This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft
File:                     SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft (raw, json)
Hash identifier:          Ty1BfNuWTopxI6Mmgh3nuQNRKnttpBWP33F1GvCkgCw=
Subject key identifier:   80:7A:34:94:07:BC:97:DA:66:F5:A0:6E:56:96:FE:03:FB:9F:27:73
Authority key identifier: 49:E6:84:D5:0D:8B:D7:8C:18:1E:07:41:8C:6D:12:02:32:93:E9:94
Certificate issuer:       /CN=A9177A7E/serialNumber=49E684D50D8BD78C181E07418C6D12023293E994
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft
Manifest number:          F6
Signing time:             Sun 21 Dec 2025 04:26:11 +0000
Manifest this update:     Sun 21 Dec 2025 04:26:10 +0000
Manifest next update:     Sun 28 Dec 2025 04:26:10 +0000
Files and hashes:         1: SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl (hash: wg7uoIgv2PQRTMxlkkg/8TM9oYnxTSMQ+r3FPFQLpp8=)
                          2: 228CC738816611EFA8852945C4F9AE02.roa (hash: lUgXyzv98aIYZZo+UF95hDGgwVOo27vHGN5bli84jD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl
                          rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177A7E, serialNumber=49E684D50D8BD78C181E07418C6D12023293E994
        Validity
            Not Before: Dec 21 04:26:10 2025 GMT
            Not After : Dec 28 04:26:10 2025 GMT
        Subject: CN=694776e2-db11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:88:3e:0b:f1:24:7c:0e:b7:3f:c8:f3:41:
                    6a:bf:00:c1:0f:11:b6:3c:ac:31:70:b0:95:8e:67:
                    3e:34:6a:49:da:3c:fb:c1:37:9f:65:8f:87:ec:62:
                    a9:c1:aa:df:aa:7e:85:93:60:2b:e9:ba:dc:71:ff:
                    95:a9:97:19:d1:b5:9e:85:46:84:b5:b2:18:f4:d5:
                    51:79:fe:34:14:6d:6f:35:3d:b9:1f:12:a4:34:5a:
                    e2:be:40:ce:32:25:00:98:c3:e7:62:b7:1b:19:99:
                    3a:6f:97:63:1d:e2:f3:33:75:ce:27:53:23:82:c8:
                    a7:f0:3a:eb:f0:77:19:29:5c:1e:4d:98:af:49:69:
                    0b:ad:67:a0:8c:97:22:d6:d3:ae:85:09:cd:01:82:
                    42:45:8c:64:83:e0:5e:9d:51:5b:f4:69:6d:db:b6:
                    73:dd:f6:d4:64:ce:5f:d4:cb:c5:4d:39:2d:d7:9f:
                    72:71:dc:7d:42:fe:33:b7:7c:13:db:b8:30:fa:d1:
                    85:ae:f7:d5:c6:4a:55:f0:33:c9:19:db:87:c7:69:
                    ab:17:aa:e1:48:0e:4c:83:13:c1:14:aa:be:b5:c8:
                    29:bc:c8:6e:98:65:c6:03:ee:e1:00:36:5d:8b:18:
                    c7:29:12:53:31:1d:a7:d5:6a:34:f1:75:37:67:b3:
                    f8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7A:34:94:07:BC:97:DA:66:F5:A0:6E:56:96:FE:03:FB:9F:27:73
            X509v3 Authority Key Identifier:
                keyid:49:E6:84:D5:0D:8B:D7:8C:18:1E:07:41:8C:6D:12:02:32:93:E9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:df:47:b9:46:a3:67:0a:da:89:85:36:e2:ba:89:98:60:55:
         42:59:ce:d4:94:61:c1:e6:61:cf:8d:e5:27:ed:6e:c4:b9:ff:
         22:12:a6:1c:e8:7e:c3:f2:b1:75:0e:d3:d0:de:73:0a:ec:50:
         a7:94:9c:fa:49:f6:75:0a:36:95:6f:9a:e1:a4:d9:11:fa:03:
         91:94:18:2a:d0:38:4d:bb:07:df:4b:27:55:ff:90:2c:f0:97:
         6e:19:99:b9:9e:31:dc:66:15:0d:a6:68:3d:59:99:6f:5f:87:
         53:d8:e9:37:ad:94:cd:ac:fb:a2:74:12:f2:90:87:0a:08:35:
         cc:60:34:5a:ee:11:f9:65:e7:07:a1:b8:ba:7b:d6:e4:e4:1f:
         f3:dd:49:1a:51:c4:3c:ca:7f:1f:9c:49:d3:a6:b8:e7:d6:5c:
         81:48:c4:4d:0f:8d:af:30:75:b2:c0:10:08:5a:34:da:b3:48:
         9c:47:68:b0:5b:c7:55:ae:6f:3b:d5:c4:cf:8f:c0:ec:a4:c0:
         02:c9:93:39:7f:bc:d5:6c:4f:64:3f:10:0a:f7:e3:23:69:a5:
         d4:d8:29:da:bb:7c:37:2c:37:39:8d:16:43:99:ef:12:fe:94:
         42:f3:03:43:a8:97:58:86:15:d6:c5:cc:4b:ac:6a:27:94:33:
         25:61:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 16:02:58 2025 by rpki-client