This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
File:                     xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json)
Hash identifier:          D7MCGwMjRHckEIoDcknLwKehODmRUurl/swH+S1JH9w=
Subject key identifier:   57:CE:D5:F1:EC:14:6D:F9:E3:B1:ED:5A:60:03:52:71:D3:70:5A:01
Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
Certificate issuer:       /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
Certificate serial:       1D31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
Manifest number:          1CEF
Signing time:             Sat 06 Dec 2025 15:50:18 +0000
Manifest this update:     Sat 06 Dec 2025 15:50:17 +0000
Manifest next update:     Sat 13 Dec 2025 15:50:17 +0000
Files and hashes:         1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: EXWfG1kao3SE8qSwhEYIkLV6c5U6HET/zoWYu+50iCY=)
                          2: BA1F21AC731111F0BD7FF574C4F9AE02.roa (hash: 20AfF76B9+g4MK13JnUrRZPbIDu/TESDofczBLuYHu0=)
                          3: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: 6/nHCLLC7n4HaWWUGKVmTxdYoQkDB8jaG5K5D54SivA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl
                          rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7473 (0x1d31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
        Validity
            Not Before: Dec  6 15:50:17 2025 GMT
            Not After : Dec 13 15:50:17 2025 GMT
        Subject: CN=693450b9-097a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:64:35:cd:c0:50:7d:ed:b1:7f:a7:65:74:
                    5e:40:90:f4:18:55:1f:23:61:93:bd:e7:cc:38:49:
                    8a:d4:d2:66:5b:61:dd:9c:ea:2a:2b:94:2a:ff:0a:
                    81:28:08:2e:73:17:1e:60:4b:9e:65:ea:ec:d6:b8:
                    a1:df:3a:ea:58:5f:e2:fa:16:24:76:03:8b:e8:8b:
                    c5:ac:3a:f6:6e:27:55:99:12:d6:e3:d3:12:27:15:
                    7c:48:3f:d6:79:cf:c3:3c:da:97:00:83:dd:38:a6:
                    ae:36:eb:53:70:19:25:59:90:9a:6e:a7:26:70:90:
                    08:fe:e1:3f:3c:8d:97:aa:b6:b0:fb:06:a2:ad:1d:
                    88:aa:72:f2:64:0c:54:2f:42:c7:df:05:0f:47:67:
                    9d:4a:dc:3b:5f:30:d0:37:40:e3:89:ba:36:87:a9:
                    44:e8:fc:9b:8c:7c:3e:35:9b:0b:3e:80:1b:bf:cc:
                    34:16:a9:84:b1:f0:df:8e:ed:c2:16:27:6c:22:28:
                    2d:aa:07:e2:a4:b9:b8:5b:0c:08:ae:46:92:40:bd:
                    62:9a:69:0d:43:f6:b1:1d:16:64:b9:7c:5e:74:19:
                    39:e2:1c:c7:a4:54:35:97:50:37:cf:1c:17:1c:2a:
                    84:9b:4e:68:94:11:53:35:55:f9:b4:53:39:27:a4:
                    cc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CE:D5:F1:EC:14:6D:F9:E3:B1:ED:5A:60:03:52:71:D3:70:5A:01
            X509v3 Authority Key Identifier:
                keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:19:a3:c3:f1:8a:61:e5:f2:60:47:1a:36:7a:c3:10:f0:bc:
         35:13:12:4d:a5:4f:85:93:e8:90:90:6d:8b:41:92:6f:8e:cd:
         b7:5b:3d:96:06:16:e8:ad:c5:a9:04:71:fc:cf:fb:e5:17:46:
         18:4f:38:fc:8c:ab:fc:c7:52:d5:fc:dd:e2:8b:62:e6:bd:b3:
         ab:45:fd:a4:d9:40:f9:de:59:e9:c4:3e:2d:b7:f7:09:0b:a5:
         27:79:ee:30:63:ac:b6:5c:5d:05:35:db:e7:e4:d5:5a:6a:65:
         de:a7:f6:a5:1e:34:b1:8f:0e:73:93:df:13:7e:18:9b:fe:df:
         43:90:fc:94:09:32:ac:b9:d7:b0:f5:76:d5:2d:fa:b9:14:da:
         dd:a2:65:c8:9b:4c:13:b8:1a:02:d8:8b:2e:74:5f:8e:6f:2a:
         be:09:b6:2c:43:bf:e1:36:05:9b:fe:2d:ee:9a:53:eb:5c:00:
         d7:5a:52:be:f6:68:6a:c6:f1:d2:b7:c0:75:78:7f:d8:a5:d2:
         36:9b:e9:35:87:79:ee:d9:a5:0f:c0:5e:56:ee:15:d4:6b:f3:
         30:2c:c2:de:3d:ec:cf:f2:a9:63:c0:3d:ea:a3:a3:a9:3e:bb:
         55:84:dd:c6:e5:40:9c:53:a3:7e:eb:c7:39:0b:ca:a8:c2:b0:
         0e:8e:93:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:09 2025 by rpki-client