This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
File:                     CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json)
Hash identifier:          93BLK1PQpZjqQ98eHz278h4xbi5bF4HKkfKKcVdvwZ4=
Subject key identifier:   5B:48:DE:9B:39:88:1C:E2:39:25:D5:83:09:02:AB:8F:D6:F6:78:41
Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27
Certificate issuer:       /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
Certificate serial:       129F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
Manifest number:          1AEA
Signing time:             Thu 04 Dec 2025 16:43:27 +0000
Manifest this update:     Thu 04 Dec 2025 16:43:26 +0000
Manifest next update:     Thu 11 Dec 2025 16:43:26 +0000
Files and hashes:         1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: 491j0T91NYqOEx4+LJE4xUZ4q2wo2MrWUtoLuvzxliw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl
                          rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4767 (0x129f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
        Validity
            Not Before: Dec  4 16:43:26 2025 GMT
            Not After : Dec 11 16:43:26 2025 GMT
        Subject: CN=6931ba2e-ebb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7a:4b:dd:b7:e9:30:86:f7:0b:06:b3:95:ec:
                    eb:c9:57:c5:0e:b9:e1:5e:60:e3:4e:85:21:71:f5:
                    dc:d8:c5:57:d2:16:07:00:a5:91:ac:e2:e5:0e:83:
                    8a:5d:65:3c:54:6a:a0:7d:92:cd:fb:2e:5f:6a:99:
                    31:dd:01:bc:98:28:73:68:a9:58:f3:eb:c6:3c:9d:
                    ad:49:43:fc:3b:06:56:6d:62:84:8d:16:16:df:b3:
                    53:6d:ee:e9:55:05:41:c4:69:c4:fd:4d:56:73:f3:
                    ed:6e:95:0e:bc:10:27:ed:e8:5f:2c:fb:7e:a4:17:
                    49:cb:db:28:ad:5a:c1:22:16:02:bf:d7:8a:ff:5c:
                    a6:da:c5:6d:7d:0b:3d:3e:f3:73:18:94:f9:d9:b8:
                    bd:9e:d8:3e:68:74:6c:9d:78:52:ec:ce:73:1a:af:
                    5c:f9:86:66:57:c3:6c:8f:02:ee:28:20:3c:e4:28:
                    e4:e3:6b:d0:72:58:c0:5a:99:74:d7:93:89:88:f4:
                    ff:de:71:e6:a6:42:15:f6:35:f6:d8:1a:53:1b:f2:
                    9d:d3:d2:ec:bc:30:52:24:7a:f1:75:4a:70:88:81:
                    32:9a:9f:a0:55:0a:6c:db:ab:b8:55:db:b0:ef:5f:
                    50:88:92:47:6a:fe:7e:94:71:38:76:f9:05:1d:09:
                    ad:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:48:DE:9B:39:88:1C:E2:39:25:D5:83:09:02:AB:8F:D6:F6:78:41
            X509v3 Authority Key Identifier:
                keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:dc:c4:e6:b0:44:41:4c:ca:4c:1c:87:5e:d7:89:f6:c1:14:
         10:0e:73:e4:89:e7:f5:23:5d:0d:42:34:78:44:cb:40:7a:34:
         91:21:d8:54:30:98:f9:82:57:ba:d4:3a:41:62:f7:ca:c0:dd:
         b1:43:b1:bd:46:17:29:31:d6:ac:d6:16:f6:5e:9d:61:91:98:
         83:3d:ed:ba:7e:cb:a3:b8:a9:a3:04:38:1e:21:db:56:34:fb:
         7f:e3:4c:78:22:44:89:94:08:78:e4:19:e0:83:1b:c2:13:11:
         26:02:0c:00:f3:fd:22:b3:dc:01:c7:12:ac:e8:44:99:83:e3:
         2b:59:1e:04:d2:d2:33:f5:30:2c:e8:46:14:af:9d:ce:94:8a:
         d9:f1:00:73:05:11:cc:69:4d:a4:b8:14:b8:61:4e:53:1f:aa:
         0c:4b:dd:f0:e3:df:16:2d:1f:da:89:21:d7:7a:44:e5:ab:c7:
         63:74:7d:bb:a8:93:ed:73:19:61:54:db:fa:65:c5:ed:d2:16:
         cf:f4:40:75:a7:8b:87:44:61:08:e0:bc:85:04:aa:00:a7:1c:
         67:44:93:f7:82:4a:36:64:04:7d:10:4b:4e:47:48:17:70:20:
         19:6b:fc:db:fa:3c:f4:0a:7b:68:54:95:d1:c3:63:f8:90:ed:
         80:a2:b7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:42 2025 by rpki-client