This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
File:                     P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json)
Hash identifier:          52mvYm8CNXRRDbcTT+vwHeGL9ds8N9AbAoCymBJUpnA=
Subject key identifier:   A6:9B:F1:13:E9:33:5B:FA:38:AE:1C:5B:4A:A6:A2:63:B3:CE:18:00
Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45
Certificate issuer:       /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645
Certificate serial:       0828
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
Manifest number:          081D
Signing time:             Sat 06 Dec 2025 20:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 20:00:51 +0000
Manifest next update:     Sat 13 Dec 2025 20:00:51 +0000
Files and hashes:         1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: UFAhQe6MhbNXAOLsjEZ/ltiKCQzojtnH6Ug/pmy6u90=)
                          2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: qFL74VsWk0alCoqYasNXx5dBtFR40fQNiPpQ09RmOwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl
                          rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645
        Validity
            Not Before: Dec  6 20:00:51 2025 GMT
            Not After : Dec 13 20:00:51 2025 GMT
        Subject: CN=69348b73-4a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:89:79:c3:93:39:2a:9f:f3:8d:da:0d:75:64:
                    59:1d:e6:f2:b5:e8:ae:16:db:cb:a2:ab:58:0e:87:
                    88:1d:f9:79:af:b7:14:71:c2:74:d0:73:f4:ae:dd:
                    45:8e:4e:d2:1c:83:f1:b8:f8:29:1c:d2:4c:fc:30:
                    17:97:69:3b:9b:3a:36:01:27:39:20:fe:7a:e4:ef:
                    a7:92:7a:b8:95:6f:6c:7a:b2:17:7f:0c:ec:17:81:
                    0f:e7:2f:f7:97:09:12:b3:de:f9:26:5c:23:d4:c5:
                    2e:eb:db:5e:1a:e2:43:81:05:71:4b:09:26:ec:36:
                    ef:96:67:30:40:39:27:4a:80:2f:7a:01:18:9d:ef:
                    de:55:61:1f:19:13:32:87:55:2c:8a:66:7f:d8:47:
                    4e:01:34:22:c1:b0:f7:22:c1:46:f4:57:e2:dd:87:
                    a0:d1:1e:82:ec:73:8a:24:8c:bd:f1:33:45:ee:03:
                    03:ad:cf:ff:09:4e:ac:3f:91:95:6b:02:b7:f4:af:
                    9c:e4:c2:7b:be:c4:cf:86:0a:b8:d1:68:1e:70:5c:
                    88:e2:6a:35:a2:d3:cb:33:e7:6d:45:8d:0a:3b:6e:
                    ae:33:e9:92:6f:9c:fe:c8:7c:53:09:7b:a8:82:a2:
                    df:0b:cd:22:8c:3b:9e:1e:7f:a5:9f:5f:ee:52:68:
                    58:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9B:F1:13:E9:33:5B:FA:38:AE:1C:5B:4A:A6:A2:63:B3:CE:18:00
            X509v3 Authority Key Identifier:
                keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:69:ff:10:15:92:61:9e:66:f5:1c:07:2f:98:62:73:73:3f:
         ec:19:b9:9c:7b:4b:13:bb:a8:55:5f:cb:be:46:51:d1:a2:46:
         36:36:40:11:6c:3d:d8:d3:1a:49:07:70:19:a9:0f:e8:bf:5c:
         8d:1e:a9:c7:86:b1:db:49:73:25:5d:f9:4e:9a:78:22:03:ed:
         9e:dc:99:40:fd:69:69:17:be:31:5c:7d:af:f5:16:a5:92:ea:
         89:ef:ca:bd:9d:35:4e:f8:0b:e0:ec:6c:8d:a9:1a:6f:fd:3f:
         4e:b6:2c:09:73:c3:64:1d:56:a6:ca:e2:98:d1:f5:c7:49:28:
         ae:ec:4e:96:48:ad:70:ba:8a:7b:48:7b:7e:1b:21:20:68:30:
         0d:c1:2a:ed:3a:f1:cc:f2:69:f2:6a:08:7d:7d:df:95:b9:c7:
         d6:ed:d4:e8:44:a8:b3:12:a1:b0:9c:c6:6c:18:86:0a:02:13:
         fc:87:d2:24:cd:c0:90:cb:73:37:55:a7:6f:70:48:92:36:b1:
         ea:eb:92:3b:07:f6:28:58:1e:70:30:36:49:0f:f8:ff:37:0d:
         c9:08:94:e4:6e:7a:26:c8:e3:04:40:64:31:fe:a6:39:9b:c2:
         05:a4:5e:b8:a4:51:b7:52:0d:65:82:4b:cc:d7:f2:58:e1:2e:
         f5:c0:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:52:41 2025 by rpki-client