This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
File:                     MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json)
Hash identifier:          07WWFcBgH1zRA3/+XMU0cn4RHX+3fHOLB3mbTJmBJ6A=
Subject key identifier:   33:5B:78:33:F0:CC:48:F8:36:BC:72:65:D8:32:F7:A2:E8:68:BF:5F
Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
Certificate issuer:       /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Certificate serial:       14FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
Manifest number:          14E9
Signing time:             Wed 24 Dec 2025 16:36:52 +0000
Manifest this update:     Wed 24 Dec 2025 16:36:51 +0000
Manifest next update:     Wed 31 Dec 2025 16:36:51 +0000
Files and hashes:         1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: L/a+ldDactPpcVnroh8Or/G5Bx0OWrJDqmxQF2izWfg=)
                          2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: fzmHVxiTK7D8PG5yindwGef8+csbEOVTRn9jS+V30ac=)
                          3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: iYa29kjN+8nhwT/98WnKo7Pi7A7FL3PggbbxiD2rxqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 15:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5373 (0x14fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
        Validity
            Not Before: Dec 24 16:36:51 2025 GMT
            Not After : Dec 31 16:36:51 2025 GMT
        Subject: CN=694c16a4-382d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:c8:7f:88:d1:48:dd:11:f4:5c:9f:8e:6c:
                    bb:83:98:b3:ef:68:28:c3:84:86:fe:4d:20:c2:b6:
                    1e:ed:14:bb:6f:8a:0d:f5:37:2a:c3:b6:4d:63:91:
                    36:4e:12:f2:f3:13:b7:98:52:d0:9b:d2:78:95:c0:
                    d0:07:01:5d:b3:1d:82:3d:b9:00:77:b0:4f:14:83:
                    dd:48:4f:fd:60:44:e3:2b:fe:c1:42:a6:b7:62:44:
                    a6:ac:f6:66:14:81:c1:7c:15:0a:2a:a8:9d:1a:95:
                    09:02:cd:de:1e:41:ae:d5:6e:dc:aa:10:ea:15:a3:
                    8d:9b:28:d5:67:49:44:d7:a0:05:2e:97:48:4d:71:
                    b8:1d:c1:84:14:b4:bb:d5:38:32:f0:54:e6:82:34:
                    f7:90:e7:ee:6d:b2:8c:f9:a0:96:73:fc:f7:17:7e:
                    93:d5:52:b6:c7:76:d3:88:a5:fb:de:ba:59:42:5a:
                    d1:a2:46:41:cb:c1:87:67:4b:62:53:15:4e:ae:8e:
                    42:50:db:f2:d9:c3:83:83:f8:23:c5:23:76:3a:cb:
                    d0:3d:13:bd:3f:e4:c4:3c:2a:7b:56:57:69:ed:d5:
                    9c:74:af:87:b6:82:3b:29:13:19:eb:77:49:ce:56:
                    a1:2e:ad:d1:2f:99:c5:11:bd:f1:dd:00:20:ea:e0:
                    43:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5B:78:33:F0:CC:48:F8:36:BC:72:65:D8:32:F7:A2:E8:68:BF:5F
            X509v3 Authority Key Identifier:
                keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b3:5c:6d:a9:6b:3d:6c:05:29:37:51:be:f1:e1:07:84:95:
         a3:7c:c7:db:c7:5c:3e:08:b4:3f:36:de:2f:40:15:b8:4e:c2:
         00:6f:19:87:51:29:dc:70:10:8d:5a:e4:ef:3f:8f:70:0a:9f:
         49:a2:74:5a:6a:9c:1e:87:ca:e9:85:fc:a0:dd:44:08:97:a8:
         f2:f0:2e:d0:c5:5a:dd:1c:6e:2d:f3:18:41:2a:2b:08:0d:c2:
         0e:38:77:9a:30:fe:63:66:28:85:d1:f1:80:89:f6:f2:21:f6:
         3e:da:21:c2:28:b3:6c:b3:b3:4d:e9:cc:18:d5:72:73:76:eb:
         1f:04:f3:88:43:bf:0a:94:3f:cb:9a:ec:4e:b9:5d:e6:d0:43:
         73:26:76:ac:79:19:9a:be:47:a8:7f:6e:4d:6a:b6:96:f3:ba:
         62:64:e9:29:a5:2a:1b:25:b8:c3:cf:8d:4f:77:26:49:14:3b:
         29:2c:2c:09:53:dd:4e:20:61:05:39:d8:5a:fa:36:3e:fd:44:
         85:a3:7e:1d:51:ec:6f:e2:7c:f4:e7:4c:af:f0:97:0c:bc:5e:
         10:f8:ae:35:4a:9f:ce:8b:37:bc:de:6e:9b:8a:ce:06:ec:99:
         69:1b:10:af:56:dd:56:2e:74:db:d7:b5:c3:cb:f0:58:c6:e7:
         a1:18:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:56:09 2025 by rpki-client