This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
File:                     v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft (raw, json)
Hash identifier:          QnAt+LrfDeJy6JPkqb0jGE5oVQ+qzyugCA8mtsHtRJ8=
Subject key identifier:   C6:3F:16:19:40:2E:1D:13:D2:65:CA:F3:76:2A:A2:16:70:D9:93:FF
Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC
Certificate issuer:       /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
Certificate serial:       0689
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
Manifest number:          0680
Signing time:             Sat 06 Dec 2025 21:23:48 +0000
Manifest this update:     Sat 06 Dec 2025 21:23:48 +0000
Manifest next update:     Sat 13 Dec 2025 21:23:48 +0000
Files and hashes:         1: v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl (hash: BuieGYjaBI4yPHoimxUyvLZpkC4nsPvQ//00nfhCGFU=)
                          2: 4482148613E611EE8ECA2D3CC4F9AE02.roa (hash: XTSBtrIecRC5bRQ4gGFFZQkO+lSp1UBH8SdLLnw+dpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl
                          rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191BBF, serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
        Validity
            Not Before: Dec  6 21:23:48 2025 GMT
            Not After : Dec 13 21:23:48 2025 GMT
        Subject: CN=69349ee4-30d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9d:9b:35:5f:e5:b8:e7:36:8a:e5:a6:09:43:
                    b8:ee:f6:41:a1:5b:ea:89:ef:85:72:3b:96:65:f0:
                    ee:68:09:35:81:69:4c:99:4d:66:a7:29:ef:1e:6a:
                    f5:bd:9f:a6:83:b9:99:b1:c6:7b:e7:c0:80:6e:6e:
                    7c:e1:9b:01:09:aa:38:c3:f7:7a:d8:9b:f6:c7:fc:
                    2e:86:a3:04:13:79:25:f8:5d:66:94:c3:65:36:e4:
                    e8:af:3c:e9:80:47:8d:93:03:08:ca:c0:3d:d7:85:
                    c1:f5:38:ff:5a:76:82:b2:5d:1f:ac:29:cc:5c:78:
                    c7:dc:ba:37:4f:ef:51:c9:6b:9a:1d:29:4f:db:07:
                    36:04:9f:83:2d:f7:e8:b6:cf:8d:02:0c:6c:40:75:
                    06:de:d4:73:bf:27:a8:09:21:1f:eb:a0:29:47:bd:
                    48:e0:60:4e:d3:01:ee:b3:02:34:74:2f:7f:4c:d3:
                    42:3c:81:96:5f:a3:f3:57:84:e2:ae:74:89:1c:97:
                    00:af:c7:a7:18:53:7b:2b:5f:ab:71:d3:85:dc:5f:
                    00:4c:04:c1:15:f0:26:7a:ca:4a:2c:37:89:6a:0d:
                    3b:b9:72:07:3d:6a:83:93:80:ce:0f:71:2e:50:1e:
                    2f:d9:2b:3e:ac:4f:52:db:b4:97:4c:1f:7c:fb:67:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3F:16:19:40:2E:1D:13:D2:65:CA:F3:76:2A:A2:16:70:D9:93:FF
            X509v3 Authority Key Identifier:
                keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ba:6a:ef:51:ca:ce:5f:3f:3c:ad:7d:36:91:fb:5a:4a:ab:
         0d:54:97:a5:05:55:72:af:0f:37:aa:8b:0d:c0:13:59:73:c6:
         c1:b1:2b:1f:da:fa:b7:11:47:b5:9b:d7:79:2b:54:62:59:2a:
         c3:13:a4:68:a8:ac:a9:21:31:09:c2:cf:d1:dc:8e:d3:60:2c:
         47:05:a7:70:a3:ab:5e:4c:71:38:53:81:32:f3:d1:d2:ba:cb:
         df:8f:17:15:3b:ed:2a:ad:09:8d:f2:91:5e:9c:38:06:28:59:
         4e:3a:bc:69:c1:06:80:52:83:7f:7d:d1:e5:47:95:90:85:57:
         48:34:46:ed:6e:72:a3:3d:be:b5:09:f6:98:1c:eb:72:3a:a0:
         d0:ee:ae:dc:49:05:0a:13:00:d3:1b:7d:0a:29:16:43:38:38:
         07:29:a3:a7:d7:37:5f:98:d7:c6:00:97:bf:84:37:a7:67:1d:
         da:76:c8:79:f1:6c:bb:06:ab:02:2e:ef:86:01:10:aa:d7:c0:
         8c:39:16:e9:a4:4d:70:9c:e0:07:2b:2a:04:e9:a1:08:b3:91:
         9b:80:4f:e8:a6:94:91:ef:08:42:75:9e:2c:91:94:58:6d:ee:
         f7:23:42:85:29:c5:d9:1f:72:95:c5:b0:1e:f0:47:db:3c:e4:
         29:b4:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:46:20 2025 by rpki-client