This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
File:                     DpNmGsFhVPZdKi94GgMfNckxAQM.mft (raw, json)
Hash identifier:          7fQoNjv3pWcVvEvst3facHyJ8bZZVixoIn0p3MhRSTI=
Subject key identifier:   FF:CD:3B:03:2D:6D:8B:DA:2D:8F:53:8D:FE:C4:EA:C9:B3:12:72:39
Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03
Certificate issuer:       /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
Manifest number:          AD
Signing time:             Fri 05 Dec 2025 04:10:10 +0000
Manifest this update:     Fri 05 Dec 2025 04:10:10 +0000
Manifest next update:     Fri 12 Dec 2025 04:10:10 +0000
Files and hashes:         1: DpNmGsFhVPZdKi94GgMfNckxAQM.crl (hash: gMCRokNizjVfck07H+GbcCCkzfa6/be58Dd8mOOvTI4=)
                          2: B534A848E2CE11EFA7030E56C4F9AE02.roa (hash: wWfdJ3ojQgnjYv+xQZQJGvsjjx2qqrsimiX/OkxE+Zs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl
                          rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138959, serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
        Validity
            Not Before: Dec  5 04:10:10 2025 GMT
            Not After : Dec 12 04:10:10 2025 GMT
        Subject: CN=69325b22-7de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:88:de:88:fd:11:09:c0:c6:40:c0:ae:8d:4f:
                    eb:f1:7f:72:ef:be:9c:55:fa:01:fd:ba:fd:0e:4e:
                    97:a5:1d:7c:63:d3:2f:fe:1d:00:bb:c2:b8:b6:b5:
                    a5:cb:e4:56:3e:96:93:d6:02:93:99:6f:f4:bc:ce:
                    87:a4:6e:50:1c:99:56:7d:78:ae:c2:e2:c5:cf:9d:
                    65:48:6c:43:ff:23:ab:38:25:7e:07:4d:88:b0:47:
                    25:86:ce:84:19:1d:5a:44:2b:3f:df:61:57:83:a5:
                    a9:05:f4:0f:ac:e9:43:0f:e1:78:34:aa:ab:f3:69:
                    bb:a5:7f:2c:77:38:3f:f9:00:7b:7e:df:11:ae:c8:
                    0f:c7:e0:40:74:6a:6c:71:71:a4:a5:54:4b:49:16:
                    6a:f5:ec:6a:ef:5d:7c:f4:a1:f1:12:0f:7f:e5:98:
                    97:2e:09:1d:98:7d:13:da:cd:cd:87:dd:44:51:64:
                    36:65:47:54:b8:e3:1d:5d:03:5b:23:2d:67:de:c7:
                    4d:2e:d1:04:2f:e0:13:56:df:22:db:40:71:4c:d8:
                    c2:42:f9:8d:0f:68:e3:0f:ee:b6:69:b2:34:e4:b9:
                    e7:9c:2d:be:ab:9c:67:9f:e4:77:b5:81:d9:7d:98:
                    37:be:b7:29:dd:f9:62:fb:27:14:01:b7:c5:7f:62:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CD:3B:03:2D:6D:8B:DA:2D:8F:53:8D:FE:C4:EA:C9:B3:12:72:39
            X509v3 Authority Key Identifier:
                keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:e6:24:3b:62:94:5c:80:9a:d2:45:4b:09:69:d7:8c:7d:
         cc:7e:c6:2b:84:ae:b4:b4:c9:01:25:22:2d:28:6f:36:ca:85:
         e6:ec:01:a8:a3:be:dc:5f:a2:1b:88:32:a7:75:23:19:b7:46:
         f3:03:0e:10:f0:42:e7:24:1c:35:1d:72:cf:45:be:ab:42:d8:
         ed:7c:10:d7:f0:57:f3:9a:be:49:d1:17:a5:6a:97:7c:0c:14:
         1a:d7:d6:4c:32:4d:81:a9:9a:69:ae:9a:53:d8:8d:9b:34:b1:
         96:d8:50:f0:b5:53:76:29:c8:ad:d9:53:64:55:59:55:72:bd:
         ba:73:32:d0:8a:ac:d2:ac:64:b5:a6:99:83:6d:b6:0b:4c:b0:
         cd:e3:11:53:29:4d:b0:9d:71:a6:08:cd:98:33:d3:4d:70:3a:
         e9:a3:af:8a:43:9b:97:d1:c3:ab:e4:9e:ae:c6:c6:0f:b4:45:
         13:d8:59:b6:e1:30:83:1d:05:e1:49:3d:5e:36:69:c2:9f:95:
         58:d3:1a:d2:b7:18:1e:b0:82:fe:ed:be:8d:b2:ee:cc:fb:69:
         47:5d:5b:82:d9:57:d7:6a:42:22:04:78:a6:a7:0e:b4:ea:35:
         f9:5b:63:50:35:e5:0c:e6:c5:4b:40:c1:99:bd:b9:03:37:df:
         6b:21:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:20:07 2025 by rpki-client