This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
File:                     X-0ED6bGtlZOQCsut2NpLOJDB-o.mft (raw, json)
Hash identifier:          Hav77lWxglrTbCvZxx4l/JFrmniQPxtfQ7DpBFAGQmc=
Subject key identifier:   AD:C2:27:EF:30:94:CC:4B:E7:CA:19:7E:91:81:F8:51:A7:92:46:0F
Authority key identifier: 5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA
Certificate issuer:       /CN=A9192F5B/serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
Manifest number:          15
Signing time:             Fri 05 Dec 2025 05:43:11 +0000
Manifest this update:     Fri 05 Dec 2025 05:43:10 +0000
Manifest next update:     Fri 12 Dec 2025 05:43:10 +0000
Files and hashes:         1: X-0ED6bGtlZOQCsut2NpLOJDB-o.crl (hash: y3OtQjHzbS3M+xvD2KzsWgQ3ljdz9xM6ZkmgSylZ8PQ=)
                          2: B44C2C06B4B211F08EEFDF43C4F9AE02.roa (hash: owXPWWTvbOHMdijTrjs5nUjJn72ZVck6W96FPsIZ2aI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl
                          rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192F5B, serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA
        Validity
            Not Before: Dec  5 05:43:10 2025 GMT
            Not After : Dec 12 05:43:10 2025 GMT
        Subject: CN=693270ef-b0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:26:0b:98:e1:15:55:f4:cb:21:37:1a:7b:
                    1c:d0:99:50:e8:6c:4d:43:20:09:ed:2e:21:00:a4:
                    78:16:33:b5:c6:eb:d4:e0:a3:89:5d:c3:4f:5d:91:
                    c1:ef:0c:8f:67:fe:f2:c3:bc:80:66:05:cc:a8:2f:
                    f2:d5:f3:fb:1d:a9:ca:e3:bd:18:8b:15:48:cf:67:
                    4f:68:8e:fa:22:1c:17:eb:ce:08:d3:67:80:3a:f2:
                    d5:22:3e:ed:e8:01:1c:33:07:89:b5:20:79:44:50:
                    81:c1:2d:9a:2b:2c:07:3c:79:c0:f1:0d:73:ff:ea:
                    37:61:d8:96:fe:cc:83:97:8c:72:8e:ad:3e:2a:2d:
                    f5:bd:98:db:be:e2:53:5a:47:da:d6:36:34:a9:fb:
                    dd:12:a6:23:53:68:90:f9:b2:12:ee:0d:d8:1e:bd:
                    da:11:1a:2a:68:11:5c:20:13:7a:48:4c:bf:2c:22:
                    66:ff:69:6c:32:eb:a0:1c:3a:ef:3e:a9:f8:27:a1:
                    cf:02:0d:ee:c6:fd:a7:e7:11:5d:b9:d4:f2:34:d6:
                    ce:dc:e6:c5:ae:48:a4:9b:8f:31:78:ae:57:95:00:
                    a5:31:09:dd:3c:4c:50:ae:d0:97:02:a2:4d:2e:2f:
                    99:52:48:d1:7e:1e:58:0a:9f:c0:19:ab:86:37:46:
                    6f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C2:27:EF:30:94:CC:4B:E7:CA:19:7E:91:81:F8:51:A7:92:46:0F
            X509v3 Authority Key Identifier:
                keyid:5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:de:1b:86:fe:fd:0d:2a:fb:68:bd:2f:7d:78:85:51:5e:67:
         2a:2e:09:45:1b:24:e4:ae:63:1d:75:45:0c:9d:63:1f:8f:bd:
         a0:e2:ed:e4:e0:53:f9:35:ef:4c:9c:58:2f:76:bd:45:a1:61:
         d3:2c:23:67:2e:3a:3b:f0:e5:8f:c1:99:08:9a:96:02:99:78:
         88:d4:02:bd:c7:2e:c3:fa:56:5e:8c:6d:28:b1:16:28:22:de:
         60:fd:89:0e:40:b1:04:61:da:41:06:fd:9d:87:c3:bb:ec:6b:
         79:7e:4f:0b:8e:be:39:33:e4:84:a6:f1:01:dd:60:90:cc:96:
         ce:d6:00:82:ce:40:60:8e:fb:1f:8a:f2:3a:af:2c:aa:c1:bd:
         39:1a:e0:7f:10:c0:d6:f3:06:1a:06:51:62:8b:b8:ec:be:af:
         3b:bd:b3:c7:21:fd:43:68:93:e8:fd:13:78:3f:83:cf:89:96:
         12:f9:84:48:ab:ae:91:e6:2d:1f:1f:ef:ba:80:02:da:24:d7:
         1e:6f:c0:b2:11:4b:51:ab:17:f4:4d:42:fc:b2:5e:3f:aa:1e:
         e9:02:84:bc:6d:47:15:5a:1f:f4:df:b5:8f:76:18:cc:9c:c3:
         b9:22:bc:79:d9:be:50:1a:3c:05:74:94:ab:ea:23:02:fe:bb:
         5a:39:c4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:31:10 2025 by rpki-client