This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
File:                     aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json)
Hash identifier:          5NAaZQtzYB0XMzp+Hag6Wh5Qv0YclKHaBj3oYsH8cfM=
Subject key identifier:   B3:B8:08:49:95:67:6A:BC:A0:95:B1:1B:D8:FF:15:0A:10:57:78:70
Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
Certificate issuer:       /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
Certificate serial:       0C6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
Manifest number:          0C60
Signing time:             Mon 22 Dec 2025 18:10:44 +0000
Manifest this update:     Mon 22 Dec 2025 18:10:44 +0000
Manifest next update:     Mon 29 Dec 2025 18:10:44 +0000
Files and hashes:         1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: SI4+dhKOSghfNhzUUWFNzJzS0FzTe5j6rUxbMnrXr1w=)
                          2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: 37wRY/Cc6Mq3QSLFvHgV5f/52WNRD8oTGzaqCKYmvRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl
                          rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3180 (0xc6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
        Validity
            Not Before: Dec 22 18:10:44 2025 GMT
            Not After : Dec 29 18:10:44 2025 GMT
        Subject: CN=694989a4-ee49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:ed:c3:07:d9:a5:e4:09:a8:1a:44:9d:0f:
                    f9:e3:34:df:9a:71:8d:c9:10:a7:22:d7:06:b7:88:
                    00:e4:73:2a:f2:57:03:83:f9:ee:b7:0d:88:38:21:
                    9f:cf:93:c4:bf:25:54:c3:9e:59:a3:44:2a:71:1a:
                    c9:98:04:fa:16:56:be:e9:51:66:0e:26:73:e8:ae:
                    44:53:f3:05:7b:08:20:da:06:a7:23:e1:a2:0e:b5:
                    e0:01:3b:b5:00:29:9d:14:01:89:64:25:1a:3c:b6:
                    6d:4d:47:0f:2c:54:0c:61:2c:5b:b5:5a:bb:5d:7f:
                    56:a0:9b:77:b6:9d:85:80:73:24:5b:80:79:03:89:
                    c9:51:3d:0e:2c:15:b7:63:63:02:48:a4:95:9d:9d:
                    7e:1b:d3:8e:9a:df:3c:c5:8b:a5:2d:98:53:52:a1:
                    ea:c5:4d:3f:b7:b6:55:54:33:42:c1:92:51:a6:9f:
                    55:0b:24:01:21:c8:eb:df:5f:61:0d:2d:70:f0:66:
                    ac:13:25:8e:85:7a:13:90:72:7f:eb:b0:03:e9:dd:
                    e5:6a:93:5c:15:0f:5d:92:93:0e:b6:8c:1c:7d:66:
                    de:e7:71:ce:42:9f:51:8f:f3:17:05:c7:e0:ec:f0:
                    22:81:13:75:c9:a3:e3:8a:3d:0d:1d:ad:da:09:ab:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B8:08:49:95:67:6A:BC:A0:95:B1:1B:D8:FF:15:0A:10:57:78:70
            X509v3 Authority Key Identifier:
                keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:05:4b:9d:f6:2c:71:48:fe:79:4b:69:a0:93:e6:9e:7a:a5:
         7d:2d:43:f8:25:06:f6:c7:49:25:fa:1b:f1:90:88:b1:5a:ab:
         f7:ca:8c:b4:40:42:f9:8b:de:d1:22:1f:83:3a:99:17:54:c3:
         1b:97:9a:54:ee:f9:64:d7:ed:40:ba:f6:bc:bd:55:b0:0b:c2:
         ae:e2:ee:00:37:9c:80:27:65:eb:74:14:08:75:25:e0:10:0d:
         b1:15:46:83:c6:be:d9:1a:68:6b:d0:72:de:7b:cc:f6:67:00:
         45:b9:8f:8d:39:b7:62:20:91:a9:a7:74:82:8b:9a:60:a1:79:
         41:a1:63:31:02:27:d4:6f:09:63:e4:1d:d4:96:43:b3:0c:95:
         67:9b:e4:b3:d4:e9:f8:e4:45:69:ae:af:ed:00:9a:49:e1:26:
         17:5e:9c:b0:70:00:b9:fa:06:e1:35:15:8d:d0:21:c5:56:a4:
         df:12:98:33:d8:80:a5:8c:31:65:90:2e:5f:1b:a8:43:11:41:
         24:9d:ea:78:1d:83:4d:55:8a:28:0f:28:ac:02:b4:68:65:91:
         0e:70:01:08:f0:ae:6c:a6:21:6a:65:12:fe:49:7e:95:20:f0:
         fe:8b:13:80:c0:b1:09:bd:cf:a8:bd:71:37:6b:93:7a:ae:14:
         3a:b7:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 04:03:34 2025 by rpki-client