This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
File:                     DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json)
Hash identifier:          Bz4Wgh78edmcNTJLeXvl1fd6z48AoTDWlLXr6MnVFy0=
Subject key identifier:   E6:5E:5E:4B:42:4E:D1:63:4E:77:9D:D7:71:E7:39:C4:47:DB:54:58
Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
Certificate issuer:       /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
Certificate serial:       11B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
Manifest number:          11A8
Signing time:             Sat 20 Dec 2025 16:56:20 +0000
Manifest this update:     Sat 20 Dec 2025 16:56:20 +0000
Manifest next update:     Sat 27 Dec 2025 16:56:20 +0000
Files and hashes:         1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: O86lIPtLd+xIwnb2uOeKfB1vsJTtsN4lLsp1j48amJs=)
                          2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: Spm004TXuVGOEFLldkv6JM6JGz/wok2Xo213QhmJOo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl
                          rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4530 (0x11b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
        Validity
            Not Before: Dec 20 16:56:20 2025 GMT
            Not After : Dec 27 16:56:20 2025 GMT
        Subject: CN=6946d534-4292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f3:34:f5:c1:ae:77:73:b0:2d:11:e8:f4:be:
                    31:a7:d6:bc:10:c6:27:d3:48:81:2f:81:f2:97:1b:
                    e7:42:15:38:23:8d:ed:a2:ef:6c:62:a4:4d:73:b3:
                    77:75:01:ed:fd:3c:5e:04:43:6e:d3:56:90:f7:ae:
                    2a:40:4c:b7:a1:05:79:ee:ec:60:9f:71:3d:31:05:
                    04:e7:7c:84:8f:96:d2:8b:b0:36:4f:64:34:c5:51:
                    a1:b5:65:3e:c9:a0:da:ff:ce:80:ae:88:04:89:c4:
                    7d:5c:b5:cd:0a:56:74:3d:c8:2d:47:03:12:75:91:
                    d6:66:da:f5:4c:90:d1:cf:ab:48:fc:61:bb:12:6b:
                    67:cb:be:47:58:18:81:fb:ee:fe:ae:a6:29:23:1b:
                    b2:98:ef:57:fb:05:0f:36:9e:ff:47:c1:c2:19:c2:
                    7c:31:49:58:3b:80:56:08:79:25:ba:9d:bb:ec:5e:
                    f8:76:ac:63:22:4c:b2:1f:f9:1f:97:ea:b5:1d:5a:
                    f2:fa:f6:2d:2e:24:4e:09:fd:1c:30:54:92:6a:83:
                    c9:66:0a:4e:84:f7:51:48:25:2d:9c:3b:62:84:f9:
                    e1:06:3f:ac:12:3d:c3:29:7e:10:28:29:fb:5a:a1:
                    ae:31:ad:76:43:32:af:c2:bf:62:bf:3a:f5:5f:79:
                    00:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5E:5E:4B:42:4E:D1:63:4E:77:9D:D7:71:E7:39:C4:47:DB:54:58
            X509v3 Authority Key Identifier:
                keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:43:e6:af:67:b5:75:b7:90:f5:59:74:c7:27:91:19:2c:
         05:70:f2:e2:fc:6f:f2:a3:71:e3:0a:49:b0:b2:7a:70:aa:9b:
         0a:a8:4d:ab:0d:22:53:fd:ad:76:cb:cf:0a:e7:72:1b:74:c9:
         1d:b5:b9:8f:1a:f2:3b:7f:61:8c:34:ce:87:a1:4c:6e:a5:14:
         45:6d:23:57:32:03:fe:09:82:82:37:53:8f:fb:96:ba:77:39:
         b6:9e:d7:f3:24:8c:15:23:4e:e0:03:2f:b6:5a:a8:d1:58:d8:
         45:d5:a9:74:f1:a1:68:ca:5a:ad:83:57:33:34:5a:06:2a:09:
         e1:bf:30:9e:db:25:e8:da:2d:19:d8:c0:f2:3c:48:de:c8:2a:
         3a:37:a6:de:85:dc:00:f4:1a:fb:87:74:31:4b:a4:5a:c1:ca:
         84:20:88:5a:fe:6c:53:53:15:cb:ac:92:cb:98:41:36:b6:69:
         72:72:b4:d6:8c:a8:85:21:33:1f:07:e8:9e:5a:42:05:80:ae:
         03:0c:9c:31:f6:4f:ce:fb:2f:66:1e:0f:b7:85:a0:1a:2d:02:
         4d:30:5f:33:c8:e1:fc:71:a8:e2:4f:50:57:37:c6:a8:e4:90:
         3e:6f:2a:3b:55:ff:b1:76:77:78:d6:0e:c2:d6:d5:75:2f:23:
         99:e0:c7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:18:02 2025 by rpki-client