This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
File:                     Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json)
Hash identifier:          DHG9o54wdX1dXsT/X6Tg1QMhx76MRomDtQlO44FJ7QA=
Subject key identifier:   13:01:71:8A:9F:B5:FE:B7:74:52:D2:28:AD:CF:0D:C1:6F:D2:8A:8B
Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
Certificate issuer:       /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Certificate serial:       0DAE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
Manifest number:          0DA6
Signing time:             Thu 04 Dec 2025 17:26:06 +0000
Manifest this update:     Thu 04 Dec 2025 17:26:05 +0000
Manifest next update:     Thu 11 Dec 2025 17:26:05 +0000
Files and hashes:         1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: zqzHR1dgp5+ra67d7cJNRt72GWCxO3CrIpe12OYgRw4=)
                          2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: kfnndHzaWyTnp8z7+y1i5jZZ9EYcGBwsAArn1r5+vLU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
                          rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3502 (0xdae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194EF2, serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
        Validity
            Not Before: Dec  4 17:26:05 2025 GMT
            Not After : Dec 11 17:26:05 2025 GMT
        Subject: CN=6931c42e-723e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:85:41:46:71:94:55:34:1b:b4:63:d1:30:
                    7a:f6:47:e1:d5:bd:75:d7:ac:bb:86:44:76:84:bb:
                    fa:5c:e0:70:e7:1a:9c:00:a0:d2:82:84:ae:70:6e:
                    67:84:1f:51:f0:ee:5e:d3:78:5d:21:03:57:0c:05:
                    28:ef:d6:46:1b:08:68:e7:74:22:aa:14:6d:4d:a2:
                    8f:74:58:d4:74:04:ed:73:c4:09:51:98:ae:21:98:
                    06:aa:24:aa:81:95:0e:d2:d4:58:de:e2:24:71:a4:
                    dd:34:32:42:05:4f:b7:e1:09:e9:83:40:34:9c:c3:
                    ff:13:c4:64:23:6f:6c:aa:4b:51:dc:4d:c8:c9:3c:
                    e9:d7:cf:c1:a8:12:f7:10:64:07:48:8e:b8:9f:aa:
                    3c:15:41:97:4d:7d:d9:51:f9:df:90:15:90:8c:dd:
                    88:8d:47:5c:d3:47:28:4b:30:fa:a8:8a:9c:1c:6f:
                    88:92:07:1a:b7:a7:57:90:cd:37:0f:83:1d:06:2a:
                    9d:73:a0:01:94:28:08:fd:bd:8c:ff:87:b6:81:7c:
                    53:f0:14:98:4f:f9:ed:31:42:df:6f:41:a5:86:21:
                    bb:a1:a3:7a:40:9b:7f:87:ae:1f:8a:7f:38:fe:4d:
                    2c:ee:6f:0f:60:fe:61:36:4e:c8:e9:1f:97:ca:c1:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:01:71:8A:9F:B5:FE:B7:74:52:D2:28:AD:CF:0D:C1:6F:D2:8A:8B
            X509v3 Authority Key Identifier:
                keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e4:dc:8e:65:39:c9:be:5b:a5:9a:01:72:87:22:17:43:d2:
         f8:ef:7e:5e:76:21:16:f3:6d:83:46:1c:62:b6:1e:97:08:06:
         c2:bb:09:e3:79:7d:db:cf:2e:48:e2:ec:8e:36:a9:ba:90:e1:
         a8:a0:ff:b3:f2:b3:95:9d:d0:8b:7a:a3:7e:29:1e:e8:4c:d7:
         ce:28:03:cc:6f:a8:f2:5f:36:61:7d:ef:ba:8b:d0:27:ba:1d:
         71:be:2c:59:82:aa:7d:88:c1:a2:4a:20:4f:0e:cd:42:57:6b:
         47:c2:cb:aa:79:44:ac:ca:7e:fd:8b:54:bf:f0:d9:3d:44:08:
         17:15:dd:84:b8:1e:9b:b8:8f:51:99:f1:18:4e:de:11:57:08:
         8e:3e:48:7e:cb:5c:c1:84:d1:86:22:33:5a:9f:d0:1e:12:bf:
         55:70:77:0a:2f:9f:cc:79:96:66:fa:14:63:f0:eb:47:16:1e:
         b2:bf:28:ce:e8:b7:b4:cb:f7:5c:59:6f:06:fc:fc:7d:9a:eb:
         88:e2:48:fb:1b:0d:b4:3b:30:78:d5:e2:65:71:93:26:a6:7b:
         16:ad:80:1c:10:80:d5:b7:8f:97:87:af:0b:a0:61:bd:00:1a:
         b5:32:d0:59:41:23:15:16:4f:0c:fc:cb:ad:16:22:29:b7:6c:
         8f:29:f3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:07:01 2025 by rpki-client