This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
File:                     M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json)
Hash identifier:          XdhvEsjYWa2izMHEeAMVbHWXBj4h/KbqoZFVNZlX++Y=
Subject key identifier:   78:55:61:56:28:29:9F:4C:08:78:49:21:E1:98:09:BE:AF:12:AF:D3
Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
Certificate issuer:       /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Certificate serial:       03AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
Manifest number:          039A
Signing time:             Thu 04 Dec 2025 23:13:29 +0000
Manifest this update:     Thu 04 Dec 2025 23:13:29 +0000
Manifest next update:     Thu 11 Dec 2025 23:13:29 +0000
Files and hashes:         1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: 9vx0gei25bWdIIm5Gx+McDDsDOYIf0jISrV/svwzfBk=)
                          2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: F+cI71SpMl71bLQgnMUz6K4+MsaifrlPMt2J8GaVcJ8=)
                          3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: RWlaRiVFKIIV/wakCOCZQQ+zk9bO5MWkgTakC7o+ErY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
                          rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938 (0x3aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0
        Validity
            Not Before: Dec  4 23:13:29 2025 GMT
            Not After : Dec 11 23:13:29 2025 GMT
        Subject: CN=69321599-5bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:91:e4:73:9f:bb:9e:98:0b:fb:e8:c3:3f:
                    ce:b5:51:30:d8:2c:82:5a:72:9a:3c:07:e9:52:fb:
                    bd:04:7d:60:86:fd:52:26:5a:33:91:64:20:22:f0:
                    c7:40:ca:21:60:d2:e9:13:66:bf:62:f8:22:8a:b0:
                    27:6a:9c:be:6e:9c:1d:d3:a7:44:d5:73:49:7c:a3:
                    c1:04:a0:81:d9:a3:ff:0d:7c:05:1a:4e:c1:84:e0:
                    d0:96:40:3a:60:87:60:ed:ad:33:33:76:61:b5:3b:
                    95:a4:52:75:fc:e1:4e:a3:35:71:3f:bc:df:9f:cf:
                    52:d9:62:6d:f6:e9:8a:fd:2f:33:be:76:92:d2:a7:
                    49:62:f3:22:33:73:f7:d7:7c:d8:9e:84:d3:51:cf:
                    9d:e3:dd:7d:c0:94:7c:9c:6d:62:a9:1e:5f:05:4b:
                    01:18:11:ed:32:e1:9f:e5:9d:46:d1:70:a8:e1:b9:
                    f3:97:ce:49:ff:bd:23:0f:8f:cb:05:e3:37:1d:bc:
                    38:31:f5:c1:9b:1d:73:75:28:4f:8b:6d:32:80:7b:
                    34:fd:76:21:ea:2a:1b:8c:d6:ac:2c:16:ee:16:05:
                    a5:2a:20:1a:b5:a7:c2:58:30:ca:0e:b0:f9:6e:08:
                    1c:3b:5b:66:f7:9a:a6:4c:8c:37:ed:4b:b3:7d:17:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:61:56:28:29:9F:4C:08:78:49:21:E1:98:09:BE:AF:12:AF:D3
            X509v3 Authority Key Identifier:
                keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a6:c6:2b:83:cb:2b:c8:1e:ab:af:67:ab:87:38:74:70:3d:
         68:5b:4e:5a:d5:3f:c9:86:d7:45:bc:36:9b:a1:91:15:f1:4a:
         da:b3:7f:0c:a3:8c:61:fa:13:fd:ca:5d:26:a7:87:21:bd:78:
         06:3e:b5:33:77:de:93:96:6d:12:fc:b2:d7:4a:74:8e:af:7d:
         be:51:1d:6d:9f:76:a5:df:20:e3:10:dc:ce:17:3b:f0:11:cf:
         3b:86:73:33:83:07:3c:2e:7b:74:5a:0e:c7:d2:3f:4a:fe:10:
         ba:ad:b3:71:eb:2f:42:27:f6:41:86:d8:0d:35:a3:b7:74:34:
         90:9b:80:85:6d:a0:cb:ee:ec:88:d7:62:8b:22:84:02:7a:d0:
         7f:1e:f4:ce:3a:6d:e7:5a:ab:41:90:3e:68:c3:84:94:0f:90:
         77:6c:b1:3a:11:64:fa:92:3a:e0:a5:d3:f8:5f:60:f3:3d:50:
         43:2d:05:a8:c6:5d:ef:ad:bc:57:e9:2d:3a:26:a2:93:03:94:
         86:8f:fe:8e:4d:6f:f7:ee:0c:b0:13:26:e9:2d:cc:20:9f:36:
         7e:31:b1:20:dd:56:a1:dd:2e:a6:46:94:59:a9:e5:8a:76:e8:
         77:ea:42:22:30:d5:17:24:0b:3f:2b:c1:c2:7b:23:8a:4d:2b:
         9b:22:90:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:18:52 2025 by rpki-client