This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
File:                     f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json)
Hash identifier:          NvWM71ozo9NO+D4Kmpm/k1sL3u9A59bxeJXogmqvTD4=
Subject key identifier:   92:26:03:41:14:90:46:29:E8:BB:CD:F4:FE:C4:53:1F:06:27:56:0D
Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
Certificate issuer:       /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Certificate serial:       036D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
Manifest number:          034B
Signing time:             Thu 04 Dec 2025 23:29:56 +0000
Manifest this update:     Thu 04 Dec 2025 23:29:55 +0000
Manifest next update:     Thu 11 Dec 2025 23:29:55 +0000
Files and hashes:         1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: 8pzKnkBDGhCv4EtUzKOWE+4DQjvdvSLgFKMllp6XAiw=)
                          2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: kGDq/OHD1l2DSUn6HN/fSE9IJdA1C+dG59/8ecfdLJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl
                          rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
        Validity
            Not Before: Dec  4 23:29:55 2025 GMT
            Not After : Dec 11 23:29:55 2025 GMT
        Subject: CN=69321973-00f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:65:5b:7c:2d:3b:b5:3a:24:73:6b:2c:d4:
                    11:f0:72:c0:aa:68:2c:50:d6:fa:d4:9e:f7:f5:de:
                    52:9e:15:d9:53:ff:54:3a:f2:45:06:b8:ce:57:ec:
                    9c:f1:3d:d6:be:66:24:b4:e1:83:e2:10:30:a8:ae:
                    cf:56:40:d3:cb:0a:47:06:20:87:60:39:af:b7:4d:
                    13:79:fa:9b:ea:df:61:3d:51:94:79:03:31:24:fa:
                    20:d1:0e:a7:4e:2e:33:f1:11:59:b4:03:e7:ba:fe:
                    1d:2b:e3:21:7d:88:bc:d3:1f:a2:b0:3b:74:46:e9:
                    28:89:e5:05:a8:1b:3b:06:cd:9e:b8:d0:82:55:5f:
                    a9:60:98:3d:18:5d:95:de:4c:8b:de:37:b5:a1:73:
                    e2:8b:38:a9:db:5b:95:6a:72:1f:d0:fe:8f:eb:06:
                    82:96:1a:95:b6:2b:a9:76:6f:2b:63:36:88:3a:86:
                    d0:61:54:3f:42:09:57:91:2a:22:ce:20:8d:ac:5b:
                    c0:15:44:6b:21:58:71:c5:30:1c:3c:d0:d8:f7:89:
                    b2:1d:02:93:22:ca:65:65:32:e1:c0:a1:a5:a1:d1:
                    0a:07:a0:92:fb:0b:54:8a:4d:6e:2c:87:18:21:57:
                    81:0a:d5:ef:5d:a2:db:5d:fd:73:d1:a5:81:a1:f5:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:26:03:41:14:90:46:29:E8:BB:CD:F4:FE:C4:53:1F:06:27:56:0D
            X509v3 Authority Key Identifier:
                keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:58:2c:ad:4c:f3:8b:52:0f:00:13:1e:99:a0:a8:e3:2c:b1:
         cb:20:09:b8:73:02:f9:51:56:e9:51:0e:1e:dc:55:2c:5a:51:
         ed:66:de:69:fa:88:b5:18:d5:19:17:fd:05:6e:ed:0d:61:f5:
         a6:1f:94:2d:35:b5:a2:ea:62:b9:14:92:b2:42:1f:19:43:24:
         c0:08:21:e0:f3:b2:82:e7:4a:a8:b2:e1:d6:17:f7:80:37:55:
         cb:63:b4:8b:3f:27:ac:92:52:fa:c4:5a:b6:4e:fe:49:a4:e9:
         bb:37:dd:82:91:20:43:dc:16:4e:63:51:d2:d2:b0:0c:d6:8c:
         25:e2:58:30:26:e9:50:0a:da:d2:3f:85:31:77:af:7d:c8:2a:
         59:03:cc:b1:08:36:81:f2:59:7d:13:17:48:7d:99:69:80:28:
         05:6b:79:9d:b7:90:ff:cf:ff:2e:e5:81:46:58:8f:6d:8e:fe:
         02:f8:73:88:ad:0b:0b:8a:03:51:e4:61:da:4a:d1:a2:0f:a7:
         c9:3a:0b:05:fe:1d:d4:97:c3:5e:8b:0f:d6:5b:2f:9f:8d:0e:
         69:70:a6:7c:0f:60:6a:d6:48:d4:6b:a3:29:30:eb:8c:f6:a8:
         6c:e3:9a:7a:be:8f:21:96:c8:65:23:dc:1d:05:53:2c:d9:99:
         88:81:10:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:43 2025 by rpki-client