This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
File:                     9dBHSQ3jpO3P3Df27KuUk42nxvY.mft (raw, json)
Hash identifier:          ucQYRN7P7Tv5DcWq+hyUhOAB4lnOu+7yuNrN2Eg826c=
Subject key identifier:   CA:76:41:79:15:47:DA:F7:5A:1E:12:0E:CB:9F:15:80:AC:1D:09:55
Authority key identifier: F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
Certificate issuer:       /CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Certificate serial:       07F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
Manifest number:          07F0
Signing time:             Sat 20 Dec 2025 20:30:56 +0000
Manifest this update:     Sat 20 Dec 2025 20:30:56 +0000
Manifest next update:     Sat 27 Dec 2025 20:30:56 +0000
Files and hashes:         1: 9dBHSQ3jpO3P3Df27KuUk42nxvY.crl (hash: Zk+M9KKj5Hg+NknuqY2r5s2j7cyA7yDf0QilLOpL16c=)
                          2: 86BB53D0105611EB85F56114C4F9AE02.roa (hash: KB1SASAODtHX4iXAOPqmH65jf2A2E+pYmVeLrVchSyo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl
                          rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 20:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2040 (0x7f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913990E, serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
        Validity
            Not Before: Dec 20 20:30:56 2025 GMT
            Not After : Dec 27 20:30:56 2025 GMT
        Subject: CN=69470780-5551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:09:06:09:29:a1:52:b7:23:e9:c4:fa:bb:
                    49:bf:db:b5:2b:49:30:8b:2b:1f:06:77:01:4a:6f:
                    2f:1a:d9:34:63:59:f3:18:d1:aa:5c:d4:42:6a:d5:
                    31:b1:31:21:36:02:e8:d7:f4:86:5a:0c:2c:6d:ab:
                    59:4e:68:7a:ec:8e:e9:62:db:3c:44:46:9d:54:28:
                    00:26:5b:7e:ea:94:c5:4c:5a:aa:18:85:48:9d:55:
                    83:a5:2c:87:40:77:48:16:b7:58:04:9a:a4:5a:f3:
                    b8:66:dc:1b:12:cf:03:1d:d2:30:60:7a:a6:70:23:
                    1b:65:01:c2:10:10:eb:12:c4:f9:8b:90:2d:c3:29:
                    fe:e0:f7:e1:17:de:80:de:28:46:16:f3:3d:6d:53:
                    d0:63:3f:e1:b2:86:21:3f:f6:8a:00:f8:86:bb:d3:
                    64:e3:39:43:2c:d8:6c:10:e4:d9:93:2e:09:66:ca:
                    6b:43:45:74:73:04:b5:42:f5:90:4d:8d:34:bd:55:
                    4e:17:96:33:c3:5a:fb:04:95:84:0b:84:a9:76:7f:
                    fa:6c:02:8a:a2:61:48:41:f3:4e:af:6a:59:f0:47:
                    e6:a2:06:77:34:a3:65:cf:a0:59:85:b1:ef:51:8d:
                    96:93:34:66:28:b6:a7:cb:d0:da:87:9e:59:57:e5:
                    92:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:76:41:79:15:47:DA:F7:5A:1E:12:0E:CB:9F:15:80:AC:1D:09:55
            X509v3 Authority Key Identifier:
                keyid:F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:05:83:fb:b7:85:63:a4:81:d7:01:5d:b9:49:ab:44:7c:80:
         de:67:79:f1:e4:7c:fe:dd:de:16:e8:1f:ca:b2:83:4c:6a:a0:
         7b:ec:b6:53:2c:fb:b4:98:51:3e:fd:0d:01:ae:c0:f2:56:bf:
         bb:df:24:55:d8:f5:cd:59:53:7c:85:19:14:1f:f5:67:39:0b:
         6f:c3:fc:16:81:d8:ce:1a:f6:b2:76:58:ab:15:25:c6:bf:74:
         ea:7b:d7:49:ba:35:a6:ee:25:d4:18:7f:b2:ee:0e:9e:aa:a7:
         aa:1f:15:54:4a:e6:52:87:77:33:44:eb:6f:20:e2:14:57:29:
         34:88:da:c2:8a:af:2d:a9:c5:7b:38:4b:84:83:ec:81:cf:59:
         05:b0:f3:a3:da:7a:4d:d0:b2:75:0e:53:f0:a2:05:9d:b4:ea:
         0d:d2:ad:c6:4a:0f:af:f7:5b:f6:71:9b:b7:6d:92:48:4c:d6:
         0d:d1:7e:aa:58:7b:c8:26:ae:df:40:81:da:f8:2f:61:11:ee:
         7f:23:b1:0e:75:ea:1c:32:b6:72:46:ec:34:27:f3:21:c3:ce:
         9b:bf:77:67:b1:0f:30:76:80:97:d8:54:f8:04:18:26:61:44:
         61:cf:99:fd:9c:0b:95:b0:aa:fa:b2:b3:53:b5:ea:f7:e1:1f:
         1c:17:31:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzk5MEUxMTAvBgNVBAUTKEY1RDA0NzQ5MERFM0E0RURDRkRDMzdGNkVDQUI5NDkz
OERBN0M2RjYwHhcNMjUxMjIwMjAzMDU2WhcNMjUxMjI3MjAzMDU2WjAYMRYwFAYD
VQQDDA02OTQ3MDc4MC01NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuc0JBgkpoVK3I+nE+rtJv9u1K0kwiysfBncBSm8vGtk0Y1nzGNGqXNRCatUx
sTEhNgLo1/SGWgwsbatZTmh67I7pYts8REadVCgAJlt+6pTFTFqqGIVInVWDpSyH
QHdIFrdYBJqkWvO4ZtwbEs8DHdIwYHqmcCMbZQHCEBDrEsT5i5Atwyn+4PfhF96A
3ihGFvM9bVPQYz/hsoYhP/aKAPiGu9Nk4zlDLNhsEOTZky4JZsprQ0V0cwS1QvWQ
TY00vVVOF5Yzw1r7BJWEC4Spdn/6bAKKomFIQfNOr2pZ8EfmogZ3NKNlz6BZhbHv
UY2WkzRmKLany9Dah55ZV+WSiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMp2QXkV
R9r3Wh4SDsufFYCsHQlVMB8GA1UdIwQYMBaAFPXQR0kN46Ttz9w39uyrlJONp8b2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTkwRS83RTQ2NEIzNDEw
NTUxMUVCODBGODgxMTNDNEY5QUUwMi85ZEJIU1EzanBPM1AzRGYyN0t1VWs0Mm54
dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlkQkhTUTNqcE8zUDNEZjI3S3VVazQybnh2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTkwRS83RTQ2NEIzNDEwNTUxMUVCODBGODgxMTNDNEY5QUUwMi85ZEJIU1EzanBP
M1AzRGYyN0t1VWs0Mm54dlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHBYP7t4VjpIHXAV25SatEfIDeZ3nx5Hz+3d4W6B/KsoNMaqB77LZT
LPu0mFE+/Q0BrsDyVr+73yRV2PXNWVN8hRkUH/VnOQtvw/wWgdjOGvaydlirFSXG
v3Tqe9dJujWm7iXUGH+y7g6eqqeqHxVUSuZSh3czROtvIOIUVyk0iNrCiq8tqcV7
OEuEg+yBz1kFsPOj2npN0LJ1DlPwogWdtOoN0q3GSg+v91v2cZu3bZJITNYN0X6q
WHvIJq7fQIHa+C9hEe5/I7EOdeocMrZyRuw0J/Mhw86bv3dnsQ8wdoCX2FT4BBgm
YURhz5n9nAuVsKr6srNTter34R8cFzEC
-----END CERTIFICATE-----
Generated at Sun Dec 21 17:29:25 2025 by rpki-client