This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          H0dov4So+SVqLSRMhrAoNQqr4mg/EtJkVR9koifb9m0=
Subject key identifier:   37:8A:33:35:73:A3:89:69:D4:1F:CF:52:DD:55:16:BF:1A:ED:75:EC
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       4FDD45FAD3807679A6871ED4BCE6EF147DBA2F2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          0842
Signing time:             Fri 05 Dec 2025 23:22:40 +0000
Manifest this update:     Fri 05 Dec 2025 23:17:40 +0000
Manifest next update:     Sun 07 Dec 2025 03:10:40 +0000
Files and hashes:         1: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: iSALA6EKqSH0Q4iqDMLQ2XH3yeKLw89Mf+aPV3Go/3Q=)
                          2: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=)
                          3: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=)
                          4: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=)
                          5: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=)
                          6: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=)
                          7: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=)
                          8: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=)
                          9: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=)
                          10: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=)
                          11: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 03:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:dd:45:fa:d3:80:76:79:a6:87:1e:d4:bc:e6:ef:14:7d:ba:2f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Dec  5 23:17:40 2025 GMT
            Not After : Dec  7 03:10:40 2025 GMT
        Subject: CN=378A333573A38969D41FCF52DD5516BF1AED75EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:6e:1d:86:cf:ad:4a:0e:d8:76:a5:3e:88:
                    c5:a1:43:55:e5:73:0a:a3:e3:7d:59:79:48:55:b7:
                    04:58:47:8d:99:aa:0a:36:c7:cb:c1:3d:39:84:d0:
                    56:0c:0e:b0:e4:b5:a2:e5:61:4c:7a:c7:df:29:27:
                    4a:5b:91:23:52:96:fa:a6:bd:b9:3f:35:b0:99:7d:
                    c7:31:43:68:4e:59:bc:6e:50:9a:43:0d:f2:b9:53:
                    7d:c1:1f:87:f3:f6:7d:db:5f:8a:dd:83:d6:18:3a:
                    ff:9f:34:13:d0:4f:f9:bb:c4:76:83:22:b0:b4:df:
                    0a:ed:f4:45:56:0f:59:ca:37:72:12:5e:34:14:f8:
                    fd:ee:a7:40:07:12:15:86:87:49:a7:08:75:d6:33:
                    1e:94:4a:2e:86:a3:28:a8:5e:79:21:06:ee:04:77:
                    b6:fe:37:56:e5:5c:be:83:01:97:de:fc:07:2d:20:
                    e4:0c:01:e3:51:c0:15:7c:22:fe:c1:2c:7c:de:a6:
                    e5:3c:53:69:ae:78:cd:6e:b9:0d:09:45:77:08:01:
                    0e:bf:60:59:14:b2:7b:4a:36:ff:88:bc:be:7e:f3:
                    cb:87:15:74:92:93:70:af:99:38:00:82:92:2a:95:
                    1a:89:5d:48:ef:05:7b:2a:09:07:b5:43:eb:91:02:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8A:33:35:73:A3:89:69:D4:1F:CF:52:DD:55:16:BF:1A:ED:75:EC
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:be:cb:2d:6e:b2:03:30:43:0e:09:69:bd:a1:dc:9b:a8:
         11:7e:17:50:ec:5e:9f:23:aa:a8:d4:47:e9:42:95:d1:fc:25:
         85:2c:74:d1:15:6e:5b:ba:a4:e7:27:10:e9:56:c4:22:9b:07:
         dd:51:f5:ad:c7:96:16:b1:7a:2b:a9:fc:8b:2c:6a:03:6b:c6:
         69:f3:27:ff:42:91:e0:4f:7a:e7:9a:7e:de:d0:d9:f4:9a:4b:
         12:f2:76:c7:03:58:3f:b5:a0:24:c8:ed:94:ad:8e:f8:65:cd:
         2c:70:ff:65:c5:20:50:7b:e9:f8:85:8d:2d:a9:3c:9e:d6:4e:
         42:29:9c:fa:6d:03:76:2a:69:39:5e:7f:30:47:f7:0c:f7:5a:
         a5:1d:75:91:0f:f9:27:7a:c7:09:32:dc:0a:df:00:f5:c1:7b:
         ae:56:73:4d:9e:f8:d3:89:57:c6:48:f8:1b:5b:33:86:6c:45:
         a1:eb:37:64:14:90:3c:dd:df:f3:20:60:42:3a:95:5c:28:ff:
         15:40:f7:17:3d:f7:ad:f2:51:f9:68:b5:89:86:35:01:05:e7:
         47:be:7d:56:38:45:69:7d:cb:01:fd:1a:de:60:5a:0c:ff:2d:
         92:1c:8f:31:4d:08:f2:c4:e7:3b:86:04:f7:57:b2:e8:0c:dd:
         b3:64:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:47 2025 by rpki-client