This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
File:                     m1FsBRZinvsTjrDmhbBboA6_Tn8.mft (raw, json)
Hash identifier:          GHdPIBhcFCWMmjBVoY5dPgYKrdZ++8zQVkGGhH2cupg=
Subject key identifier:   51:B2:43:B7:27:0E:23:BF:03:52:34:5B:66:8C:D2:4E:90:28:83:93
Authority key identifier: 9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F
Certificate issuer:       /CN=A9193552/serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
Manifest number:          0109
Signing time:             Fri 05 Dec 2025 03:02:23 +0000
Manifest this update:     Fri 05 Dec 2025 03:02:22 +0000
Manifest next update:     Fri 12 Dec 2025 03:02:22 +0000
Files and hashes:         1: m1FsBRZinvsTjrDmhbBboA6_Tn8.crl (hash: bH7YshNrJW/TmKtURhT15S5ZjdhbqNV023gs/IGd0m4=)
                          2: 8426E9543A8211EF9F1ED16FC4F9AE02.roa (hash: Cmiqcg21C+LyhA2gAp/ZQEO6k8THpOIRSGDyZ2gTNpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl
                          rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193552, serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
        Validity
            Not Before: Dec  5 03:02:22 2025 GMT
            Not After : Dec 12 03:02:22 2025 GMT
        Subject: CN=69324b3f-a88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:c9:69:92:22:8e:46:9d:95:0e:4f:3b:52:
                    0a:fc:6e:df:a8:cf:86:fc:af:41:1c:e1:e2:47:28:
                    92:74:f1:e6:c7:53:bc:8d:a1:62:bf:82:11:d9:43:
                    21:63:0e:05:6d:7f:23:c9:0e:56:ae:36:82:08:bd:
                    7c:5e:66:5a:7e:99:30:9f:ef:b0:3f:00:cf:c4:84:
                    9b:d1:9a:6f:80:cd:4b:54:5c:0c:66:9d:05:c8:c3:
                    43:94:ce:bd:91:96:10:4e:6d:8c:5c:ec:8f:c0:f5:
                    2d:b9:14:2d:7b:fd:57:75:00:3e:16:8c:b7:aa:52:
                    11:da:e5:3b:69:3a:5d:3f:94:a7:45:fe:95:ed:ce:
                    be:c3:63:73:e5:2f:31:e9:12:29:2c:b1:9c:81:0a:
                    ee:70:ff:1b:c2:9a:c0:bc:95:36:5d:89:5b:f9:e8:
                    39:36:94:00:eb:88:32:bf:1f:cb:b3:0d:b6:1d:27:
                    d7:04:8f:1e:22:58:d6:29:31:46:35:bd:8d:8e:22:
                    dc:a8:ec:9f:77:71:aa:1e:c7:9b:c6:2a:94:95:ad:
                    58:08:b1:f4:c1:38:65:7c:af:0f:be:83:6f:ff:ee:
                    4e:a0:bb:ab:96:81:fe:32:f3:53:22:ba:bf:e4:3a:
                    e2:aa:8d:50:60:b7:91:52:f2:25:21:fb:25:06:03:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B2:43:B7:27:0E:23:BF:03:52:34:5B:66:8C:D2:4E:90:28:83:93
            X509v3 Authority Key Identifier:
                keyid:9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8d:bd:0a:77:e3:4d:bc:0b:18:ac:f8:0d:53:25:c4:d6:1d:
         d6:73:0c:53:67:8f:ad:f2:94:75:92:29:b5:49:af:21:be:3c:
         89:0c:e4:ab:a2:03:db:4f:ff:2a:5d:81:90:2d:c0:c6:9f:67:
         72:b0:d8:17:a1:32:42:79:9c:ad:23:9b:5c:a9:e7:38:66:94:
         84:55:60:f1:87:7e:96:e2:46:a1:ff:c1:c6:85:71:f2:c1:bb:
         6a:00:c5:31:38:df:b1:5f:25:95:3f:9d:5a:1b:f5:b7:8a:10:
         7d:59:06:bb:c4:a1:d1:7b:ff:51:29:f6:c4:67:01:a0:e4:6f:
         85:b0:2e:2e:9e:06:b9:b5:16:f5:da:ae:9d:c6:de:66:5c:d5:
         c4:8c:f2:6f:8c:4e:47:7a:d9:1f:84:ed:81:de:4c:35:17:52:
         b2:fd:8e:fe:91:73:7c:c5:bc:18:11:0d:ce:99:b8:21:b2:71:
         09:36:b6:66:f3:fc:cd:62:8f:57:92:8d:7c:b7:30:42:1f:66:
         b9:32:77:dd:65:27:c5:fc:9a:d4:df:03:07:ae:21:74:e9:79:
         ed:58:c3:28:1f:40:f8:d6:e5:de:a0:ee:f2:cd:79:43:46:9a:
         5b:d7:7e:7c:3f:b2:7b:3e:ae:d6:61:7a:54:57:91:f1:13:d0:
         33:ce:15:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:38 2025 by rpki-client