This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft
File:                     p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft (raw, json)
Hash identifier:          1jBKHkccuxOLwnkOiTlpxl60f0mwVt3EcURcmSwR6po=
Subject key identifier:   5F:6C:55:2F:1B:2C:BF:FA:23:71:E7:A8:8E:B3:FC:B7:A0:58:60:48
Authority key identifier: A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6
Certificate issuer:       /CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6
Certificate serial:       0E62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft
Manifest number:          0E58
Signing time:             Sat 06 Dec 2025 17:13:22 +0000
Manifest this update:     Sat 06 Dec 2025 17:13:21 +0000
Manifest next update:     Sat 13 Dec 2025 17:13:21 +0000
Files and hashes:         1: p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl (hash: cqW4TkHRoCs3Le/WYrgiWVpn8OSuR0UGXYZRLHJh9AA=)
                          2: 457A00A8AF7A11E9AFF10782C4F9AE02.roa (hash: cTGuGnG9rqC1kt6QlqPGiDTyt8yC7pqJIZqMZttM2hs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl
                          rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3682 (0xe62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165297, serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6
        Validity
            Not Before: Dec  6 17:13:21 2025 GMT
            Not After : Dec 13 17:13:21 2025 GMT
        Subject: CN=69346431-ad30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:c8:f7:ec:52:46:36:98:4b:65:c2:c7:69:
                    5f:17:83:46:e6:ca:7b:68:b9:e2:20:04:73:0c:ea:
                    8c:d6:cd:2e:f1:f3:ff:6c:61:55:e5:4d:04:5e:2e:
                    c8:77:bc:25:75:76:fa:d8:c2:f0:56:cb:ab:40:2a:
                    73:69:35:3f:26:14:4f:cd:3d:82:ba:be:4f:28:48:
                    b8:16:11:0a:54:ae:e2:b9:6f:32:44:73:99:37:56:
                    4e:1a:17:fd:ef:69:7b:43:4e:36:b4:d6:12:00:06:
                    67:47:40:b8:88:67:b6:cd:0e:ab:6e:b5:37:ed:ca:
                    7a:17:c7:c2:c0:d1:ac:40:5b:cb:f7:41:43:4d:11:
                    21:37:19:58:29:81:56:45:9e:ac:6a:90:d9:6f:3d:
                    84:c5:b5:aa:07:e1:97:6e:d0:48:09:2b:ba:7e:e0:
                    54:46:a7:51:d9:bf:cf:80:6d:91:8f:75:2a:e7:35:
                    ec:74:43:3a:26:43:2e:bb:25:4d:a5:ac:94:eb:27:
                    85:30:29:64:61:94:39:82:7e:48:ba:e2:dc:87:e4:
                    fc:fd:7a:13:91:a6:81:aa:4f:c0:bb:36:fa:7a:0c:
                    00:6b:da:86:6e:b9:74:79:d4:de:9f:03:ac:ad:41:
                    87:84:38:23:28:6d:59:ff:37:08:24:db:4f:fa:8e:
                    2b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6C:55:2F:1B:2C:BF:FA:23:71:E7:A8:8E:B3:FC:B7:A0:58:60:48
            X509v3 Authority Key Identifier:
                keyid:A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:27:37:31:51:97:94:87:1a:23:7b:4d:dc:f6:38:ef:c7:20:
         05:3e:67:87:03:fa:57:39:a9:1e:81:1c:bf:fa:71:2b:b4:d9:
         9d:75:19:e4:c4:64:5a:08:fb:d5:ac:b0:ba:38:58:e9:5f:00:
         95:b2:ea:6e:67:bd:7d:5e:e7:db:89:91:99:9c:fd:5f:54:af:
         a7:5b:f7:4b:40:8b:3f:21:a3:58:ff:76:87:9d:eb:4a:1c:7b:
         ec:a5:91:c6:9b:30:77:88:6e:e2:80:55:a0:2b:be:3f:4f:1b:
         05:ef:b4:15:7e:72:86:9e:8c:04:ff:0f:54:80:c1:0d:12:56:
         bd:13:4a:8a:80:95:d2:2c:d4:e2:d9:11:5d:20:4c:db:5b:99:
         28:77:ab:2d:20:3e:dc:60:c3:b8:3b:49:cd:20:ba:ea:92:0b:
         fe:7e:74:b7:65:bd:4f:56:a0:f4:79:07:69:d8:1d:e6:4d:02:
         d8:cf:d3:4a:c1:b7:04:e8:13:ca:c6:e4:c8:d2:f5:fc:df:99:
         4f:79:0a:42:a2:fa:10:f4:48:2d:d1:be:20:e9:34:80:85:5a:
         f7:f5:1f:2c:2c:d7:ce:bd:e1:13:23:76:91:fe:4d:76:7b:ff:
         92:a7:70:de:87:d8:ed:fd:53:d3:d0:b8:77:a2:ca:3b:e9:4d:
         2c:5a:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:12 2025 by rpki-client