This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
File:                     t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft (raw, json)
Hash identifier:          szeybnGQzJwln+srfquZWlNTW+JRBxrJb68qBhX178c=
Subject key identifier:   AE:6F:6B:F0:9E:AA:B0:4E:EC:4C:F9:6D:F6:4A:5E:04:0D:19:DD:7B
Authority key identifier: B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43
Certificate issuer:       /CN=A9191EE7/serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43
Certificate serial:       06FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
Manifest number:          06F3
Signing time:             Thu 04 Dec 2025 20:49:20 +0000
Manifest this update:     Thu 04 Dec 2025 20:49:20 +0000
Manifest next update:     Thu 11 Dec 2025 20:49:20 +0000
Files and hashes:         1: t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl (hash: fv5afqGecN5713Sjxpg6nXBfDG+Am7NtvR8hJ3s6TPA=)
                          2: BF289EBC6F7911EBA5D39C85C4F9AE02.roa (hash: rYmfs/RpISA0+rLDC4rvjoN2LC7fOP83NH3OmfB3ty0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl
                          rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191EE7, serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43
        Validity
            Not Before: Dec  4 20:49:20 2025 GMT
            Not After : Dec 11 20:49:20 2025 GMT
        Subject: CN=6931f3d0-af8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5f:ac:f8:e6:f7:72:96:da:16:06:61:ae:05:
                    d6:8b:26:db:eb:ed:66:56:48:53:de:32:3f:16:47:
                    4c:14:fb:a7:4f:e5:98:34:5a:3a:da:23:5e:99:ac:
                    09:d0:ce:de:f7:72:cc:22:b0:f8:5a:64:ac:b8:ce:
                    00:d8:4e:dc:4f:04:22:79:df:9e:63:2e:30:cc:8d:
                    7c:ac:22:02:e8:e9:72:fc:39:6b:0f:0e:57:1f:e7:
                    65:9d:e8:ba:6a:b6:3a:43:64:ee:90:e3:fd:98:6b:
                    fe:ed:4b:c8:23:cf:bb:82:d1:7e:6d:2e:53:74:cb:
                    a9:8e:3d:e8:2e:78:db:a8:36:d3:52:20:1a:18:1f:
                    7f:bf:43:d0:93:f9:50:2b:e8:03:b9:ae:60:b9:b2:
                    d2:24:7c:57:95:f6:77:19:de:86:a5:59:89:04:5c:
                    ec:b1:ea:4d:a2:69:00:37:8a:ff:70:28:47:31:b4:
                    88:8b:15:1a:4d:8c:91:5d:13:1c:04:33:36:c4:3f:
                    3f:5c:18:8f:50:c3:ef:0a:18:7a:0e:58:14:8a:98:
                    0d:40:54:86:b7:ac:0a:de:43:df:e8:b2:2e:2c:01:
                    c2:86:64:b7:90:00:b7:c2:8b:da:9a:bb:a3:22:97:
                    2c:c7:03:78:1f:1e:df:78:b2:48:b0:3d:f0:d4:f8:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6F:6B:F0:9E:AA:B0:4E:EC:4C:F9:6D:F6:4A:5E:04:0D:19:DD:7B
            X509v3 Authority Key Identifier:
                keyid:B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:17:99:80:9c:23:96:82:be:5a:9d:27:6e:20:e0:ed:51:8e:
         42:d2:2e:e5:97:74:87:93:8b:8d:14:90:79:de:fb:64:2a:4d:
         5d:a1:d5:e7:15:51:5e:6d:25:42:cb:29:d9:b1:7b:88:8c:5c:
         ee:51:71:3b:12:25:90:64:de:2a:64:e6:af:4f:9e:58:32:a0:
         e3:40:09:02:06:e0:df:7f:c1:f5:48:22:d5:4f:9b:45:bd:c0:
         15:33:de:0d:8a:8b:d7:50:c4:c1:c5:7b:f8:58:03:0c:84:5d:
         22:e9:e1:c8:15:d6:16:c2:82:ab:0d:dc:49:75:81:a8:16:92:
         6a:e2:31:fe:96:bb:0f:6b:5d:00:27:83:a5:12:41:c3:76:66:
         19:0c:af:27:51:d3:4b:87:c4:da:98:71:df:93:04:c4:7c:f4:
         86:43:db:60:f6:82:42:7a:26:61:0e:42:eb:df:e6:85:1d:e5:
         46:47:74:28:e4:0a:81:7f:3c:02:69:28:b6:c3:45:ba:5d:43:
         44:d1:ad:97:2e:e6:f8:f7:ae:3a:e7:3b:ea:bf:0d:d7:b0:01:
         50:d3:ca:8c:6a:5f:36:a8:ed:83:76:86:9a:ec:6b:e9:5e:3a:
         5d:b2:97:87:b4:45:47:47:6f:c7:af:23:50:61:3a:93:71:a4:
         2d:6b:84:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:56:57 2025 by rpki-client