This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File:                     siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier:          R+WZmA4U4LJOkVja/lns7HdvaC2LdeB7Tv1HaaUoSvk=
Subject key identifier:   EE:53:9B:36:F0:1F:F9:A8:4A:93:A2:76:F4:68:0A:A8:F4:7A:03:FC
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number:          0179
Signing time:             Fri 05 Dec 2025 02:19:04 +0000
Manifest this update:     Fri 05 Dec 2025 02:19:04 +0000
Manifest next update:     Fri 12 Dec 2025 02:19:04 +0000
Files and hashes:         1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: sz2az2Q+eKIc9rRsYUl2PIGAFFq7P5nD5jiRO3JyMTk=)
                          2: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: yi/JlbD7n+64UZKPjWeRYXCwO+TbmKfGvCIR+gFBIgU=)
                          3: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: aDzusaC8Tp4Xh29QzEkDqXm9UtTCSIlF3bFjfnnKcb4=)
                          4: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: kdnh0lY80uMfga5l6WUOTwTWs5iXaL/0Tn0l6KDoAeU=)
                          5: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: Rw5/f7mwiL2A4bDLQlquOGpfyNbiDbGp1uerfy4o6ls=)
                          6: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: 9NSBUz8m7XvUpzDF2q/kWtrtqPYOWvRlzQxmdt8OCJc=)
                          7: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: EN6MJJBs25VJA8BxPoTDjeqUMnebmHL6ptBQ7dXtzww=)
                          8: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: 4bqguqQkO2NdVWuTGwGDP28FXTuH4VtBBVIWhIpTMAk=)
                          9: BB17221E211611F08D31C34DC4F9AE02.roa (hash: ROJzIN797AliUmkcNaXXEwujC8/puzfhlC19YDeoFFk=)
                          10: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: 5GSc16lAwm/VgJPQr9dFvZJgXnG3knNsBXTvWJ5YEVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Dec  5 02:19:04 2025 GMT
            Not After : Dec 12 02:19:04 2025 GMT
        Subject: CN=69324118-16b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5b:3f:d9:5c:cd:a9:b3:7a:81:3a:d6:b1:4f:
                    79:a8:29:40:73:3b:ae:f5:da:15:dd:0d:85:af:e1:
                    71:c9:ec:f2:0f:a8:b7:26:8c:63:e0:c6:ae:73:89:
                    69:79:5a:82:a5:13:b2:cf:86:5f:fa:a3:92:ba:b5:
                    a7:65:9c:97:68:27:e6:bf:fb:8d:64:a6:9b:16:33:
                    2c:57:d2:b5:62:e4:6a:b3:b6:63:27:8c:2a:f9:79:
                    88:b9:dc:f9:84:11:42:94:2c:36:ed:ea:6b:da:cd:
                    4f:76:b0:da:77:6a:b4:5f:fa:b7:4d:30:2b:53:97:
                    43:5a:4c:48:8c:37:2e:f0:27:a8:63:7e:94:63:b6:
                    b5:6a:c2:ad:51:c9:43:a7:df:ae:e2:2e:8e:31:5e:
                    4f:71:b2:4e:e2:88:8a:a9:4c:a5:0c:2e:10:5a:10:
                    c5:b6:4d:d8:ab:1e:a1:e6:20:5c:e6:72:0b:dd:ab:
                    e7:d6:93:51:52:e5:ad:af:3d:71:8c:16:08:c8:3d:
                    a8:27:29:44:ca:4e:d6:f4:14:ec:db:16:78:3b:f4:
                    bd:35:3f:91:4b:a5:04:07:3d:66:f7:9e:61:78:59:
                    00:69:4f:d6:2c:04:fc:35:ea:c7:a4:0f:ce:42:55:
                    55:73:24:04:a0:00:2b:4d:14:4b:a4:58:7c:d2:c4:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:53:9B:36:F0:1F:F9:A8:4A:93:A2:76:F4:68:0A:A8:F4:7A:03:FC
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7b:82:17:37:5a:84:43:a3:c2:15:da:19:a4:7c:6c:76:67:
         1b:ad:34:4c:a4:e0:8c:e1:cf:c0:4a:17:f1:84:a0:76:7f:cb:
         87:66:d1:e9:d6:26:fd:23:ab:91:85:d0:51:26:17:4e:fd:ee:
         b3:b2:3e:8d:97:93:ba:25:43:5b:28:7c:1f:6c:80:77:1c:bf:
         fa:67:28:f0:78:c5:02:ab:48:7d:29:39:15:13:1e:b5:fb:27:
         1d:e7:3c:14:ca:1c:81:a6:5d:7a:f7:67:af:8a:15:e6:83:db:
         4f:91:94:31:1b:b5:37:cf:5c:ed:31:0a:d6:ed:54:ff:37:c6:
         d9:fc:b8:b2:a2:b0:15:1b:0e:0a:70:b1:06:b3:f9:5c:04:a8:
         4b:73:0f:68:fd:bf:59:25:48:3e:a3:8a:48:a9:16:2d:32:6a:
         bc:96:3d:91:d4:58:c6:5a:a8:2e:f3:d6:53:91:8f:3f:69:02:
         e4:14:e3:ab:15:f1:29:19:a5:ba:bc:dd:ad:12:8b:87:8a:f0:
         fb:e5:10:cc:7a:6e:eb:46:b6:a9:8c:6e:95:59:b3:40:47:75:
         96:0c:a6:5e:de:fe:22:ad:b8:2e:6e:0b:40:c7:95:fe:4b:65:
         f6:12:3d:cf:86:bd:44:60:2c:99:38:2e:9a:22:a6:80:4c:c8:
         fe:5e:50:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:55 2025 by rpki-client