This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
File:                     ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json)
Hash identifier:          8Bm3vaOsCN96Qz1yleeRkOhleRMDukrO7WmUHhxXzjo=
Subject key identifier:   16:E0:28:56:AD:54:7F:A1:69:B6:21:0C:1C:84:CB:50:E0:ED:C2:21
Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
Certificate issuer:       /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
Certificate serial:       0624
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
Manifest number:          0623
Signing time:             Thu 04 Dec 2025 21:31:53 +0000
Manifest this update:     Thu 04 Dec 2025 21:31:52 +0000
Manifest next update:     Thu 11 Dec 2025 21:31:52 +0000
Files and hashes:         1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: o8j6bMaSWE/PXJ092QHEsqtW7QsI4s3/9e+K+7MEtjU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl
                          rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572 (0x624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
        Validity
            Not Before: Dec  4 21:31:52 2025 GMT
            Not After : Dec 11 21:31:52 2025 GMT
        Subject: CN=6931fdc9-0f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:29:17:89:2b:ba:0f:88:0d:54:f7:c2:60:36:
                    1a:10:3f:2e:70:95:29:c0:82:e1:75:03:a0:b5:86:
                    e2:f8:f5:00:5a:b6:26:9a:82:65:00:e3:ea:13:77:
                    6a:a6:a6:b9:a2:82:28:bc:6a:22:64:2a:cf:a6:21:
                    b3:67:21:5d:30:05:fc:76:6f:75:78:61:51:5f:83:
                    5e:71:1c:39:47:2e:7c:cc:30:e1:b2:46:e7:5c:ad:
                    d3:7a:69:d1:d1:63:6e:b9:ac:98:25:36:d1:f4:06:
                    ad:df:2c:9f:5a:15:f2:33:98:13:aa:88:78:b3:91:
                    4b:fd:e5:ee:03:47:52:5c:b2:23:a9:aa:a2:26:56:
                    c5:49:c6:ff:e4:99:30:60:31:c5:7b:65:77:50:7c:
                    db:88:9b:08:98:b3:66:30:3b:83:ec:35:6c:5b:29:
                    ba:aa:f0:22:87:c8:f1:28:fd:f1:cb:17:be:c3:34:
                    48:d6:84:09:fb:99:e5:f6:4b:2e:bf:68:15:a8:e7:
                    cc:a4:b2:4c:3e:1f:be:46:3e:30:f2:7c:7c:21:81:
                    2d:56:a7:d7:04:97:09:dc:8c:ad:85:ae:52:46:a1:
                    ed:02:7e:db:26:4b:57:1b:a3:67:52:ce:28:5d:1e:
                    02:61:c9:2a:86:3c:6b:1b:2a:73:37:37:fd:4b:5b:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E0:28:56:AD:54:7F:A1:69:B6:21:0C:1C:84:CB:50:E0:ED:C2:21
            X509v3 Authority Key Identifier:
                keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:5e:17:f5:24:83:4f:24:4e:9f:87:61:69:f9:d2:b2:30:00:
         cd:d4:31:d0:92:f8:40:0c:2e:d0:62:ad:51:f6:97:57:4d:ec:
         5c:80:08:3b:83:7f:e5:82:bb:9f:4c:21:16:b6:a2:21:f2:d9:
         32:ee:49:4d:ff:40:2a:aa:6d:a0:65:22:ac:b6:a8:83:40:0d:
         b0:6a:0f:21:1a:86:56:63:20:3f:ff:29:dd:8a:0c:29:65:fd:
         a9:80:16:05:39:5f:7e:bd:f7:49:83:50:31:6c:48:85:3a:40:
         f7:b9:e2:81:44:03:e9:f8:6f:20:5c:5e:91:6c:fd:5d:85:f3:
         03:ba:5c:be:db:06:0c:d6:78:54:8e:86:50:4e:b3:b5:fd:87:
         be:81:29:a6:d1:10:d9:41:46:ad:4c:13:fe:31:74:6a:71:16:
         b9:91:4b:b2:a8:ed:c1:5a:b3:39:bd:eb:e9:ed:a4:15:2f:d2:
         26:18:2d:00:cc:68:c7:80:19:8d:56:7e:61:6d:e6:62:f7:ef:
         05:46:96:7a:81:9d:d5:80:89:89:6b:f0:a4:f9:ac:e2:4b:53:
         14:dc:12:7a:cb:fd:e8:8f:4d:1b:1f:b4:97:4f:fe:2a:fa:fe:
         dd:31:5f:b1:7c:55:c1:3c:b2:f1:c7:0e:57:0d:04:eb:40:32:
         73:e0:93:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:32 2025 by rpki-client