This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
File:                     9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft (raw, json)
Hash identifier:          r8J3g2Vd5QL/lC9ntaZvPOehFi5xkbK7/GvNQc6Y65w=
Subject key identifier:   E0:3A:F2:08:F1:18:2D:6F:64:FE:C8:61:51:6E:BF:C4:5A:19:A7:FA
Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8
Certificate issuer:       /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
Manifest number:          9B
Signing time:             Fri 05 Dec 2025 04:27:25 +0000
Manifest this update:     Fri 05 Dec 2025 04:27:24 +0000
Manifest next update:     Fri 12 Dec 2025 04:27:24 +0000
Files and hashes:         1: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl (hash: JjXtjAD0sa77mfpJFoPbGbkQpaACIHvAP1mXdc0fDsM=)
                          2: 54438BB2150A11F08FAB4D29C4F9AE02.roa (hash: QyFlPzNaTAV4qZ+Q91sObqyXdS2spwmY+8JMAhH/OYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl
                          rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:27:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
        Validity
            Not Before: Dec  5 04:27:24 2025 GMT
            Not After : Dec 12 04:27:24 2025 GMT
        Subject: CN=69325f2c-0fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f1:8d:d0:7f:e2:e4:f7:0c:86:45:db:8a:6b:
                    3b:a8:f3:0b:b1:d8:ad:38:c9:95:bc:a2:b4:03:00:
                    4c:35:28:8d:38:a8:15:69:c5:4c:48:22:b0:0e:6c:
                    e7:83:d7:83:65:90:01:46:06:8f:5d:34:85:8a:c7:
                    17:8f:4b:a9:32:07:cb:ef:9b:b0:7e:4b:a7:f5:f4:
                    4b:e7:c6:17:be:28:84:8e:bb:3b:62:5b:72:f4:84:
                    26:2a:01:13:1a:30:5d:c5:b2:99:17:b0:73:3e:2c:
                    f2:7c:c5:a0:51:a4:d1:1a:ec:11:d2:7c:2e:63:fc:
                    32:9f:b0:f9:75:23:70:ba:2b:af:67:8d:ba:12:ee:
                    32:53:ef:1a:36:d8:71:10:89:18:37:44:2c:09:50:
                    ea:48:37:fc:6a:cc:a0:12:65:97:33:f1:e6:91:02:
                    f9:33:c8:48:32:bc:1d:48:e5:64:ac:49:92:98:67:
                    17:2f:b6:2a:e7:72:2e:57:d4:2d:5e:68:fb:0c:bb:
                    81:54:e7:dd:ea:61:b9:20:fa:3f:03:24:81:68:09:
                    e8:96:0e:a3:57:40:a7:e7:ef:d2:5a:45:f4:62:54:
                    d6:7b:41:42:90:c3:bf:48:4f:86:b6:b3:ec:49:a1:
                    80:b0:0c:b9:b1:ef:74:26:7f:19:14:43:91:36:3f:
                    f9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3A:F2:08:F1:18:2D:6F:64:FE:C8:61:51:6E:BF:C4:5A:19:A7:FA
            X509v3 Authority Key Identifier:
                keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:ba:c8:4e:b6:fb:ff:3f:3f:5d:bb:e1:ca:16:4a:93:8f:
         7f:b8:f3:9e:6f:dd:51:6a:73:6e:1e:fd:e5:b4:e4:1c:44:f0:
         f8:7e:61:8b:e2:c1:20:aa:32:7d:dd:ac:cd:6c:f9:db:02:11:
         22:63:12:fd:b3:ed:4f:89:a7:c7:8c:78:c1:54:7e:b9:74:00:
         47:4c:8b:8a:d3:0b:b8:65:69:c2:3d:2b:b8:6d:2f:91:f6:63:
         60:47:4a:55:5e:97:9c:04:d1:61:c3:ee:32:de:c1:08:29:10:
         2c:14:b5:99:fa:b9:92:ab:c0:42:79:e4:06:8a:c6:f9:79:2d:
         58:13:0c:6d:e5:04:f0:da:b6:6b:49:7b:3e:53:a5:fc:79:7f:
         91:6e:18:31:43:3e:1d:5a:33:43:68:62:04:2e:4e:e7:85:41:
         0c:6c:a8:d4:0c:ba:50:5b:5b:5c:5a:d6:76:33:d9:99:20:54:
         bf:91:b7:47:c9:34:a0:62:47:cf:d8:eb:7f:aa:dd:57:6d:8f:
         0e:05:92:2c:6d:42:78:41:4a:ab:ba:3d:3f:42:02:70:b4:0a:
         d2:3b:80:53:c9:b5:d1:0a:f2:8a:63:3d:56:31:c8:9f:55:e2:
         cb:c8:6e:42:ff:30:13:26:a5:55:6f:37:60:14:ea:44:60:24:
         fe:79:25:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:19:39 2025 by rpki-client