This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
File:                     p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json)
Hash identifier:          MUQLvl9WYL9/VuiwGqup8/l7UDXN+F9LO340LRL54V4=
Subject key identifier:   47:05:50:EB:0A:21:AE:86:9C:1B:0C:52:A7:67:37:55:EA:9B:A6:CD
Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
Certificate issuer:       /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Certificate serial:       03D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
Manifest number:          03C1
Signing time:             Sat 06 Dec 2025 23:16:55 +0000
Manifest this update:     Sat 06 Dec 2025 23:16:54 +0000
Manifest next update:     Sat 13 Dec 2025 23:16:54 +0000
Files and hashes:         1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: TNjIbE5L1Pw1p8zuKnaD/EAc5ULddP+PWztFRd5sKWs=)
                          2: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: +FxqoXH/7KKQFGXsUL0/yNpB7+vOLI4FjqU3Tid4D+U=)
                          3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: t8VvneVUYRJgPgj481YthbBCTMCZ/uaBbHMKrlXT7S0=)
                          4: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: rNtzGSiDY85AOdHWF1WEqXphhPwCBrWlPSRqHgAFmu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
        Validity
            Not Before: Dec  6 23:16:54 2025 GMT
            Not After : Dec 13 23:16:54 2025 GMT
        Subject: CN=6934b967-7cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:fa:4e:98:c9:ac:4e:63:17:99:ef:94:fb:
                    8f:21:58:2b:ee:44:b7:94:ad:2a:ba:21:5e:fc:95:
                    5e:d0:a1:26:ac:c0:7b:07:7c:3d:78:80:f9:c2:09:
                    41:d1:32:62:15:bd:75:91:38:a7:5e:50:62:ce:ad:
                    bf:ef:60:77:d6:cf:2d:29:9b:3d:bc:50:e7:fe:ea:
                    c6:97:2d:40:e4:f9:10:8b:9c:2d:53:9b:93:60:38:
                    88:ac:9c:6f:e6:06:f0:34:16:2f:64:4a:41:08:54:
                    77:df:31:8a:77:49:a4:e2:7a:b8:18:8e:50:96:9a:
                    eb:3b:f9:33:cc:13:ab:d0:78:b9:63:4d:32:f7:5a:
                    87:5f:21:45:bb:31:5b:e9:78:3e:c9:c1:6f:70:c9:
                    e3:fa:3c:e1:83:de:aa:a0:e6:dc:a9:cd:0d:17:d9:
                    15:d4:70:6f:bd:77:58:e1:92:25:e6:5d:fe:d8:af:
                    72:ec:90:a4:d0:1c:8a:92:09:ec:b5:12:3b:e1:ac:
                    a5:2b:ba:47:fd:42:c7:5d:18:6c:6f:c5:00:8f:46:
                    54:ad:04:04:ce:38:53:35:d5:01:02:f4:98:54:66:
                    44:b8:87:1d:9f:f8:3f:80:9f:ba:de:0d:d7:6f:fe:
                    8b:3b:3c:4f:03:9e:01:1a:4d:d2:1b:26:24:58:30:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:05:50:EB:0A:21:AE:86:9C:1B:0C:52:A7:67:37:55:EA:9B:A6:CD
            X509v3 Authority Key Identifier:
                keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:55:53:0a:bf:ef:13:2d:85:81:d7:cf:18:ea:98:f5:0d:55:
         4b:c8:4a:4a:7e:85:fd:4c:4c:c1:27:07:07:3d:b0:71:8a:ec:
         3f:63:a3:7b:33:e1:53:bb:4a:8f:3a:88:99:9b:ce:be:fa:d9:
         06:dd:41:25:7d:93:87:91:98:67:6b:16:81:6b:34:3f:cd:5f:
         81:a3:9c:43:65:c3:44:ac:77:78:94:c9:33:c1:bf:fa:d4:96:
         2c:f8:52:82:49:5f:f1:97:d9:de:b0:65:0b:e6:bd:ef:01:eb:
         57:eb:6b:8b:5e:4d:25:e6:31:a4:ba:c5:69:a1:49:71:7c:92:
         0f:7e:75:b6:1e:4c:c1:7b:7b:81:5a:88:2d:32:ea:06:1d:db:
         9b:3c:af:be:be:0d:34:95:69:e2:04:a8:45:35:b5:bc:9a:b5:
         f3:64:21:ad:4a:af:4d:cd:57:99:84:7f:e6:e5:4a:59:28:13:
         0b:6b:a7:65:77:63:74:29:a9:c5:a0:b0:7b:da:2b:87:10:dd:
         7d:08:df:fa:c7:f3:ab:55:3d:14:72:9b:5f:db:00:25:da:a5:
         ae:3d:aa:ad:41:f3:49:d0:52:2a:85:cb:60:54:4e:c9:31:e1:
         4a:ce:5a:9b:64:1d:e7:fc:2f:fb:06:6d:3b:b6:39:86:d8:37:
         9a:1e:bd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 22:24:15 2025 by rpki-client