This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
File:                     IgUecf7QG75bnNYkR2DObpAwevc.mft (raw, json)
Hash identifier:          7V3JsZ+Z6vs6qXJVDWbKUHr06feek31eW286pFrfjgs=
Subject key identifier:   4C:C3:B6:2F:81:9C:7D:3D:DE:B0:2D:2F:A2:48:EF:F0:DE:BC:C2:C3
Authority key identifier: 22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7
Certificate issuer:       /CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
Manifest number:          0249
Signing time:             Fri 05 Dec 2025 00:07:57 +0000
Manifest this update:     Fri 05 Dec 2025 00:07:57 +0000
Manifest next update:     Fri 12 Dec 2025 00:07:57 +0000
Files and hashes:         1: IgUecf7QG75bnNYkR2DObpAwevc.crl (hash: HrTAaKxdJIpG6r+/fnk8X5ozu8ZqjCqPMUO9Wi1gZfE=)
                          2: AF9BA1D2717111ED8518666EC4F9AE02.roa (hash: ArJFnlnVhsrJcFwhi1wglVXIencAnedBRPQm/FHkems=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl
                          rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190226, serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
        Validity
            Not Before: Dec  5 00:07:57 2025 GMT
            Not After : Dec 12 00:07:57 2025 GMT
        Subject: CN=6932225d-5aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:50:48:a6:f5:6b:6c:d4:f6:53:7e:d7:0e:
                    1b:68:34:77:22:32:a7:60:9c:6e:2b:17:6e:7e:83:
                    d7:61:81:19:ee:ad:49:cc:41:36:43:2e:92:c1:08:
                    32:0c:1b:f7:2a:f1:03:e7:e0:c1:04:0f:64:6e:41:
                    7d:a6:c0:d1:44:df:61:8b:30:a3:03:a7:59:85:89:
                    6a:a8:69:24:ec:2b:18:12:a6:15:33:5a:4f:f2:f7:
                    84:c3:af:9d:33:c1:d6:9c:bc:69:4b:54:f3:77:82:
                    13:09:89:1a:dd:50:f0:b1:c2:6a:40:4f:f8:5b:23:
                    b9:d1:6e:ab:39:4f:e9:dc:cd:1a:13:c0:21:4a:a8:
                    61:d1:d3:ef:22:07:3a:9d:f7:39:9a:37:42:42:59:
                    9a:f0:62:c6:cc:ea:89:2c:52:26:84:97:8a:d5:c6:
                    96:99:16:f5:ce:05:1f:b0:19:05:ec:f3:48:db:7d:
                    22:02:7e:ad:22:8f:31:12:2b:2a:48:ad:e7:2e:0f:
                    a5:cc:0c:24:24:cd:e6:df:ba:32:6f:b5:d2:23:ce:
                    72:24:83:cb:07:ad:b8:b8:fa:f2:e0:19:50:25:b8:
                    75:a5:6d:e5:37:42:19:4e:8c:8e:02:76:58:c1:0e:
                    7b:1f:ca:fd:a2:f3:bd:05:e5:79:36:aa:18:a0:34:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C3:B6:2F:81:9C:7D:3D:DE:B0:2D:2F:A2:48:EF:F0:DE:BC:C2:C3
            X509v3 Authority Key Identifier:
                keyid:22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fe:c3:5c:ed:e8:8b:a2:4f:42:a7:14:92:6a:9d:e1:c2:00:
         a0:7b:9e:7a:82:26:bd:f9:cd:00:0c:fb:ba:8c:3f:16:ba:f3:
         25:f0:8a:ab:46:32:85:70:58:fb:49:b1:cd:95:4e:3d:4d:87:
         0c:66:05:73:e1:03:98:37:86:d0:b8:4c:df:09:67:fb:b1:36:
         37:27:e8:eb:d7:98:67:12:20:52:e1:ae:ce:59:57:1c:9b:40:
         27:78:ad:bf:12:fe:a0:56:f8:d3:b7:31:6b:d1:6d:08:2a:c1:
         08:f6:99:71:9c:a6:63:e6:a4:bf:c3:50:a3:52:e4:ba:2b:cd:
         bc:cc:bb:cf:35:ea:ad:b7:d1:37:10:09:c3:15:e3:e0:7a:26:
         3f:5b:64:71:27:02:c9:3a:09:52:ae:f4:28:52:54:bd:f7:49:
         a3:79:30:25:aa:d5:e2:90:88:30:2d:86:4e:67:ad:25:b4:b9:
         f4:f3:09:65:a8:4d:51:8f:13:2c:50:39:c8:d8:7b:98:f3:9c:
         ee:6d:05:c8:e3:8e:f1:5b:d7:a6:96:82:cc:62:0f:91:ec:4a:
         39:80:9d:58:30:6b:92:34:b4:03:25:a1:83:27:95:cc:8d:ee:
         95:43:f6:8c:f4:c2:e0:cb:28:7d:db:62:f0:0a:6f:67:88:ce:
         6f:d4:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:22:24 2025 by rpki-client