This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
File:                     95uku76tPercmtRWS_qe8QpqorI.mft (raw, json)
Hash identifier:          UgDSgGE9hjCoDgSPbu8JEK1o+ep75hhn0LzYXmW62Lc=
Subject key identifier:   46:6F:40:EB:57:BF:75:44:C2:7D:1A:B0:DD:88:A4:CC:7D:9B:79:A8
Authority key identifier: F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2
Certificate issuer:       /CN=A9189A9F/serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
Certificate serial:       042D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
Manifest number:          048A
Signing time:             Sat 06 Dec 2025 23:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 23:00:45 +0000
Manifest next update:     Sat 13 Dec 2025 23:00:45 +0000
Files and hashes:         1: 95uku76tPercmtRWS_qe8QpqorI.crl (hash: XyiZl6L3rIFJb2jIRzFh8z2rgH81Vb6Z0AHFLZg2SFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl
                          rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1069 (0x42d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189A9F, serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
        Validity
            Not Before: Dec  6 23:00:45 2025 GMT
            Not After : Dec 13 23:00:45 2025 GMT
        Subject: CN=6934b59e-8e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:5a:7c:48:71:15:a9:48:21:e9:07:55:85:
                    88:3a:54:96:c0:fe:78:4d:ba:03:8e:49:6e:74:5c:
                    85:85:a2:17:00:96:03:e4:7f:df:5c:d2:a5:b8:d7:
                    97:f7:24:45:6e:e3:9e:f1:88:c2:60:45:97:59:68:
                    97:45:89:af:d7:ea:37:e2:06:ab:91:6b:b8:e6:7e:
                    91:de:34:3a:31:45:31:54:cf:20:a1:d9:58:46:f8:
                    7b:01:d0:a2:94:ae:2c:85:b8:82:97:4c:90:62:8c:
                    0c:f3:28:08:61:37:47:e0:03:53:33:c7:8f:c8:03:
                    b7:0e:0c:36:b5:2e:08:2c:96:4a:f8:39:ba:9c:ec:
                    19:ea:9e:d4:31:8c:63:1b:18:21:61:0f:aa:0c:70:
                    ad:bd:52:8e:bf:b8:4f:cd:dc:c8:65:07:80:c5:b2:
                    d8:b1:62:0c:51:77:fe:7e:41:68:73:08:a6:0f:cc:
                    a4:c7:35:2b:b9:be:11:67:93:46:01:df:0c:69:d0:
                    82:9f:ad:13:e7:c4:4e:ed:73:21:e3:56:69:a0:d1:
                    88:47:a0:bd:5e:07:ef:a6:a5:30:11:ec:b3:86:80:
                    80:e8:74:38:e0:7e:a8:9f:94:77:fd:12:67:dc:9b:
                    dd:6e:46:d7:17:5e:97:fd:d5:c7:6d:0a:69:b1:20:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6F:40:EB:57:BF:75:44:C2:7D:1A:B0:DD:88:A4:CC:7D:9B:79:A8
            X509v3 Authority Key Identifier:
                keyid:F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c6:09:ca:11:41:a8:c4:9d:aa:8a:75:e8:11:3d:8b:41:4d:
         ff:07:17:7f:71:b8:1e:16:3f:cf:d5:23:df:a1:2a:d4:4c:08:
         29:fb:9b:a7:c7:1d:91:69:5b:a1:67:70:d8:dd:4c:9d:32:53:
         cc:c7:bb:4c:c1:b5:4e:f0:c8:e1:3d:a8:e9:48:05:e4:1c:69:
         60:2e:f0:76:64:e1:9e:43:12:9b:8d:80:0a:b9:06:2c:93:21:
         ae:f2:8a:07:29:47:0c:d5:d7:7a:62:7c:b9:b6:53:79:2b:9b:
         53:16:30:18:b7:fb:13:d3:ea:e2:f5:39:11:0f:bb:60:c3:3e:
         59:56:f9:ea:fb:6d:74:b1:3f:35:62:1e:90:f1:3b:ea:15:88:
         eb:3b:10:62:c9:b4:f3:e0:46:13:0f:40:03:12:bf:9a:6c:45:
         33:71:b0:52:d9:91:bf:08:55:2b:68:ac:fa:29:08:9c:1c:7b:
         1f:9e:95:97:5e:37:c8:b8:ad:b4:7d:41:d9:89:ef:d5:35:a4:
         9c:1a:78:1b:01:48:a4:f5:0a:a1:4d:70:3f:16:17:d1:77:e7:
         d8:0a:5b:ba:42:39:ad:1e:d8:02:a4:2e:a8:c4:aa:9e:36:4f:
         77:e5:f0:ab:5b:8e:4f:81:10:df:59:62:04:b8:8c:a1:cc:a7:
         2a:b3:dc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:57:53 2025 by rpki-client