This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
File:                     m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft (raw, json)
Hash identifier:          J0sa+PXtd5Ec73IyCEv57nbq4TrI9m9IB5sRs83lPyE=
Subject key identifier:   8F:24:27:F5:25:69:1C:2F:86:31:99:0F:6A:7C:7E:44:06:79:52:C1
Authority key identifier: 9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB
Certificate issuer:       /CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB
Certificate serial:       0918
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
Manifest number:          090E
Signing time:             Sat 06 Dec 2025 19:27:53 +0000
Manifest this update:     Sat 06 Dec 2025 19:27:52 +0000
Manifest next update:     Sat 13 Dec 2025 19:27:52 +0000
Files and hashes:         1: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl (hash: J7GsgTPxxMBYwliUVtZn7geBb6WgOHtwnBe0cG72OaA=)
                          2: 46106B5077E811F0B822833AC4F9AE02.roa (hash: 9Oj88fgWpf7bDNpYMBgtHOzsobZ0C0giyGClKVgu7Io=)
                          3: C6B310B077E711F0B31CEB36C4F9AE02.roa (hash: xSQoZAfy0zR56Zr6/C+AkFsuhvwUbTGAIDtsgoONysw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl
                          rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328 (0x918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169DB2, serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB
        Validity
            Not Before: Dec  6 19:27:52 2025 GMT
            Not After : Dec 13 19:27:52 2025 GMT
        Subject: CN=693483b9-df5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:5d:3e:d7:12:f1:6b:2e:79:26:44:d0:e8:
                    21:cc:cc:06:2e:49:bb:0f:5c:85:9f:e5:c8:99:bb:
                    78:10:34:63:95:e0:a2:e9:69:2c:ea:f0:7f:4f:0c:
                    45:88:2c:01:a4:e8:c0:78:d7:6e:06:4e:83:f0:93:
                    a2:7d:13:da:99:04:9a:fc:f2:ba:ed:92:3d:d7:fe:
                    0c:47:95:ec:3d:22:eb:81:27:67:38:a4:f4:1e:77:
                    de:5e:6c:a4:92:db:57:9c:09:6b:fa:76:26:e0:8c:
                    b3:73:05:a2:c5:84:2d:82:a0:9b:95:27:4d:67:9c:
                    a1:2f:0c:f9:c3:89:a1:32:11:ea:42:1b:f0:44:49:
                    91:64:60:55:f2:4a:8b:05:33:4f:a6:59:51:20:38:
                    3c:66:36:1b:6c:b4:b5:e1:f3:8b:83:40:47:4d:70:
                    a8:5f:2d:fd:66:35:74:e3:fb:75:50:80:3d:3c:54:
                    ab:dd:30:7e:15:4e:97:95:65:8e:98:5a:7d:ee:a0:
                    1d:7e:38:30:a9:5d:eb:6b:27:fe:c9:ea:fb:b4:d4:
                    30:05:4e:15:e6:bf:c2:a4:f6:6c:21:4f:f4:1b:52:
                    1a:fc:36:ce:98:96:85:e7:2f:ae:90:5f:70:67:ef:
                    5b:fe:76:e9:2a:35:89:60:ac:a0:58:5e:9b:39:ac:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:24:27:F5:25:69:1C:2F:86:31:99:0F:6A:7C:7E:44:06:79:52:C1
            X509v3 Authority Key Identifier:
                keyid:9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:87:e0:06:57:95:e9:aa:f4:6c:30:eb:c2:80:0f:93:60:04:
         9e:02:1f:03:58:fe:41:83:07:ad:b4:67:da:5c:1a:fe:71:0f:
         d3:48:95:68:79:5f:ff:12:86:a1:0a:9d:92:31:74:7b:2f:33:
         12:f5:c3:2f:c9:a4:73:73:22:ca:49:da:e1:25:e8:24:33:bc:
         78:df:85:b4:1f:5b:d7:ff:18:b1:e5:c3:f5:7a:30:e3:a1:ae:
         cc:79:86:08:a0:45:d7:69:91:d0:81:47:4f:95:ae:3c:9f:19:
         e0:8f:11:84:6a:3c:d0:2d:56:db:10:50:14:5c:37:63:05:00:
         98:64:04:e2:39:a7:73:7b:79:87:4f:26:e0:b1:f8:7d:de:65:
         8f:88:24:86:ea:88:d5:65:ed:59:48:81:9e:a5:3a:99:dd:0b:
         37:c3:2d:4e:68:cf:af:f6:5e:d9:a6:aa:90:61:4d:e3:92:60:
         cf:fe:bf:97:53:2a:60:5f:01:14:02:d1:c9:bf:d7:c4:27:92:
         a9:6b:d0:e2:fc:ef:9b:7b:6a:ee:a8:01:5a:66:36:f0:3d:87:
         41:dc:24:46:d5:41:e2:7d:85:31:dd:49:ed:86:f1:aa:01:fe:
         d4:10:e1:e0:8d:63:b1:f7:d4:7f:29:72:68:3f:2a:6a:f3:02:
         b2:fb:60:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlEQjIxMTAvBgNVBAUTKDlCODI1OUY3QjNDMURFREQ0NzE5QkMwQURDNTg3QjNE
Qjg5RTdCREIwHhcNMjUxMjA2MTkyNzUyWhcNMjUxMjEzMTkyNzUyWjAYMRYwFAYD
VQQDEw02OTM0ODNiOS1kZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsaxdPtcS8WsueSZE0OghzMwGLkm7D1yFn+XImbt4EDRjleCi6Wks6vB/TwxF
iCwBpOjAeNduBk6D8JOifRPamQSa/PK67ZI91/4MR5XsPSLrgSdnOKT0HnfeXmyk
kttXnAlr+nYm4IyzcwWixYQtgqCblSdNZ5yhLwz5w4mhMhHqQhvwREmRZGBV8kqL
BTNPpllRIDg8ZjYbbLS14fOLg0BHTXCoXy39ZjV04/t1UIA9PFSr3TB+FU6XlWWO
mFp97qAdfjgwqV3rayf+yer7tNQwBU4V5r/CpPZsIU/0G1Ia/DbOmJaF5y+ukF9w
Z+9b/nbpKjWJYKygWF6bOawGXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8kJ/Ul
aRwvhjGZD2p8fkQGeVLBMB8GA1UdIwQYMBaAFJuCWfezwd7dRxm8CtxYez24nnvb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OURCMi9BOUNDNDlCNkI5
QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0MUhHYndLM0ZoN1BiaWVl
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL200Slo5N1BCM3QxSEdid0szRmg3UGJpZWU5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OURCMi9BOUNDNDlCNkI5QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0
MUhHYndLM0ZoN1BiaWVlOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2h+AGV5XpqvRsMOvCgA+TYASeAh8DWP5BgwettGfaXBr+cQ/TSJVo
eV//EoahCp2SMXR7LzMS9cMvyaRzcyLKSdrhJegkM7x434W0H1vX/xix5cP1ejDj
oa7MeYYIoEXXaZHQgUdPla48nxngjxGEajzQLVbbEFAUXDdjBQCYZATiOadze3mH
Tybgsfh93mWPiCSG6ojVZe1ZSIGepTqZ3Qs3wy1OaM+v9l7ZpqqQYU3jkmDP/r+X
UypgXwEUAtHJv9fEJ5Kpa9Di/O+be2ruqAFaZjbwPYdB3CRG1UHifYUx3UnthvGq
Af7UEOHgjWOx99R/KXJoPypq8wKy+2DC
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:59:33 2025 by rpki-client