This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
File:                     CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json)
Hash identifier:          7x+XdpaM+CulVkGphbz+Vygv38TmpqAFF7Yf1h9N1Is=
Subject key identifier:   AF:9B:14:99:73:91:E4:49:30:8C:54:D0:4D:64:A9:71:89:81:C3:2D
Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7
Certificate issuer:       /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
Certificate serial:       08BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
Manifest number:          08B5
Signing time:             Sat 06 Dec 2025 19:37:29 +0000
Manifest this update:     Sat 06 Dec 2025 19:37:29 +0000
Manifest next update:     Sat 13 Dec 2025 19:37:29 +0000
Files and hashes:         1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: hrv5Rw09ERy01JRJKH1wjZ+5cyqfX6mz5ED6pn84g00=)
                          2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: +DtZkxjJJ+EZoGvTSPZPjG2CpgddUnM6RS0QhmWQQPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl
                          rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2234 (0x8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
        Validity
            Not Before: Dec  6 19:37:29 2025 GMT
            Not After : Dec 13 19:37:29 2025 GMT
        Subject: CN=693485f9-b3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:06:99:db:61:20:0d:a2:a7:ef:3b:90:9f:7d:
                    55:cb:1a:43:04:f7:55:b9:93:ad:aa:20:33:bf:e3:
                    c3:16:91:c2:8f:73:00:a5:a6:c0:27:7a:77:90:92:
                    9d:d1:d2:99:67:90:e7:db:85:b6:9d:d7:2c:74:10:
                    87:43:e3:41:71:1c:4e:70:c8:10:b6:45:14:25:6c:
                    d1:53:50:58:c1:c2:41:fd:ac:ed:19:28:38:1d:1c:
                    9e:99:3a:aa:7b:ed:51:89:a1:4e:fe:2e:db:9b:09:
                    28:3b:3d:05:61:62:ea:ca:17:92:45:ea:7d:a4:c3:
                    39:dd:ed:0e:f9:4d:2c:46:e2:89:40:2c:83:77:5c:
                    55:20:d2:d4:ea:ac:8c:38:32:c2:4a:57:54:7b:1d:
                    62:ca:2a:88:f8:e3:60:e7:5d:e4:24:1a:e1:3e:8d:
                    8d:4e:6c:ce:9c:4e:85:bf:82:2b:8f:4d:f6:97:9a:
                    93:c4:3a:2a:d5:d8:0f:b8:29:ef:19:e6:a7:5d:2c:
                    da:a0:ba:34:54:49:44:cc:63:07:23:cf:d5:fb:ea:
                    35:c2:a8:31:49:77:1e:85:09:1a:89:fb:47:d2:27:
                    c3:26:4c:91:43:be:7e:d3:bb:09:49:bf:1c:d1:2c:
                    f7:9d:43:f7:67:a2:97:fc:40:63:db:56:31:50:96:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9B:14:99:73:91:E4:49:30:8C:54:D0:4D:64:A9:71:89:81:C3:2D
            X509v3 Authority Key Identifier:
                keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:07:fe:ae:84:a1:7e:53:fa:b1:57:07:42:04:f6:5e:7e:81:
         e1:52:7a:fb:28:b9:39:9d:5a:c5:01:9f:8f:94:6d:15:e9:75:
         11:fb:ce:2a:a9:dc:98:7e:e9:7f:e7:eb:64:a3:65:88:63:99:
         1a:60:3e:da:31:f0:3f:e6:43:a9:b6:69:0b:f9:c1:0f:bb:2b:
         21:ac:48:f8:e4:44:c4:75:9e:15:bb:6f:33:dc:2e:75:36:22:
         3d:34:d7:4a:7e:2c:89:a3:6b:dd:01:e8:a4:a8:ba:61:f1:9e:
         04:31:21:ce:0a:cd:6e:5e:9b:69:86:c6:0e:f5:4b:f1:4d:3a:
         94:1f:32:a4:b3:cd:3f:b9:9f:7f:16:82:86:dd:a1:bb:85:89:
         7e:6f:13:ec:65:22:1d:d9:7b:63:55:17:c9:9b:4e:a0:45:da:
         72:50:1b:26:a0:b7:1b:1e:6c:07:1f:31:48:a5:ec:8c:c8:a8:
         87:84:03:67:f1:85:bd:31:26:a7:64:82:9c:e3:44:7e:a0:ff:
         56:ad:1c:e2:86:70:16:fd:9f:0a:61:65:db:b2:93:60:2e:ff:
         0c:24:0c:2f:ed:96:51:25:24:e4:81:0a:0f:64:94:fd:59:2d:
         6d:77:6d:d8:6d:d0:1a:5b:ec:35:83:bb:f0:40:12:cf:a1:91:
         55:fd:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:41:59 2025 by rpki-client