This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
File:                     -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json)
Hash identifier:          tTEPA/xAwLMMV8H8YLdIH4YWM/LclP7uoT+1YB1dDEA=
Subject key identifier:   14:AA:00:48:CB:64:8E:9F:C3:A4:58:36:DA:1A:A6:93:78:04:70:FD
Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B
Certificate issuer:       /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
Manifest number:          018F
Signing time:             Fri 05 Dec 2025 01:44:55 +0000
Manifest this update:     Fri 05 Dec 2025 01:44:55 +0000
Manifest next update:     Fri 12 Dec 2025 01:44:55 +0000
Files and hashes:         1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: iIgIscLqbR+ThHmPl9ZfpO+b3P28LOwN+6o8Zo2OUTA=)
                          2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: M/8UXHVwrUGREXAw7kPK2rXqXimmSlcdKlYZysm7Xmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl
                          rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B
        Validity
            Not Before: Dec  5 01:44:55 2025 GMT
            Not After : Dec 12 01:44:55 2025 GMT
        Subject: CN=69323917-ecd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:be:a5:92:52:bd:58:5b:31:62:42:1f:84:f6:
                    a6:0f:a9:4e:cc:23:1e:41:3a:2e:ea:a8:09:c6:58:
                    13:d5:fb:06:cc:70:51:6a:7f:00:8c:6d:d4:c1:01:
                    20:d0:55:76:bd:49:9b:57:c3:fe:93:b6:82:13:9e:
                    b8:bf:60:31:00:bf:6b:9c:42:89:59:b2:70:e8:19:
                    ae:82:57:c4:00:2d:22:63:d6:09:17:17:0e:c6:77:
                    d9:da:d3:39:b2:9d:45:7f:13:f2:36:fc:f3:5c:23:
                    bf:0a:7b:bb:2d:ae:a8:03:db:eb:94:73:38:25:d9:
                    0e:24:dd:0f:c8:e3:0e:76:a8:a8:6b:c0:c9:5d:16:
                    42:47:e1:c2:67:6b:f9:15:ca:41:e5:5d:b5:d0:1b:
                    16:07:d4:73:db:a5:47:98:11:90:4a:ee:df:3e:2d:
                    10:0b:9c:4e:41:16:d4:b3:37:50:53:77:06:2c:ef:
                    79:85:44:a9:a3:a2:76:c2:11:d0:2c:a7:78:86:df:
                    04:41:b1:2d:68:93:d8:88:a2:3a:82:a6:34:6d:d0:
                    19:0d:04:6c:00:f7:b7:2c:f8:38:c2:e7:47:81:58:
                    51:a8:4a:09:5a:7f:17:1d:13:67:96:e7:0e:67:2e:
                    aa:94:f4:53:05:cf:e3:31:41:25:ba:ad:70:15:b7:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AA:00:48:CB:64:8E:9F:C3:A4:58:36:DA:1A:A6:93:78:04:70:FD
            X509v3 Authority Key Identifier:
                keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:39:82:42:b0:7b:b7:52:05:ae:18:a9:71:5e:b6:77:f0:03:
         e1:63:25:25:30:b7:30:c6:12:68:9b:bd:aa:84:08:12:a0:1a:
         0f:2f:bd:e1:05:77:0f:e8:b2:e4:7a:d4:bd:e3:5b:cc:e8:a7:
         03:ef:2c:aa:2c:2e:96:47:62:13:13:6a:2c:21:84:fd:49:39:
         d8:1e:d7:80:31:4b:e1:6b:3e:18:33:5b:96:9c:46:f0:61:91:
         24:18:d6:0e:b9:7a:c1:c9:01:48:ee:31:3c:29:02:8d:39:13:
         9e:40:a4:61:90:7d:a6:80:ee:ee:d7:7f:c8:19:22:01:19:ad:
         d9:7a:24:de:c6:e4:01:8c:b9:69:44:95:64:00:56:3f:fa:9b:
         08:3d:f4:5a:92:f6:94:2f:8b:40:ab:84:60:03:f2:d5:27:ac:
         02:f8:08:47:3d:5d:5d:75:e8:e1:a5:f6:66:e8:3b:c9:f9:1e:
         65:4b:57:19:0e:47:a4:2a:5f:13:e7:fc:b2:08:19:0e:6b:bd:
         21:cc:e0:99:fc:e4:da:d5:c8:3a:00:d8:c5:a0:7a:0f:ba:1e:
         cb:6d:b6:57:98:63:69:88:e6:c9:f7:99:63:7d:78:7c:96:a1:
         46:ef:96:1b:95:86:aa:52:68:39:7d:49:6e:71:62:36:7a:6d:
         3f:aa:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:29 2025 by rpki-client