This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
File:                     sLGl1VkrzlyB63JtRkDKlVEEzpM.mft (raw, json)
Hash identifier:          lxkDJdx9vCIyxbQGm8V+2LL+B8dIA/EqfYfWTLIjgIg=
Subject key identifier:   42:4C:EB:08:CD:ED:5D:55:22:7A:58:F9:0F:78:55:42:78:89:6D:C1
Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93
Certificate issuer:       /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
Certificate serial:       0B72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
Manifest number:          0B65
Signing time:             Sat 06 Dec 2025 18:27:31 +0000
Manifest this update:     Sat 06 Dec 2025 18:27:31 +0000
Manifest next update:     Sat 13 Dec 2025 18:27:31 +0000
Files and hashes:         1: sLGl1VkrzlyB63JtRkDKlVEEzpM.crl (hash: 8OcfgAvsG5wY0QTmiaGzZPTj0Pq8CL7tRiI5nAQELW0=)
                          2: E91D4C42E19011EC8E1ECA75C4F9AE02.roa (hash: ZetAVFLz5a9A9d96t5a3lmM5CeQl7iCEfmN2/6tRSWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl
                          rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2930 (0xb72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181259, serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
        Validity
            Not Before: Dec  6 18:27:31 2025 GMT
            Not After : Dec 13 18:27:31 2025 GMT
        Subject: CN=69347593-36a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:18:9c:0c:d8:e2:d2:22:16:27:aa:0c:96:
                    7e:3d:71:7c:ac:2c:96:b3:9a:f7:04:a2:96:96:6c:
                    9f:aa:87:4a:a2:bf:a6:c3:a1:e8:d6:b4:74:a4:d0:
                    06:09:54:a7:7e:a4:bc:8f:93:34:87:3d:56:89:02:
                    7d:c1:ce:06:14:e2:fc:01:86:5d:17:ba:f9:6e:c2:
                    52:80:1d:bb:8e:7a:49:88:b4:af:f9:94:41:71:04:
                    df:6b:4d:ac:56:79:3a:e8:de:c0:70:bf:35:dd:13:
                    c7:b5:85:ca:14:f7:2e:7a:63:1b:67:fc:2a:0c:b0:
                    bb:28:48:bd:b0:fe:f3:23:34:c4:45:42:15:08:33:
                    5d:a5:67:80:e2:38:71:cb:7f:60:32:4e:3d:90:6f:
                    15:73:5b:fa:9b:64:bc:80:5f:d3:c8:02:04:4b:d9:
                    d1:de:bb:12:0b:1b:dd:d4:66:66:8e:64:ac:7c:f3:
                    ee:f6:01:88:21:1f:16:c8:d8:56:20:3e:c5:8a:80:
                    26:8c:fb:09:bd:e7:05:6c:06:7b:15:9f:57:e6:08:
                    60:60:09:c3:22:66:9e:b1:fb:00:ea:5c:68:68:37:
                    28:81:e7:07:6f:7e:98:f5:3b:46:65:9c:70:4e:ac:
                    98:a8:66:b4:a3:66:53:55:10:d1:58:31:0d:4f:d4:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4C:EB:08:CD:ED:5D:55:22:7A:58:F9:0F:78:55:42:78:89:6D:C1
            X509v3 Authority Key Identifier:
                keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ee:fc:ac:f2:27:10:fd:22:fd:a5:43:68:06:6f:f8:ec:7a:
         60:49:00:29:42:2f:26:73:23:d4:b4:90:19:db:63:23:2c:17:
         9f:75:b6:a0:45:a2:a4:8c:ca:b1:65:48:4e:57:7a:5a:e8:12:
         44:17:45:4d:58:fd:dc:6d:d3:c9:7f:3b:7c:28:17:85:02:6c:
         f6:79:9e:1d:9b:89:49:a1:36:02:b0:ca:cd:3f:45:f2:7c:e0:
         7c:d0:e9:9e:3a:4a:b8:bc:7a:93:43:00:fb:58:c6:3b:5a:3e:
         0d:88:99:f3:da:04:37:5d:47:fa:94:1e:58:06:a9:cd:55:11:
         b9:a0:b6:a2:26:aa:81:c9:8d:c8:46:c1:16:cb:a8:e1:32:92:
         e1:13:dd:c5:05:71:b7:9d:ee:68:07:9f:75:9c:f4:e6:af:a5:
         04:19:60:57:2c:a0:ed:54:31:74:86:17:ac:05:c5:46:b3:55:
         02:ea:4d:9a:c1:20:3b:d7:0c:f8:9c:9f:63:4b:cc:69:64:86:
         09:c9:60:5d:f0:3e:20:c1:11:6d:a1:28:03:37:5c:50:b1:4a:
         dc:9f:53:f9:df:c8:de:66:42:e2:82:9a:77:19:80:aa:5d:24:
         47:d1:1a:5a:21:52:52:a2:9d:e3:6d:d5:68:4c:2b:1f:df:e7:
         07:1d:c2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:11:51 2025 by rpki-client