This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
File:                     l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json)
Hash identifier:          yJpX55f20MLCZrTHETnvjugq/Y5GYonaINPTY2Ay+Js=
Subject key identifier:   F3:12:AB:93:C6:2D:0E:55:97:CA:C4:15:EE:11:AC:20:D8:20:28:2F
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Certificate issuer:       /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
Manifest number:          0168
Signing time:             Fri 05 Dec 2025 02:06:17 +0000
Manifest this update:     Fri 05 Dec 2025 02:06:17 +0000
Manifest next update:     Fri 12 Dec 2025 02:06:17 +0000
Files and hashes:         1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: H2Spt+LltimlfWvh1S3f89gUheJ5Edfk6u7mTChBYbg=)
                          2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: lgKxQZBfyyGJs2ybuFT3lxPMvRUJgCHgG0F2ANjIDdA=)
                          3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: sWbEBie3r4Rs9tqZdxaTO4p/g0MLaIAVIR769Fluhr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
                          rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
        Validity
            Not Before: Dec  5 02:06:17 2025 GMT
            Not After : Dec 12 02:06:17 2025 GMT
        Subject: CN=69323e19-b4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:90:c6:90:e4:e6:38:ed:4b:01:fe:11:bd:
                    e0:5b:a7:1f:12:cc:f0:8e:7d:e9:5c:ca:8a:27:d0:
                    41:e8:cd:3d:01:2b:55:cc:80:f2:3b:92:8f:d0:1f:
                    f4:1e:51:27:cd:7e:5d:de:24:f0:48:ba:fa:71:d2:
                    73:27:06:27:68:01:c4:39:72:11:4b:58:4b:18:66:
                    42:6d:be:a2:cd:05:b4:b1:29:02:4f:d0:be:1a:d6:
                    bd:84:52:fd:63:fb:b4:46:75:cc:a6:8a:c5:65:a1:
                    ed:e4:7a:0e:f3:d8:56:c2:28:fe:2d:5b:62:bb:0a:
                    47:61:86:be:b9:d3:9c:5e:b0:68:31:c9:81:17:08:
                    72:2f:b2:50:c2:80:63:ae:3a:a2:94:62:2c:e3:ff:
                    7c:b4:f5:09:3f:04:27:22:bc:06:6d:93:e3:6e:4c:
                    05:93:cc:bd:da:2a:8b:23:25:86:9f:b6:4b:4e:5d:
                    bd:56:5c:5b:1e:fa:da:7d:2c:8f:69:82:57:64:d8:
                    1e:49:2e:20:b2:ce:f9:4e:ae:4e:7d:b6:34:7b:09:
                    64:34:a9:f1:57:68:79:40:e3:bb:fa:cf:a6:22:c1:
                    1a:61:b0:ad:5c:e9:0f:44:52:fb:bf:09:65:d6:5f:
                    8d:b6:7e:d4:af:29:f4:05:70:62:85:13:5e:5d:2a:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:12:AB:93:C6:2D:0E:55:97:CA:C4:15:EE:11:AC:20:D8:20:28:2F
            X509v3 Authority Key Identifier:
                keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:43:6c:7f:59:31:5c:90:40:d9:e9:ee:2e:c2:73:d2:fa:6e:
         e4:bf:2f:26:6d:c3:7a:86:26:eb:32:b9:da:36:d9:30:21:7f:
         ad:9c:6a:d8:ee:9d:f3:f6:49:ea:5e:56:c9:eb:fd:9f:66:85:
         90:30:18:6f:9d:84:3b:d7:0c:e0:98:dc:7a:37:05:bc:84:a0:
         a9:d5:aa:2b:30:9a:8b:b4:9b:62:a2:22:c9:99:9c:a7:c1:e0:
         03:ef:a5:1c:20:f8:fb:a2:7e:aa:fe:a1:52:b3:11:8d:4b:ec:
         bb:c8:ef:86:a8:83:30:97:d6:3a:d4:31:8f:84:57:60:1e:ca:
         7d:16:67:20:d4:35:26:ef:be:35:52:1a:03:41:d1:57:a8:ca:
         b1:d1:89:3c:2a:ef:7b:f9:b7:4a:84:a4:ce:6c:c7:7f:64:57:
         c5:64:2e:0f:f5:3f:0a:05:0b:7e:f8:d7:ef:13:a3:cf:01:c2:
         dc:a5:8b:6f:ce:c6:7a:50:32:f7:c3:16:e2:2a:10:42:64:cd:
         b2:88:dc:24:f9:40:69:bf:8a:73:d9:e5:ea:4b:e6:24:de:d0:
         5d:78:ac:f1:35:25:41:55:6e:63:b5:a1:43:46:22:6b:c1:1f:
         7c:c2:16:b3:2a:fc:fd:8a:e0:e8:8c:e7:37:ff:9d:23:b6:7c:
         aa:ec:de:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw
Q0UwQzI5RkEwHhcNMjUxMjA1MDIwNjE3WhcNMjUxMjEyMDIwNjE3WjAYMRYwFAYD
VQQDEw02OTMyM2UxOS1iNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwNaQxpDk5jjtSwH+Eb3gW6cfEszwjn3pXMqKJ9BB6M09AStVzIDyO5KP0B/0
HlEnzX5d3iTwSLr6cdJzJwYnaAHEOXIRS1hLGGZCbb6izQW0sSkCT9C+Gta9hFL9
Y/u0RnXMporFZaHt5HoO89hWwij+LVtiuwpHYYa+udOcXrBoMcmBFwhyL7JQwoBj
rjqilGIs4/98tPUJPwQnIrwGbZPjbkwFk8y92iqLIyWGn7ZLTl29VlxbHvrafSyP
aYJXZNgeSS4gss75Tq5OfbY0ewlkNKnxV2h5QOO7+s+mIsEaYbCtXOkPRFL7vwll
1l+Ntn7Uryn0BXBihRNeXSqhPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMSq5PG
LQ5Vl8rEFe4RrCDYICgvMB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC
NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU
MzVaUzlidGlTT1FNNE1LZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUQ2x/WTFckEDZ6e4uwnPS+m7kvy8mbcN6hibrMrnaNtkwIX+tnGrY
7p3z9knqXlbJ6/2fZoWQMBhvnYQ71wzgmNx6NwW8hKCp1aorMJqLtJtioiLJmZyn
weAD76UcIPj7on6q/qFSsxGNS+y7yO+GqIMwl9Y61DGPhFdgHsp9Fmcg1DUm7741
UhoDQdFXqMqx0Yk8Ku97+bdKhKTObMd/ZFfFZC4P9T8KBQt++NfvE6PPAcLcpYtv
zsZ6UDL3wxbiKhBCZM2yiNwk+UBpv4pz2eXqS+Yk3tBdeKzxNSVBVW5jtaFDRiJr
wR98whazKvz9iuDojOc3/50jtnyq7N7L
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:16:59 2025 by rpki-client