This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File:                     4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier:          qMDprKhDiGUQmRbrHWpoGq7Egp4oUAib/f87F3gpJwo=
Subject key identifier:   8E:78:27:5A:DD:12:D1:B7:8C:E5:1C:8A:93:15:10:A2:36:19:87:C9
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer:       /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number:          0F
Signing time:             Fri 05 Dec 2025 05:46:10 +0000
Manifest this update:     Fri 05 Dec 2025 05:46:10 +0000
Manifest next update:     Fri 12 Dec 2025 05:46:10 +0000
Files and hashes:         1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: 2UMJTnvpllebMb+T6SW6u/Oqh+OaLmCDTDGfjIjearM=)
                          2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: TNETd0cqoIROY1IKJ9vVGYHnKUW/ruP3inR8Ay7O+xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
        Validity
            Not Before: Dec  5 05:46:10 2025 GMT
            Not After : Dec 12 05:46:10 2025 GMT
        Subject: CN=693271a2-76d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:25:7d:5a:5e:7f:67:1b:c0:e5:ce:09:07:
                    90:ce:ec:19:51:d5:b2:97:d2:3a:97:81:65:fc:0f:
                    95:a8:28:a1:1d:e2:d3:bb:b3:fb:ef:40:eb:81:32:
                    b3:ff:f6:96:69:99:59:31:02:ee:83:6d:5b:39:18:
                    97:51:e0:2c:90:2d:d6:85:92:ba:05:67:0e:21:02:
                    a9:12:a1:ac:81:e2:bd:b4:1d:69:1a:2a:69:58:70:
                    73:0e:a2:c1:3d:1e:f8:b0:08:dd:ab:c2:fd:c5:fd:
                    cb:ce:ef:1e:22:28:69:85:99:22:05:18:b8:a8:ca:
                    e6:8f:a0:29:cb:ca:f4:e1:de:e6:cc:3c:c1:a4:fd:
                    45:94:6d:7d:c5:85:51:ea:7a:ab:27:db:a2:a5:a5:
                    5d:f3:2f:d3:0d:be:b1:7c:80:57:01:4d:ed:56:32:
                    82:09:fb:58:8a:ba:fd:3d:73:41:5a:af:bb:af:5f:
                    05:e0:70:50:d5:b4:d0:b5:f7:ab:a4:a9:99:d8:33:
                    16:8a:0a:2d:e6:0b:88:03:d3:06:95:4f:eb:59:fb:
                    b1:34:03:3b:cd:c7:32:9b:68:6a:dd:7c:4c:4a:eb:
                    96:97:31:6d:ae:aa:95:16:50:ae:fb:55:2d:80:9e:
                    10:3e:1f:47:df:bb:d9:b9:7b:f6:93:09:e6:34:81:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:78:27:5A:DD:12:D1:B7:8C:E5:1C:8A:93:15:10:A2:36:19:87:C9
            X509v3 Authority Key Identifier:
                keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:58:06:1f:5f:ca:df:dd:e9:2d:fc:da:ab:8d:ac:17:87:fe:
         12:f1:5c:0e:28:24:18:cd:a1:ed:b2:5b:62:29:c0:e7:a5:2c:
         d5:ab:db:33:d5:19:a5:fc:75:dc:a8:36:1b:85:69:2e:4b:1b:
         6e:dd:00:8c:42:93:54:c9:46:63:e9:84:c8:59:a2:75:83:f6:
         61:05:8c:59:c5:29:51:33:fb:b8:b2:df:60:e7:cd:e7:f7:17:
         df:b9:73:be:cd:7d:0e:ca:b3:eb:62:43:17:db:a3:2a:0a:75:
         c2:6c:84:21:61:19:e9:1e:f7:69:e8:1f:3a:09:2c:bd:31:72:
         26:d7:3c:35:5a:41:60:b6:3c:9a:2f:d4:60:00:03:c1:c9:c0:
         7b:30:db:4c:55:19:43:c3:1a:97:fa:e1:6d:a7:4c:d5:fd:58:
         4a:2a:9e:16:b1:38:f3:a3:cb:7a:74:e9:b7:1a:8b:0c:cb:0c:
         34:7f:42:a7:75:d7:aa:b0:6a:4b:71:62:55:2b:8b:03:3a:41:
         db:53:2d:d0:2c:4a:86:50:36:c8:78:91:86:b9:a1:97:d3:d6:
         5f:5c:fc:b7:69:5d:c1:38:82:68:16:c6:36:21:87:6a:83:fb:
         45:0d:37:c4:0b:bb:b4:58:9a:b6:7e:d4:57:99:d0:cf:02:5c:
         78:12:3b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:46:23 2025 by rpki-client