This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
File:                     S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json)
Hash identifier:          PwXrPDKVofxIVvo9bynCulfsUpDjeuToxQKkxnE30HA=
Subject key identifier:   D1:C8:EA:22:16:B2:8C:23:59:C5:46:61:63:3F:B2:F3:54:BD:10:C9
Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
Certificate issuer:       /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
Manifest number:          0208
Signing time:             Fri 05 Dec 2025 00:40:21 +0000
Manifest this update:     Fri 05 Dec 2025 00:40:21 +0000
Manifest next update:     Fri 12 Dec 2025 00:40:21 +0000
Files and hashes:         1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: dil7m27SHgtDMTHBEZGolDNQU2h/U6On1uQsHAnqJBk=)
                          2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: h6q23QMfBwFmxIMVTA6ARQak7Qs7wYbVCQBIj8uPZPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
                          rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
        Validity
            Not Before: Dec  5 00:40:21 2025 GMT
            Not After : Dec 12 00:40:21 2025 GMT
        Subject: CN=693229f5-d664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:ad:c8:f8:83:78:13:9b:40:85:76:83:26:
                    28:92:26:7f:af:67:be:17:e5:cc:0e:a7:31:0e:9f:
                    cf:5b:2d:d8:0f:73:62:e5:1a:74:26:b6:d6:06:13:
                    d2:d8:c7:29:22:bf:1b:11:c9:b7:f2:da:42:7b:45:
                    be:c6:1d:2e:f5:8a:2f:77:65:1f:47:4f:c9:10:bc:
                    2e:b3:93:f6:4b:96:fa:d5:55:a3:b4:36:5b:97:97:
                    20:a0:b1:45:53:09:81:b5:01:4c:d1:78:13:a7:25:
                    5f:56:c1:0d:62:3d:b6:c1:7c:7d:2c:87:63:30:a9:
                    e9:0c:50:45:97:d5:98:34:ce:08:a0:11:74:9a:64:
                    2f:a7:b7:12:a3:56:52:8e:fb:65:09:16:60:42:96:
                    b6:e1:e6:bc:e1:35:d2:2b:1b:f6:bf:de:ff:42:e6:
                    60:de:0a:99:34:b6:fa:95:10:3f:08:87:e8:12:29:
                    e0:0c:4a:e7:d0:3e:9c:39:21:61:9c:3f:77:0e:f0:
                    47:ed:b1:01:c8:b2:0d:c6:9a:9a:2e:5e:11:bc:53:
                    d7:d0:15:5c:fa:d6:1b:91:e4:0b:c3:80:ff:55:a2:
                    de:72:3b:21:ce:df:d0:f2:58:b4:0c:f8:d0:31:c9:
                    68:23:86:83:0e:78:d0:ff:92:7d:5a:2f:4a:99:3f:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C8:EA:22:16:B2:8C:23:59:C5:46:61:63:3F:B2:F3:54:BD:10:C9
            X509v3 Authority Key Identifier:
                keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:72:13:34:41:3f:29:2b:9b:bf:b8:b4:ae:c2:7b:2b:93:9a:
         57:59:67:89:7f:4b:7c:f4:2c:68:4d:d3:83:19:71:57:0e:ee:
         d2:65:db:c8:f3:70:4c:10:21:24:bf:82:4f:b8:5d:0f:a7:0c:
         38:c3:e6:06:e9:d3:ae:9d:0c:23:bd:79:47:e8:46:c1:1a:30:
         55:12:aa:a3:a1:6b:fb:74:bb:5b:61:ba:dc:0d:78:81:0f:de:
         08:a6:99:10:1a:04:75:17:a6:7c:44:b5:b1:67:6b:da:2c:35:
         eb:be:dc:ab:79:64:2f:34:b7:7a:80:7b:19:bc:0d:83:c1:73:
         56:f0:e7:f4:2c:2a:87:f5:1a:60:eb:27:b2:36:63:98:77:74:
         4a:ec:d3:93:59:c7:8c:77:84:ce:7c:db:d3:d9:74:21:e1:37:
         0b:70:a6:71:2d:7f:40:70:98:24:81:d9:ae:1f:49:65:b7:db:
         0d:ef:d6:5f:3a:30:89:35:eb:a3:3b:f4:f6:89:3b:5c:a8:6a:
         08:23:a6:94:a7:3e:7c:be:e7:3e:7d:96:6a:8e:74:58:54:2a:
         e8:64:a0:97:d2:5e:a4:85:f7:21:e5:de:c8:ed:0b:f1:3e:2e:
         81:a1:77:25:33:e0:de:31:41:0c:e8:75:21:87:90:04:c8:c4:
         26:59:b3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:02:52 2025 by rpki-client