This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
File:                     8D39OxYGRUyhuoaQPnmtpwULoWo.mft (raw, json)
Hash identifier:          BZjWWGoKxfEiHGzzr/42s77w91+8GLSQWAwyiVvq9L8=
Subject key identifier:   AD:61:60:4A:19:10:D9:78:84:67:B7:CB:FC:38:F5:B3:7F:E6:70:0C
Authority key identifier: F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A
Certificate issuer:       /CN=A9172C46/serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
Manifest number:          46
Signing time:             Fri 05 Dec 2025 05:17:43 +0000
Manifest this update:     Fri 05 Dec 2025 05:17:43 +0000
Manifest next update:     Fri 12 Dec 2025 05:17:43 +0000
Files and hashes:         1: 8D39OxYGRUyhuoaQPnmtpwULoWo.crl (hash: hS5YDyEzF7oIjioJi3wD+yyU6j6LLGHA3FWSK2V0/Z0=)
                          2: 2E834C9C719311F08B21BD17C4F9AE02.roa (hash: S2srypxp7sEj5mgpvV1lWNa9dizgL57pVNGYl/RcGuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl
                          rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172C46, serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
        Validity
            Not Before: Dec  5 05:17:43 2025 GMT
            Not After : Dec 12 05:17:43 2025 GMT
        Subject: CN=69326af7-0e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:3a:49:6a:49:f8:08:96:b1:eb:3b:69:41:
                    54:ab:05:f4:8b:32:67:4f:c7:5c:fd:28:7e:71:46:
                    64:b0:60:15:e3:95:76:1b:da:67:49:a7:a1:06:e4:
                    67:a3:dc:68:30:ef:43:aa:a6:16:a0:48:bc:6a:7d:
                    b3:86:3e:35:89:a9:3e:33:1b:4c:60:ae:b1:56:a4:
                    00:b0:25:f8:56:6f:92:61:66:65:bb:c6:3f:ec:97:
                    71:44:9c:c6:78:e1:d7:8a:8b:08:f0:d0:21:bb:89:
                    95:03:c2:b5:ee:dc:28:93:dd:f9:97:89:a5:b7:bf:
                    52:d4:b0:76:06:e7:6e:54:d9:53:e2:77:83:17:82:
                    0d:09:a1:46:57:63:d2:46:8b:14:f7:c3:62:35:e5:
                    6d:8f:a5:c1:e9:7a:5f:e7:ce:0c:b7:79:83:8c:b9:
                    30:7d:5b:f1:63:84:07:53:59:28:18:76:bb:90:85:
                    c6:d8:8e:07:bd:53:47:65:5d:66:38:3e:1c:79:03:
                    84:2b:96:f1:9c:1f:b8:fb:5b:21:5a:15:e9:c4:e7:
                    00:12:76:4a:18:58:a2:1d:e3:72:13:dd:87:68:b7:
                    87:14:5e:71:9d:2d:26:6b:ae:8f:fa:bd:47:30:3d:
                    3a:86:3a:ac:57:3a:0e:3c:07:d3:7b:82:01:3d:d1:
                    0a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:61:60:4A:19:10:D9:78:84:67:B7:CB:FC:38:F5:B3:7F:E6:70:0C
            X509v3 Authority Key Identifier:
                keyid:F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4e:63:e5:0b:86:c4:5c:44:fa:cb:e1:06:83:36:14:36:d0:
         7b:be:85:6c:f0:cb:0d:0e:97:ef:bf:04:65:f2:05:54:39:7c:
         59:ef:29:23:1b:a3:c4:6a:5e:7a:4d:99:ba:45:38:4e:dd:a3:
         c2:35:17:73:55:06:7c:43:52:5c:7d:8f:34:68:00:85:4c:58:
         f8:a5:6b:cd:b8:81:3d:26:46:31:4b:e3:e4:23:f5:b3:04:ba:
         d3:9f:d2:73:bc:87:02:90:4d:b1:02:b5:c3:1e:83:48:03:ce:
         41:e6:96:75:57:60:00:2b:a7:34:f2:4d:3a:5a:a3:65:9d:ff:
         6f:25:bc:08:a2:16:69:fc:45:2d:9e:ae:1a:70:10:25:f5:e8:
         b5:ea:a9:43:1d:a8:a2:14:39:d7:60:5d:44:3a:e0:97:ce:55:
         34:68:c5:ee:f8:4d:50:08:3c:ae:94:ca:7f:8b:45:1e:5f:d4:
         5f:5c:1e:40:ef:2d:11:d4:60:ba:c9:42:76:cc:9a:bb:a4:e7:
         39:45:c3:48:fe:0f:1b:4d:48:cb:1d:a9:e6:11:f6:ab:bd:e1:
         c1:89:85:53:2a:ee:d7:03:ae:24:46:02:e6:21:96:2d:20:e9:
         ab:c9:9f:b9:a7:0e:4b:05:63:0b:0b:ea:c9:a4:69:a5:ed:41:
         42:b9:08:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:43:10 2025 by rpki-client