This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
File:                     SBcgosjubOySR3dhkymcEP63ykQ.mft (raw, json)
Hash identifier:          SIJycGN/4u1yP/N1i6QJF0S9kH8SkGuApreozLzgpFo=
Subject key identifier:   5E:8F:B6:DD:86:3F:EC:16:65:1C:63:12:2D:B6:3C:DD:84:C3:AC:E2
Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44
Certificate issuer:       /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
Certificate serial:       019A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
Manifest number:          0196
Signing time:             Tue 23 Dec 2025 02:28:58 +0000
Manifest this update:     Tue 23 Dec 2025 02:28:58 +0000
Manifest next update:     Tue 30 Dec 2025 02:28:58 +0000
Files and hashes:         1: SBcgosjubOySR3dhkymcEP63ykQ.crl (hash: KjnBHSJ4/O1EUjExiB8B3grblsW5jTSfr+qE7VBtOPY=)
                          2: A38F041873C011EEB1A68245C4F9AE02.roa (hash: 3QT9VgasquPbgXpBTFff0Gu2hJL8xTVrH9a//E9hWWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD2E3, serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
        Validity
            Not Before: Dec 23 02:28:58 2025 GMT
            Not After : Dec 30 02:28:58 2025 GMT
        Subject: CN=6949fe6a-3f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:99:22:47:ac:1e:91:42:57:0d:67:77:5c:4c:
                    fb:c7:b1:12:15:09:32:d4:8f:33:0e:ec:6b:70:45:
                    71:c7:75:79:54:49:89:64:84:4a:1a:ba:a9:24:1a:
                    4d:13:85:3d:f3:04:b3:0d:13:00:55:53:5d:b0:32:
                    37:1b:5a:8e:6f:1b:a8:bc:70:39:8d:60:81:0a:d6:
                    1d:1d:1e:a1:a1:d4:4b:73:b6:e5:95:07:30:6a:c2:
                    f8:eb:b0:b9:69:5d:2b:6b:f2:01:3c:5c:f9:2f:f3:
                    91:8a:9e:d6:bf:5c:08:8d:c2:93:11:1d:50:c7:4b:
                    c1:10:dc:54:64:f3:93:4a:95:26:ad:e1:ae:69:e5:
                    65:59:88:b9:f2:61:bc:84:78:7e:9d:31:b6:4e:d7:
                    51:c5:5b:ad:78:4c:b1:9e:f8:3b:da:43:8b:8f:cb:
                    09:23:60:dd:be:80:8a:6e:b1:8a:20:38:90:90:06:
                    18:68:5e:31:72:6b:8d:4c:ac:27:6f:be:04:9d:a2:
                    00:d3:e0:bf:60:66:d3:9b:d8:8c:16:3b:56:e3:ea:
                    8b:4a:c5:f9:35:52:70:3b:7e:65:c4:99:ff:15:0f:
                    69:09:62:42:77:6f:f3:58:25:c4:35:41:02:31:09:
                    d2:9c:aa:44:db:47:34:30:98:15:ba:66:3d:7a:95:
                    5c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8F:B6:DD:86:3F:EC:16:65:1C:63:12:2D:B6:3C:DD:84:C3:AC:E2
            X509v3 Authority Key Identifier:
                keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:29:9b:38:01:6b:e2:dc:d3:0a:13:77:c8:d0:ba:60:b4:d2:
         0b:88:de:c8:d3:b0:31:30:34:7f:48:24:65:bc:ef:72:be:c3:
         16:99:69:6e:2b:bf:1b:0f:b8:ef:41:98:94:fd:d2:e0:c6:c4:
         f6:f4:bb:9f:d6:b5:5f:1b:6d:79:08:73:d7:4f:a6:d5:ac:ac:
         d4:bd:9e:07:e2:cf:06:55:71:ac:52:98:c4:8c:5a:ef:db:16:
         d8:b5:ac:b7:7d:8c:93:70:35:3b:be:0a:ef:97:34:eb:a6:26:
         e3:ab:d4:1f:91:2a:c5:4b:59:0d:0e:e8:28:6f:7f:43:e1:c3:
         4e:74:05:56:3b:46:aa:ac:df:eb:bf:20:ad:02:08:91:bd:89:
         52:d5:97:c8:70:4a:4a:d5:ef:64:2f:a9:bb:0e:57:56:b7:cd:
         34:bd:83:32:3b:5c:81:cb:d4:1a:87:55:05:45:d7:87:20:7f:
         23:2b:27:ef:3a:df:a7:48:a9:76:95:ab:f3:6d:4c:fd:3a:a4:
         15:89:05:9b:ec:fa:42:5e:77:28:0e:4f:34:2d:25:01:54:e1:
         62:3f:ca:8e:2b:b4:b2:a1:0c:6a:c5:3d:3f:70:b8:e7:db:14:
         20:d8:e0:cc:59:77:5c:57:07:09:fe:0a:3e:95:2a:80:20:ca:
         0c:cf:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:04:51 2025 by rpki-client