This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
File:                     2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json)
Hash identifier:          7h8dRYW8RMWMaA8FSabRZfJUuD698jmcxFpWLpqvWK8=
Subject key identifier:   8D:6C:C1:B2:EA:35:0C:F5:75:4C:C4:53:4F:54:54:A8:79:53:86:0E
Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29
Certificate issuer:       /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
Manifest number:          C5
Signing time:             Sun 07 Dec 2025 04:03:52 +0000
Manifest this update:     Sun 07 Dec 2025 04:03:52 +0000
Manifest next update:     Sun 14 Dec 2025 04:03:52 +0000
Files and hashes:         1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: SK+J4T2X8RcGXUdTYTVh4wa/jhcMgJtQIkGfaLB08PU=)
                          2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: 9YzGJkxen0bF7ZOSO15+u2xKU2H/RKyzN947mBYbnYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl
                          rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29
        Validity
            Not Before: Dec  7 04:03:52 2025 GMT
            Not After : Dec 14 04:03:52 2025 GMT
        Subject: CN=6934fca8-41f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:46:27:a5:c9:8a:a8:e0:64:a1:16:c6:06:83:
                    f6:71:0d:6b:e1:eb:d4:03:42:47:a1:b8:3e:b1:ae:
                    f7:9d:cd:d6:b7:f8:5c:c8:d1:71:18:37:85:0e:26:
                    56:22:8f:fa:0a:81:af:a4:86:45:44:90:e7:f2:61:
                    a1:7a:78:d6:7d:7f:d6:2a:41:b3:87:f2:4a:21:d9:
                    21:31:87:98:7d:91:4e:8c:c7:6a:8d:36:7c:d8:c4:
                    89:e5:94:87:d9:ca:ff:c1:80:81:e9:f1:31:c8:f8:
                    1c:13:94:95:b7:3e:f2:a2:a6:65:14:fe:ab:8e:f1:
                    4e:c6:05:8e:c2:36:d7:32:cc:dd:a5:92:e8:2b:8b:
                    5d:3a:ae:a7:b2:6c:d0:84:87:56:07:d8:8b:a3:fc:
                    74:c1:65:14:9b:77:40:5b:37:82:f5:df:69:9c:fb:
                    fd:fd:34:f7:16:0d:a1:a1:74:57:81:bc:4e:41:6d:
                    ae:62:46:e5:e9:d1:6c:65:96:9d:4c:f6:31:62:60:
                    20:fd:d2:4e:20:3d:7c:4d:0e:1b:70:55:d9:e6:bd:
                    c3:e1:79:78:7e:2d:e3:24:da:34:5d:c9:0b:c2:5f:
                    91:a7:fe:57:2f:12:47:50:97:50:83:a8:78:9a:19:
                    85:12:48:90:75:fc:b7:c7:37:76:53:28:7a:91:b0:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6C:C1:B2:EA:35:0C:F5:75:4C:C4:53:4F:54:54:A8:79:53:86:0E
            X509v3 Authority Key Identifier:
                keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:fd:40:40:7c:a2:97:8b:59:f0:df:61:a6:ae:3e:2a:28:18:
         f2:7e:64:ce:71:06:12:04:3f:76:e8:90:e3:69:01:ac:05:47:
         61:1f:a6:74:09:0c:08:81:96:a0:9e:20:48:26:1d:5e:df:7e:
         71:08:84:e7:c5:a8:4e:10:74:72:e5:c8:9e:43:51:60:51:0b:
         e5:a8:f4:42:da:4e:d0:5f:7f:8a:8b:63:32:f2:56:e2:6c:20:
         7b:cf:e1:17:67:32:96:26:d0:96:e9:06:fb:08:ab:44:9f:45:
         26:23:79:8f:7a:35:0e:32:b0:a3:95:fd:b9:b4:61:f9:6d:d9:
         5f:3b:5f:f6:a7:95:77:85:be:cb:27:23:de:22:78:20:bf:55:
         bf:38:cc:57:9a:45:d5:54:9a:d8:ea:b9:aa:5c:a8:ce:ec:ea:
         a1:5f:63:7d:35:45:9e:87:12:30:3c:25:db:70:4e:64:e9:39:
         dd:85:15:6d:0d:27:95:35:03:18:2f:27:90:b1:34:6c:cd:91:
         0b:77:bf:52:74:57:d9:22:78:ea:98:37:27:29:ec:2e:1a:57:
         1c:23:3b:49:0c:a6:52:7d:e5:6b:f9:4b:6b:9d:d6:72:70:aa:
         c8:1d:6b:be:d1:e1:0f:d1:9b:41:39:8c:a4:45:40:ec:01:2a:
         96:7d:89:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFCRjAxMTAvBgNVBAUTKERCM0RGRDg2Q0VCRkVBRUQzQUFGMTVERUFFRTY5NjUy
MzQ3NDZBMjkwHhcNMjUxMjA3MDQwMzUyWhcNMjUxMjE0MDQwMzUyWjAYMRYwFAYD
VQQDEw02OTM0ZmNhOC00MWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAykYnpcmKqOBkoRbGBoP2cQ1r4evUA0JHobg+sa73nc3Wt/hcyNFxGDeFDiZW
Io/6CoGvpIZFRJDn8mGhenjWfX/WKkGzh/JKIdkhMYeYfZFOjMdqjTZ82MSJ5ZSH
2cr/wYCB6fExyPgcE5SVtz7yoqZlFP6rjvFOxgWOwjbXMszdpZLoK4tdOq6nsmzQ
hIdWB9iLo/x0wWUUm3dAWzeC9d9pnPv9/TT3Fg2hoXRXgbxOQW2uYkbl6dFsZZad
TPYxYmAg/dJOID18TQ4bcFXZ5r3D4Xl4fi3jJNo0XckLwl+Rp/5XLxJHUJdQg6h4
mhmFEkiQdfy3xzd2Uyh6kbD1/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1swbLq
NQz1dUzEU09UVKh5U4YOMB8GA1UdIwQYMBaAFNs9/YbOv+rtOq8V3q7mllI0dGop
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC9BNzhGMUIxMkE0
MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1MDZyeFhlcnVhV1VqUjBh
aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFpay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MUJGMC9BNzhGMUIxMkE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1
MDZyeFhlcnVhV1VqUjBhaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAl/UBAfKKXi1nw32Gmrj4qKBjyfmTOcQYSBD926JDjaQGsBUdhH6Z0
CQwIgZagniBIJh1e335xCITnxahOEHRy5cieQ1FgUQvlqPRC2k7QX3+Ki2My8lbi
bCB7z+EXZzKWJtCW6Qb7CKtEn0UmI3mPejUOMrCjlf25tGH5bdlfO1/2p5V3hb7L
JyPeInggv1W/OMxXmkXVVJrY6rmqXKjO7OqhX2N9NUWehxIwPCXbcE5k6TndhRVt
DSeVNQMYLyeQsTRszZELd79SdFfZInjqmDcnKewuGlccIztJDKZSfeVr+UtrndZy
cKrIHWu+0eEP0ZtBOYykRUDsASqWfYlx
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:22:16 2025 by rpki-client