This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
File:                     mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json)
Hash identifier:          y83wKQz45lIssIFDMdsIbecft/zLg3YINUZ+k/RklNE=
Subject key identifier:   0D:B4:1E:AC:B3:87:A8:FD:74:0D:E7:5B:6C:43:5C:EE:3E:DC:24:C3
Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48
Certificate issuer:       /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
Manifest number:          019E
Signing time:             Sun 07 Dec 2025 01:47:24 +0000
Manifest this update:     Sun 07 Dec 2025 01:47:23 +0000
Manifest next update:     Sun 14 Dec 2025 01:47:23 +0000
Files and hashes:         1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: l3kVNPYd3+YXglnRSpXlBF4EHEoPQtbD7TdSzTJqB7I=)
                          2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: lw98bEtKYAV3W3eLzVIhHAUrtXOXdYQymX4EcxFqPzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl
                          rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
        Validity
            Not Before: Dec  7 01:47:23 2025 GMT
            Not After : Dec 14 01:47:23 2025 GMT
        Subject: CN=6934dcab-3aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:55:15:65:45:f9:09:b0:3e:37:93:13:14:5e:
                    1f:f6:97:b4:55:96:1e:20:91:e3:f7:ee:31:9e:92:
                    40:94:42:2b:45:9f:33:29:f7:1d:66:37:92:76:86:
                    04:93:8a:07:0f:69:c4:e3:20:44:d5:f2:ab:d9:9c:
                    65:60:18:f6:c8:98:a7:16:12:00:08:1c:14:22:a2:
                    56:88:d5:18:15:d8:70:1e:0b:cb:97:77:16:3e:24:
                    f4:b8:61:15:50:04:3e:99:5e:06:5c:e6:ca:24:7a:
                    9e:3d:35:8e:12:2c:26:71:bc:6f:61:43:3f:d8:ee:
                    95:d7:a0:7e:48:6d:3e:4a:e7:92:46:86:ca:00:40:
                    8b:85:7b:41:0a:dc:8a:50:29:cd:c8:59:cd:de:27:
                    5e:fe:a4:be:5e:9f:4f:63:38:42:86:3a:08:04:5c:
                    9f:53:4c:63:6b:78:8d:68:93:32:57:c3:92:8d:9e:
                    69:82:6c:75:2a:ae:05:d1:e8:a3:3e:c2:17:e3:dc:
                    f5:5b:43:54:bf:fc:29:da:76:0d:ea:14:59:e6:67:
                    b7:ce:ba:20:76:a6:19:65:c3:58:52:8e:0e:a1:de:
                    a2:ca:84:72:39:c3:7b:33:e1:9f:44:88:6b:be:49:
                    dc:30:41:e3:ea:76:d7:d1:61:96:0e:8d:31:65:e8:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B4:1E:AC:B3:87:A8:FD:74:0D:E7:5B:6C:43:5C:EE:3E:DC:24:C3
            X509v3 Authority Key Identifier:
                keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:07:64:da:8a:b3:d5:c3:a6:9e:fe:db:9f:7d:13:f9:63:63:
         11:fa:42:50:a2:69:34:d0:fa:aa:5d:a5:d5:30:0b:f1:8c:1c:
         76:6b:40:0c:1d:e8:6a:1d:35:ad:ea:55:3f:82:37:58:ca:04:
         42:08:b9:a6:92:02:59:1f:38:37:94:25:56:23:c9:9f:30:f4:
         4d:63:83:2f:4b:64:7b:71:bd:37:75:58:98:cb:19:71:0a:19:
         27:8a:31:06:cd:3e:e3:61:db:bb:8a:d2:10:29:7b:21:b1:23:
         c5:6c:4a:1c:2d:99:f4:f1:4c:d1:22:d9:20:e0:a8:fb:41:04:
         c7:4c:f0:00:a4:74:c8:a7:dc:c8:96:51:db:34:21:40:70:7f:
         f7:fc:22:01:5f:90:d7:70:c9:9c:bf:62:f6:aa:8d:04:de:c5:
         0b:a1:4c:12:19:56:1e:b6:e3:4e:94:fa:bc:c0:9c:06:8e:c6:
         4c:3c:b4:0c:d1:cc:9a:55:78:d6:86:24:c0:8b:dc:ed:69:a4:
         36:d4:f9:fc:dc:0b:6a:c6:36:fb:d6:30:45:97:cb:b0:a8:1d:
         cf:70:51:e7:e4:26:ad:62:7c:5c:d8:6f:d8:84:af:83:38:13:
         c2:86:c3:ca:1d:79:25:86:af:9e:ba:90:a7:65:c3:03:2f:52:
         98:5e:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:31:35 2025 by rpki-client