This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft
File:                     594x-t7TeUFNZ_u89R2XZRTjQiU.mft (raw, json)
Hash identifier:          INmEbdGF8DNAEl+O9TXUaJK/dPuyX/NyPI6yh0fKy1U=
Subject key identifier:   E5:9C:6B:A8:4A:21:43:D9:92:E4:8F:36:28:C1:0C:54:E7:9F:CD:41
Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25
Certificate issuer:       /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225
Certificate serial:       0DDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft
Manifest number:          0DBB
Signing time:             Sat 20 Dec 2025 17:35:24 +0000
Manifest this update:     Sat 20 Dec 2025 17:35:23 +0000
Manifest next update:     Sat 27 Dec 2025 17:35:23 +0000
Files and hashes:         1: 594x-t7TeUFNZ_u89R2XZRTjQiU.crl (hash: 5ZUqjupSX9OXfJV/5pIo9AxDbKxw2stSnHv1pyD0gzA=)
                          2: 1D5C353C1D4C11F0B392EC38C4F9AE02.roa (hash: znRSUO3caPihB9pwLwMc1O8NeSvwB5D6pWui44HfBSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl
                          rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3548 (0xddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225
        Validity
            Not Before: Dec 20 17:35:23 2025 GMT
            Not After : Dec 27 17:35:23 2025 GMT
        Subject: CN=6946de5c-a816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:ef:8e:31:94:fa:7a:5f:c7:2b:e5:77:43:
                    29:f4:b3:5e:69:1a:db:09:07:bb:f5:3d:03:82:5a:
                    3b:82:66:82:77:96:9d:80:93:29:54:f4:39:00:7b:
                    19:49:cd:12:db:24:a9:c2:57:d6:01:cb:13:97:27:
                    5a:f8:ab:bf:cc:34:d9:cb:ff:17:0f:a5:c7:d6:4d:
                    22:15:5d:3c:66:a1:5a:c3:89:c2:9c:bc:68:9d:5b:
                    9c:1b:21:8b:4b:84:e4:42:e6:72:85:8e:0c:be:cc:
                    e7:20:a9:9f:c7:3d:dc:64:dd:11:87:a6:76:f6:b7:
                    8d:69:d3:df:5f:e5:e4:5c:6f:80:07:81:57:96:50:
                    f0:91:25:b3:41:6b:6f:f6:9a:b2:1e:e9:09:9e:4f:
                    c7:d8:f7:e4:b2:17:45:1c:09:aa:be:b5:c0:7e:73:
                    99:e2:cd:ce:b2:76:15:f4:bf:59:e1:80:16:1b:5b:
                    10:66:56:88:52:e8:c0:84:2f:48:3d:8c:92:58:94:
                    77:52:00:f8:53:f4:8b:a0:b1:69:5d:44:86:0c:63:
                    4b:91:01:00:da:94:bb:7d:b6:f7:30:33:69:43:aa:
                    3e:e4:68:fd:fd:0b:49:13:bb:66:12:7b:df:04:53:
                    68:a1:5a:7e:0b:95:5c:18:e4:b8:a5:5c:ab:3f:96:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9C:6B:A8:4A:21:43:D9:92:E4:8F:36:28:C1:0C:54:E7:9F:CD:41
            X509v3 Authority Key Identifier:
                keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:97:3a:5d:8d:cb:56:15:2c:52:d7:f8:14:fc:dc:fa:e6:71:
         1e:d9:6e:a7:13:8f:1b:be:20:6b:4e:d2:14:15:18:5d:b3:bf:
         32:a0:a3:1f:df:2b:8a:85:f7:05:e5:a3:2c:fb:6f:53:2c:73:
         d2:4b:84:70:fe:da:5a:ce:4c:50:4c:20:d0:e5:39:24:ba:4e:
         cd:80:fc:85:88:2f:ef:d8:8a:e9:88:b1:48:34:84:d3:b2:18:
         f3:12:64:d4:d4:67:ac:b4:b2:89:54:9f:47:f0:a9:1c:a0:9c:
         c8:3e:94:53:63:ab:f4:32:71:e6:cd:9b:c1:9c:03:e8:c5:20:
         01:02:74:02:99:3b:4a:f0:a7:2d:ee:c8:aa:4f:53:b3:fc:d1:
         7e:95:13:03:67:a8:89:ac:3f:56:ee:c2:b8:80:92:94:3d:04:
         4c:03:79:e6:c1:dc:ee:df:32:6f:d7:21:81:22:9c:fa:04:31:
         66:51:8b:71:1f:c7:41:4e:8a:97:2a:82:9b:d3:76:95:43:75:
         fc:79:56:40:58:cc:11:9b:2b:8a:46:f3:b9:4a:fa:a0:ea:3d:
         b4:32:5e:52:fe:9b:1b:54:67:64:01:60:6d:35:ce:1b:fc:3f:
         e0:ba:5b:12:26:03:71:01:d5:2f:1f:ab:65:c9:7b:95:47:89:
         41:5d:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:08:13 2025 by rpki-client