This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
File:                     pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json)
Hash identifier:          sNOGxXpnXOpBAssRma6MT/RrJh3U+1WOwWjwl6PRg88=
Subject key identifier:   08:86:EC:70:C1:16:CB:F8:38:71:EB:6B:1B:3C:1A:D9:98:C7:A2:D7
Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96
Certificate issuer:       /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
Certificate serial:       041E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
Manifest number:          0418
Signing time:             Thu 04 Dec 2025 22:51:58 +0000
Manifest this update:     Thu 04 Dec 2025 22:51:57 +0000
Manifest next update:     Thu 11 Dec 2025 22:51:57 +0000
Files and hashes:         1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: 9xuddTMcyiVm8cGsCMTymAGIP9gbHfU+wz75JFWimVw=)
                          2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: 2seh0qxAc2BF9PqaOJpWiLsBwQeqToRGwKWIaD/PtHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl
                          rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054 (0x41e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
        Validity
            Not Before: Dec  4 22:51:57 2025 GMT
            Not After : Dec 11 22:51:57 2025 GMT
        Subject: CN=6932108e-a6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d2:57:e8:ba:ce:3f:95:07:97:c6:93:33:5c:
                    c9:15:6c:87:f8:8e:85:e6:11:ab:09:ae:a0:b6:62:
                    1f:14:aa:8e:39:44:c6:3f:79:30:68:50:0d:99:bb:
                    b7:b9:52:16:e7:f2:be:1e:a2:76:ae:fc:86:16:d3:
                    6d:9f:34:27:20:13:a7:b8:f5:78:20:40:99:f2:f7:
                    55:54:48:7e:72:8d:8b:8a:fa:5e:86:20:5b:e9:2f:
                    70:f8:78:1f:95:de:a9:63:24:4c:36:44:04:11:64:
                    c9:1a:95:59:58:0d:af:97:0f:d1:64:d6:71:79:2d:
                    06:a4:8f:56:f5:1a:84:cd:5d:cc:0b:25:db:3f:59:
                    57:45:a3:d8:65:e4:d0:56:7b:3c:18:04:34:68:c6:
                    7f:c2:58:9a:f6:8d:4c:6e:87:48:31:1e:84:de:e7:
                    bd:44:b7:ef:9c:55:8f:e4:f6:43:da:7a:2a:1f:5c:
                    7b:71:a6:d3:e3:da:e9:6e:a0:02:5b:50:49:43:5d:
                    87:90:1e:f9:db:ad:37:8b:f6:df:3a:9d:70:58:26:
                    13:4b:18:4e:50:60:8d:b1:fa:87:53:f6:73:80:24:
                    b1:f5:ca:8a:50:43:00:7c:43:6e:97:52:1a:3f:96:
                    9c:e9:ac:0e:03:61:c7:69:b5:61:2c:92:8f:eb:aa:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:86:EC:70:C1:16:CB:F8:38:71:EB:6B:1B:3C:1A:D9:98:C7:A2:D7
            X509v3 Authority Key Identifier:
                keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:86:24:18:73:f9:12:b2:6b:3c:65:59:4b:c3:15:1a:69:1a:
         ec:34:1f:f6:6a:5c:30:2a:5c:a9:15:4a:90:c1:90:c0:ce:0b:
         b2:6a:fc:37:37:3a:81:11:17:57:b6:8e:0b:47:fe:37:ab:c3:
         20:a8:d5:2f:e6:a2:75:41:01:11:0e:63:8f:4b:64:e9:40:d4:
         d1:48:e1:67:bb:62:eb:4e:e8:a7:ca:97:e1:30:a5:31:26:4c:
         4e:6a:99:93:e8:49:2f:fc:90:b2:c6:e8:ae:1c:22:fb:45:e3:
         1c:d9:a7:c4:b8:d2:9d:3c:bb:be:6b:5d:53:d5:bf:23:c0:50:
         9c:39:22:be:c1:9f:cf:9d:42:bb:39:33:80:3b:de:7f:12:a2:
         56:49:e7:a4:4f:d7:bf:d2:2c:6c:41:45:bd:72:4d:9e:60:86:
         e3:02:50:76:f8:06:9e:f8:58:b6:0b:06:22:b9:ba:70:18:c7:
         de:64:13:1c:56:ed:cf:db:d7:75:1f:5e:2c:38:05:67:b6:02:
         74:9a:f9:64:b8:ab:6f:12:50:4a:43:d9:78:13:1f:48:68:a6:
         9c:ff:89:3b:7f:17:4e:53:5d:71:07:07:ae:6c:63:28:63:34:
         52:c1:9e:5b:86:27:f0:d7:42:f5:02:5b:38:73:21:45:f3:b4:
         c2:8d:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:52 2025 by rpki-client