This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
File:                     f99iGPoBXQoAdKhEJFGAaij53fU.mft (raw, json)
Hash identifier:          uWzD+vQhB4XLNLV/hCt/IHYay1Y4TElOai2NEF+Brm4=
Subject key identifier:   B4:7A:6D:F4:AF:55:F3:04:49:C6:0A:1A:8D:FF:5A:CF:52:87:5A:A0
Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5
Certificate issuer:       /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
Certificate serial:       0813
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
Manifest number:          080C
Signing time:             Sat 20 Dec 2025 20:22:04 +0000
Manifest this update:     Sat 20 Dec 2025 20:22:03 +0000
Manifest next update:     Sat 27 Dec 2025 20:22:03 +0000
Files and hashes:         1: f99iGPoBXQoAdKhEJFGAaij53fU.crl (hash: rhR5pVQ+7fQ5Xj6dIR4/++bjH+ou1v6xNqDZaoZhVaU=)
                          2: 7FAEDE3A03B411EBBB548A5EC4F9AE02.roa (hash: zYkuWCX1X2lloXdYhvISAPhidi7ivs3H5XjhpAN4fng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl
                          rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 20:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2067 (0x813)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173060, serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
        Validity
            Not Before: Dec 20 20:22:03 2025 GMT
            Not After : Dec 27 20:22:03 2025 GMT
        Subject: CN=6947056c-4d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:53:92:c1:d0:44:da:d3:c0:5a:11:f6:f3:
                    1d:41:74:20:be:90:21:ec:5f:35:68:0f:05:36:95:
                    2d:fa:22:f2:85:07:fd:f7:d2:43:d4:8c:88:d9:ea:
                    bb:f7:15:6d:7d:bd:c5:a6:3d:07:bd:e2:5c:33:ab:
                    8e:b5:64:72:50:2e:ad:58:72:84:a2:51:1c:73:e8:
                    77:88:67:61:38:ce:8b:e5:4c:a7:3b:d2:39:3f:82:
                    bc:b3:71:46:8f:83:70:49:d6:7d:10:6c:8f:9c:31:
                    d2:b1:6d:8b:93:6d:3b:cc:2c:3e:80:28:9c:9d:79:
                    76:b0:ff:66:2f:76:1f:aa:28:20:e8:b6:1f:bd:72:
                    9f:08:bc:82:08:eb:34:58:ff:10:4e:63:7f:9f:35:
                    08:38:f9:5d:7d:7b:63:7a:a7:17:53:04:3a:0a:e3:
                    e7:b2:cb:1f:ac:98:f1:4a:3c:d5:74:33:4b:05:e3:
                    de:2b:d9:a6:26:97:bc:34:13:d6:95:e4:0e:33:74:
                    eb:d6:14:f8:33:6c:92:8d:17:59:4b:7f:bc:40:a8:
                    58:22:1c:c1:0c:a3:9d:25:7c:57:fb:77:b9:a3:d7:
                    c3:bd:23:4c:35:a2:9f:87:66:12:3e:61:3a:8e:91:
                    c8:78:2c:60:46:36:dd:ea:78:49:0f:23:32:21:b0:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7A:6D:F4:AF:55:F3:04:49:C6:0A:1A:8D:FF:5A:CF:52:87:5A:A0
            X509v3 Authority Key Identifier:
                keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:90:ec:54:fa:2c:fa:37:8d:0e:c4:fa:a1:3a:11:3f:4d:25:
         c4:f4:37:f6:a3:1b:da:72:96:da:c9:c2:11:5a:46:de:99:61:
         c7:7d:69:66:87:2d:d7:2d:a6:71:ed:f2:67:d4:7f:e7:32:9d:
         86:82:a5:87:f6:a5:58:4c:68:d0:f7:7e:1d:fa:1a:c0:ea:c7:
         1b:1a:89:f0:e7:b8:b8:86:75:5a:ad:be:8c:c8:ea:58:22:10:
         7a:f0:f5:80:a3:f5:47:be:ed:cf:84:fd:64:45:02:99:16:0a:
         aa:4b:24:48:f1:5d:94:f0:55:f8:38:29:06:d6:34:88:ee:b4:
         9f:c1:ef:b8:96:84:f3:97:16:8d:f3:a0:fc:02:b2:3b:76:8a:
         67:0b:1c:b4:ef:ab:62:0e:6d:db:87:10:5c:8d:2d:8a:69:9c:
         8a:d3:65:fb:ee:78:7d:9f:4f:62:f8:b9:87:14:45:ce:ff:a9:
         92:28:1f:34:78:d4:c7:6f:d0:9e:11:7d:24:63:68:fe:c8:df:
         e9:a9:e4:23:78:df:2b:ae:77:14:c8:46:d5:e2:53:1f:09:e9:
         01:35:61:e0:c5:05:37:c2:29:0f:8d:26:4a:dc:d5:7a:bb:c0:
         ae:88:47:3e:0b:6f:a8:3b:b6:89:32:35:1c:28:6d:d8:80:cd:
         5f:27:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:02:01 2025 by rpki-client