This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
File:                     Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json)
Hash identifier:          PKHiwyB8BybGl/hFlcdmRIRWecNTO9d1ODpqGV//NdA=
Subject key identifier:   3F:E2:E7:1E:4B:66:CD:20:21:C5:3E:ED:D2:18:AC:39:E8:46:BB:14
Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Certificate issuer:       /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Certificate serial:       086F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
Manifest number:          085B
Signing time:             Sat 06 Dec 2025 19:48:32 +0000
Manifest this update:     Sat 06 Dec 2025 19:48:31 +0000
Manifest next update:     Sat 13 Dec 2025 19:48:31 +0000
Files and hashes:         1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: EGB9g1usBJ/WQsWSOyN6Mu5JK0oz0bgsj4VWPnhDrIU=)
                          2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: DOctWr/OPgqaZuQo/Vg8BKPX28KWmuANahI8jBAfLDc=)
                          3: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: H1FuH2ZNH03uYQtNzb3TWzIjcp7o0St6uGtbs7VdGro=)
                          4: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: tSePHI7aLjEFlYS6xw+YOLrRBy4JYZe6TL89trJbrgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
                          rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159 (0x86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
        Validity
            Not Before: Dec  6 19:48:31 2025 GMT
            Not After : Dec 13 19:48:31 2025 GMT
        Subject: CN=6934888f-e96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ac:cc:f5:d3:02:f7:c9:46:1e:89:d7:a2:87:
                    44:3e:cf:c9:25:d8:01:59:70:c6:fe:48:44:e5:24:
                    b3:1e:ad:9c:44:5f:41:f0:fa:c8:b4:47:ad:2a:3a:
                    34:59:df:60:d4:66:b8:53:f4:37:fc:f1:41:63:4d:
                    4a:cf:86:a8:82:f8:19:15:62:87:58:6a:82:bf:8f:
                    f3:f0:36:c6:7a:c3:4a:65:3a:5e:2d:b4:a6:ba:ad:
                    17:ae:01:b6:45:63:cf:88:7c:00:9e:36:e3:13:ef:
                    92:4d:f1:8e:5f:df:92:23:20:69:8f:90:48:e6:26:
                    8c:53:24:70:5a:1b:2b:74:75:e6:c8:b6:2b:51:36:
                    ae:97:da:57:42:76:0a:d0:f5:8f:17:ad:55:85:28:
                    60:57:8f:0d:cc:74:59:d5:7b:e5:a4:b3:e0:39:a3:
                    89:d6:f7:99:fc:fe:59:6f:c5:2e:59:fa:63:28:27:
                    47:9a:ec:14:34:a4:31:e6:60:f2:54:f6:ca:a6:b1:
                    55:66:3d:57:08:17:5e:45:31:ff:24:83:d4:a2:43:
                    cb:1d:f6:65:15:b9:4e:85:6a:21:7a:96:d4:c0:e2:
                    54:90:59:15:53:81:05:96:e1:65:09:51:b1:f6:da:
                    49:f2:a8:dc:6d:e9:9e:a6:9a:e0:49:0e:5c:7b:62:
                    83:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E2:E7:1E:4B:66:CD:20:21:C5:3E:ED:D2:18:AC:39:E8:46:BB:14
            X509v3 Authority Key Identifier:
                keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ca:4b:71:87:3c:6b:6a:da:ba:0a:d8:ae:56:be:65:8e:c3:
         a8:f5:50:dd:11:ac:fd:11:69:d4:51:27:6d:69:ee:bb:32:81:
         01:55:b3:05:43:5d:39:f3:bc:10:cb:5f:49:0a:15:b4:64:01:
         eb:9d:0c:a8:c1:da:9f:63:4a:8f:9b:f0:ce:04:c7:4f:33:e8:
         cd:48:9c:4f:ab:ed:dc:40:47:2f:f3:34:4f:9b:52:f8:ed:c2:
         9a:14:ba:2d:d0:ad:94:ed:9d:6d:17:a9:97:1e:52:40:bf:45:
         f3:92:56:af:67:61:b8:b3:f1:ba:af:a9:39:91:d4:ef:60:a4:
         93:a6:24:eb:64:a7:02:e9:5a:0c:93:28:f1:3e:d0:e0:2e:a6:
         4f:dd:22:cf:62:42:8f:d7:51:73:28:cf:87:1b:b7:f6:97:3f:
         e5:b5:e3:b5:3e:c0:3d:7f:44:b2:e6:28:41:db:0c:1e:8a:15:
         6a:e3:a7:46:32:e9:44:8e:5c:5d:d2:8a:2c:0a:4d:cc:b9:8f:
         80:89:37:a8:23:42:d1:b0:0a:bb:c4:8b:2a:e4:c4:91:19:16:
         2f:8b:c0:a8:e5:e7:1e:41:2c:33:0e:4c:8a:3d:b1:3d:12:93:
         d8:51:bd:ee:c6:22:d0:64:f0:7e:5a:ad:b6:dc:34:a4:4e:c6:
         76:d2:af:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:59:13 2025 by rpki-client