This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
File:                     punLpSnAWpYkymA1SKPjFJF1jys.mft (raw, json)
Hash identifier:          A8FsfPrRpkYOMvRG8WAvCuIBSHgCFHv6813Zo7X2xZM=
Subject key identifier:   71:68:13:CF:A8:9E:F8:91:8B:AE:CB:4C:B0:A1:89:4D:84:41:D4:E4
Authority key identifier: A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
Certificate issuer:       /CN=A9189B41/serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
Manifest number:          F2
Signing time:             Fri 05 Dec 2025 03:20:10 +0000
Manifest this update:     Fri 05 Dec 2025 03:20:09 +0000
Manifest next update:     Fri 12 Dec 2025 03:20:09 +0000
Files and hashes:         1: punLpSnAWpYkymA1SKPjFJF1jys.crl (hash: i1K3obtdZ2EUayqrssWw0523aE6H1rg699D9wPjLY2s=)
                          2: 17AF252C605A11EFB7F45361C4F9AE02.roa (hash: IdTeZSdJYpvrv4PlLAcbyZ45qrh+mkn1A6fS8tzZ0GE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
                          rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189B41, serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
        Validity
            Not Before: Dec  5 03:20:09 2025 GMT
            Not After : Dec 12 03:20:09 2025 GMT
        Subject: CN=69324f69-4105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:a0:8d:3a:38:da:42:9f:b0:6a:dd:f5:bb:
                    f1:7f:01:ae:25:5c:58:85:0d:6d:ce:bb:6b:f7:95:
                    8b:08:42:0a:32:8c:95:25:33:08:c3:1d:54:96:2d:
                    b1:9d:36:c4:b6:1b:2b:bf:13:56:ba:f8:20:d3:0a:
                    61:a2:e0:08:05:2c:0e:b5:93:1f:05:af:d4:70:0a:
                    d8:46:ba:22:96:5f:09:de:6b:65:57:6e:fb:22:c1:
                    9a:a2:74:08:20:3e:2b:ad:09:5c:70:a8:98:ba:33:
                    d6:c3:6d:cc:70:b0:f6:ef:33:38:18:57:89:5a:18:
                    04:5e:e7:72:9a:48:78:8d:45:46:dd:46:a4:9f:93:
                    ed:f0:42:56:3e:7d:60:c8:0b:5f:ab:3a:10:d7:f7:
                    73:34:ce:db:ea:ce:2f:62:9c:5e:98:30:73:e4:3f:
                    45:ce:61:32:29:f8:7f:93:da:af:0f:d8:de:62:ac:
                    fa:c9:c6:21:95:f6:48:be:61:0e:16:02:81:63:5d:
                    71:31:f3:8f:86:9a:3f:17:83:fa:bb:f4:c3:f1:f0:
                    fb:bd:3c:0a:fb:ea:af:5a:33:d0:72:56:8b:ab:ae:
                    8d:87:f1:b4:c2:8c:a9:f6:3e:22:e9:15:ec:0e:54:
                    18:f1:17:df:e0:b5:e9:e7:bb:43:ec:e5:35:9f:69:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:68:13:CF:A8:9E:F8:91:8B:AE:CB:4C:B0:A1:89:4D:84:41:D4:E4
            X509v3 Authority Key Identifier:
                keyid:A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2c:e3:61:39:56:7d:01:f0:de:63:c6:8f:74:1c:04:4c:5e:
         83:86:6e:d0:32:64:04:1a:6f:2e:b0:aa:c0:e3:63:f4:01:3e:
         42:ec:d5:58:51:59:56:c3:40:37:f6:b4:2a:7f:9b:f6:e5:89:
         c2:21:8f:5f:40:7e:1f:8d:d9:3e:4b:b4:ad:02:60:10:8a:bc:
         e0:2a:19:4b:48:bb:04:0b:29:38:ec:16:67:42:cb:5e:31:f2:
         50:14:bd:27:c5:00:3d:9f:03:f8:69:e7:e3:3c:d7:49:69:3c:
         f6:f0:e1:25:f1:4a:6a:a0:e5:cf:f5:a8:5e:63:54:a1:17:de:
         be:0a:ea:72:0a:bd:5a:e7:98:3c:df:f3:29:31:5f:36:c7:7d:
         3c:ce:34:88:b3:ba:ad:48:95:ed:fd:3a:2f:24:d6:33:ab:37:
         30:3f:19:84:85:5e:71:74:a2:50:8a:7d:6a:6c:ca:6d:5c:03:
         9d:5f:ff:ab:0a:f6:af:2c:96:e2:dc:8d:79:89:eb:b3:bf:3a:
         11:eb:8d:97:0a:ce:4b:e5:64:b7:0e:3f:31:2c:2a:b6:ee:85:
         26:44:c9:ad:8b:b5:91:bc:2b:7c:67:40:10:d4:d0:3b:db:cc:
         a1:47:4a:09:77:d0:0e:45:c2:f4:d6:bf:eb:45:5b:79:cb:f0:
         88:f1:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:10:06 2025 by rpki-client