This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
File:                     asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json)
Hash identifier:          IiiS9Z4muYzsauMhMbGsLEPYIE2G3V7G1tC92s8Itus=
Subject key identifier:   F9:94:84:1A:8C:BF:31:5A:A2:EE:CC:58:74:F6:9E:CE:8A:C5:97:7C
Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
Certificate issuer:       /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Certificate serial:       0C26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
Manifest number:          0C1A
Signing time:             Sat 06 Dec 2025 18:07:06 +0000
Manifest this update:     Sat 06 Dec 2025 18:07:06 +0000
Manifest next update:     Sat 13 Dec 2025 18:07:06 +0000
Files and hashes:         1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: LwlvgAC4v1liCaEkTUpQTglJcwd7USPWLZAicaBeeYw=)
                          2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: hA+WjNUTeG1AnXZuvAjzzld8pq8Hs2wTD6vIEKRFdS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
                          rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3110 (0xc26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
        Validity
            Not Before: Dec  6 18:07:06 2025 GMT
            Not After : Dec 13 18:07:06 2025 GMT
        Subject: CN=693470ca-ca13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:c4:5e:d6:41:c4:ef:60:1f:77:07:bd:d6:
                    55:a1:7a:a1:9a:79:de:3a:93:6d:2d:7d:e4:1b:db:
                    38:67:46:f4:f6:f6:13:02:02:9c:54:8c:94:a1:29:
                    10:58:f9:2f:84:ea:e0:83:cc:37:7d:36:51:7a:4c:
                    c7:3e:bf:19:e1:c8:65:68:90:54:b9:a3:d9:08:2a:
                    5d:8a:9c:51:6b:eb:81:75:2b:c5:da:fd:b4:0c:63:
                    ee:b6:6c:a2:88:eb:a4:91:f1:72:16:8f:a9:45:5e:
                    6b:3a:14:15:b5:0d:28:96:e3:65:6f:34:6a:4b:7f:
                    c1:6b:b6:3c:0d:ed:36:5d:6a:05:17:b6:d4:f4:6e:
                    bc:d1:d8:35:51:f4:6f:b5:88:17:1f:f6:09:15:ff:
                    17:22:f7:d3:96:b2:c6:57:a7:83:16:2e:44:54:bf:
                    4a:f3:15:04:57:dc:ea:97:d8:bf:39:71:2c:97:90:
                    ca:2e:86:65:52:5e:28:b2:53:f4:0a:5c:0f:ed:05:
                    b8:db:81:4b:f5:fd:bd:9d:79:e3:a1:60:5a:e1:5c:
                    cc:8d:62:5c:ec:91:3d:37:a1:76:42:89:75:73:07:
                    44:c0:c4:c6:5f:26:f3:28:9f:72:83:e3:ea:da:8d:
                    32:30:da:b5:2c:39:5a:b7:6e:ad:27:49:32:89:37:
                    06:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:94:84:1A:8C:BF:31:5A:A2:EE:CC:58:74:F6:9E:CE:8A:C5:97:7C
            X509v3 Authority Key Identifier:
                keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:80:60:70:ed:00:5a:04:9e:00:5b:0a:98:4a:ef:d1:99:a6:
         32:87:6c:2c:38:bb:02:2b:bb:5b:5d:2d:9d:a1:bd:a3:8d:34:
         e2:f5:08:01:af:f4:24:bd:8f:63:30:fc:0d:a4:e0:9e:56:c1:
         94:02:fd:6e:5a:90:b4:96:15:d7:9e:5e:7a:45:d6:21:93:ae:
         84:b2:14:00:ae:08:21:f6:8d:1f:24:ad:30:02:b6:6a:bb:73:
         1c:c1:fa:6f:c2:7b:65:c6:80:3a:3b:75:0b:a0:1b:62:83:68:
         60:df:d2:46:4b:cf:b0:b1:04:ba:5e:fa:42:ed:3c:46:4b:c2:
         a9:49:52:c8:b0:43:e6:b0:85:87:03:2a:ee:8d:58:ae:4e:97:
         03:ac:32:1f:46:dd:8a:5d:03:0d:c9:f4:a6:80:bd:ff:3a:3c:
         9b:3f:ad:b8:4e:31:2c:92:3c:4b:64:81:f9:05:21:c5:c2:93:
         1a:c0:3a:34:73:60:7d:1d:cb:95:96:8e:18:67:b0:91:d6:26:
         6f:39:65:ba:d4:7d:18:1c:76:a2:65:50:f5:39:3e:89:4f:3d:
         36:89:6f:71:6a:63:49:1c:06:2b:cb:d4:48:68:0d:62:19:f3:
         ab:06:e8:c6:71:db:43:f1:f4:ef:90:b3:37:0c:06:31:19:1b:
         d6:b3:65:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:05 2025 by rpki-client