:F9:6A:D8:2F:CE:E6:48:C2:2F:7E:86
            X509v3 Authority Key Identifier:
                keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b5:9c:15:f4:93:7a:ed:8f:6c:d1:e6:8f:75:cd:39:ef:ff:
         e8:69:99:30:44:dc:28:1d:db:99:03:03:0c:1e:c3:65:82:b6:
         23:73:e4:ee:35:26:f5:1c:76:d2:e2:5b:71:b3:d1:18:a3:99:
         6a:d2:04:b7:25:2e:af:7e:10:d3:66:10:7b:c0:24:0d:f2:02:
         10:9e:07:a9:f2:a9:e8:6e:5c:7f:bf:37:0c:9e:39:24:75:96:
         08:c4:59:80:50:17:b7:4f:78:48:74:ea:e4:a1:ca:b0:b0:f7:
         43:5d:f7:91:41:1b:b5:60:57:eb:08:e5:63:e1:01:d0:4f:0d:
         b1:fe:e9:87:17:81:36:66:62:76:1c:e6:01:3b:db:45:9f:a1:
         f3:87:da:e4:4b:46:81:08:5a:78:4d:b6:3c:54:56:d2:c5:e7:
         04:37:e3:cd:2b:97:86:a3:6b:04:1a:20:b2:6f:10:63:11:10:
         47:be:62:35:3e:41:69:da:a6:cf:5f:b8:e2:2c:23:ec:8c:21:
         6e:48:54:fe:7c:c2:f7:df:0e:2e:28:9b:57:c1:64:f6:95:41:
         97:85:bf:6e:ae:b1:ba:27:58:f7:e3:6c:f4:80:ce:b2:99:f4:
         d2:3f:51:8f:88:89:8a:ec:a3:e4:a9:d8:ab:b0:c7:6e:d1:93:
         50:47:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:26 2025 by rpki-client