This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
File:                     InkscMmJR76K9PSj51Wu3nlZ0ng.mft (raw, json)
Hash identifier:          kxFhW8x1P001N70yqSMGLyIB+UPuqBmXbr6RwqbMUwI=
Subject key identifier:   50:35:39:CB:31:9B:1D:33:80:3E:4C:F1:0F:83:F4:E4:05:69:AD:69
Authority key identifier: 22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78
Certificate issuer:       /CN=A9166708/serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278
Certificate serial:       1013
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
Manifest number:          100B
Signing time:             Thu 04 Dec 2025 17:01:35 +0000
Manifest this update:     Thu 04 Dec 2025 17:01:34 +0000
Manifest next update:     Thu 11 Dec 2025 17:01:34 +0000
Files and hashes:         1: InkscMmJR76K9PSj51Wu3nlZ0ng.crl (hash: lFyTY3o7e4mLVw8Cs5odKZ87mhRUHcwj9AIuZlog/0k=)
                          2: C3417AA6593611E98E4C8C44C4F9AE02.roa (hash: CPG724JKOro03lp9kH78JPks3F1iBFJ6IMMveDvmHaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl
                          rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4115 (0x1013)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166708, serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278
        Validity
            Not Before: Dec  4 17:01:34 2025 GMT
            Not After : Dec 11 17:01:34 2025 GMT
        Subject: CN=6931be6f-2aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:cc:44:43:ed:b9:8a:9d:b6:b8:ad:61:5e:
                    80:9c:d1:87:bb:41:3e:f9:12:ca:4c:27:75:b0:1b:
                    4c:40:19:74:be:99:15:c5:87:88:52:49:74:7e:1f:
                    9e:12:f0:7a:cf:87:6f:a0:1d:8c:b5:fc:9d:1c:43:
                    9a:39:b8:fb:b6:79:8d:d0:c7:91:6f:a2:b3:c7:4a:
                    21:5d:2f:ea:3c:e5:00:88:40:4f:d5:77:17:26:bd:
                    0f:6f:f0:b0:31:b2:d2:bc:29:8c:20:b3:81:55:3f:
                    89:cf:f7:e2:ce:cb:96:fb:43:65:b8:96:a2:3d:a5:
                    bc:71:32:7d:6a:f8:f6:48:14:fe:ef:ca:33:08:64:
                    f6:2f:12:c2:3b:6a:5d:66:5a:fb:b6:db:e4:5c:ef:
                    08:f6:07:e8:12:2e:8f:1a:5c:ae:9c:6c:34:5f:3c:
                    46:7f:9b:13:2d:eb:73:35:67:e0:30:e1:22:28:d8:
                    25:78:23:79:05:22:a0:18:a9:aa:bc:9b:47:c4:25:
                    70:97:58:97:b0:a7:01:93:88:8c:78:6c:50:4d:99:
                    85:c0:fa:55:61:85:ca:f7:62:53:0a:5c:93:40:64:
                    8c:91:f6:e7:77:c9:05:b3:9e:d8:16:80:9d:bd:08:
                    d6:69:ba:a8:71:6c:ea:bc:29:83:4a:fd:c9:28:f7:
                    7f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:35:39:CB:31:9B:1D:33:80:3E:4C:F1:0F:83:F4:E4:05:69:AD:69
            X509v3 Authority Key Identifier:
                keyid:22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:43:fb:7e:68:89:4f:e6:ab:21:fe:8b:f4:c5:cd:b5:36:16:
         bf:65:38:3f:c3:cd:bb:47:ae:0e:e2:08:08:39:c3:ce:82:3a:
         9a:c1:7c:b7:4f:26:76:80:d3:f8:3a:ff:3d:4e:20:89:6e:46:
         4d:d9:07:0a:cf:58:d4:be:4d:50:76:4d:75:62:18:9e:eb:6f:
         be:0c:9b:bb:dc:4f:f0:fa:6b:ec:ec:13:6d:67:29:b9:27:05:
         e1:fb:fa:5a:7f:6c:4b:48:6e:e9:ad:90:d4:e1:83:09:5b:e1:
         52:72:61:d6:96:d6:a8:0c:e0:e5:70:de:8b:ce:cc:da:68:10:
         92:24:08:61:5d:1c:43:4e:70:f3:ae:8f:49:5e:74:41:74:08:
         cc:ce:56:16:2e:87:3c:4e:dd:62:54:6f:41:be:be:9c:32:e8:
         3b:19:34:44:d4:da:b7:cc:6f:ef:d2:6c:cc:fe:fb:2c:76:37:
         ad:1e:73:d3:e1:a8:a4:3f:56:74:c3:ca:73:85:16:d8:24:0b:
         9c:2f:8d:22:3b:86:5a:43:5c:28:60:3c:6e:6b:e0:14:9f:df:
         5c:36:05:01:0a:cb:68:36:aa:b9:a7:5f:df:3b:0d:6b:d8:54:
         b3:13:61:48:8a:99:d2:4b:68:47:2a:a3:d9:23:ce:02:75:a8:
         6e:b2:6e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:34 2025 by rpki-client