This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
File:                     gVvw7iCl3LowV8PTW1jsFHcuj-8.mft (raw, json)
Hash identifier:          RnmVKJ//xI920lsbKpGeT/Jbe+yYb7JNXA+D/TUWxW8=
Subject key identifier:   82:66:88:49:45:F5:E4:5A:1B:55:E3:ED:27:9E:7A:68:9D:88:99:BA
Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
Certificate issuer:       /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Certificate serial:       0337
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
Manifest number:          0333
Signing time:             Tue 23 Dec 2025 00:02:37 +0000
Manifest this update:     Tue 23 Dec 2025 00:02:36 +0000
Manifest next update:     Tue 30 Dec 2025 00:02:36 +0000
Files and hashes:         1: gVvw7iCl3LowV8PTW1jsFHcuj-8.crl (hash: b9B75r4CaCyLAVrmSx8SDYdPGT6LCjFLGqoePF9o/vg=)
                          2: 54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (hash: X6/WL2Fb6NLT/TbbuE2SKgksYwkJEDYC9NLRzws0bWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
                          rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149E6, serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
        Validity
            Not Before: Dec 23 00:02:36 2025 GMT
            Not After : Dec 30 00:02:36 2025 GMT
        Subject: CN=6949dc1d-0364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6b:a2:ce:fb:b2:5e:5e:8f:96:aa:a3:78:36:
                    c1:88:a2:ba:00:99:d4:d0:c0:b2:42:99:2b:02:50:
                    6f:da:83:ee:c5:57:f8:6c:ed:31:b9:5d:1e:c0:cf:
                    dd:2c:f9:8b:51:fe:1b:03:8a:73:1b:c9:6f:df:42:
                    dd:2e:b7:65:78:3b:c8:b5:97:fc:60:5b:ff:84:98:
                    a2:fb:9b:f6:74:cb:e5:9c:3b:b2:36:58:8d:7b:17:
                    6e:3a:dc:db:28:4b:69:9f:e7:0f:e8:a9:24:1b:14:
                    8e:e9:16:8e:92:bd:df:0d:5c:7d:34:5e:ee:5b:ed:
                    3f:bb:f1:fd:d0:83:d1:1c:07:90:3b:c4:90:c4:c0:
                    a8:d0:d4:dd:47:af:34:ad:60:3f:1f:6e:44:4c:0e:
                    c4:c6:bc:83:39:93:c8:1d:12:b1:3a:0b:ca:79:ae:
                    d7:8a:83:35:59:3b:a4:08:0c:af:46:67:8c:4e:1c:
                    ac:ff:0a:ca:7b:b6:38:96:9c:5c:b8:5e:90:04:07:
                    85:b6:34:be:34:08:f4:88:d8:36:35:a5:be:52:3a:
                    62:52:22:90:af:9c:b5:8c:d5:f1:3b:ef:79:1b:1a:
                    12:e0:91:c3:46:12:79:3d:b2:97:b9:91:90:b1:12:
                    86:be:e1:81:20:2a:31:9e:1f:14:27:ef:b1:43:02:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:66:88:49:45:F5:E4:5A:1B:55:E3:ED:27:9E:7A:68:9D:88:99:BA
            X509v3 Authority Key Identifier:
                keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:79:d3:55:99:63:50:65:27:4d:46:9b:53:02:d2:19:56:41:
         cf:a2:bb:29:20:c5:cb:4a:1e:63:bb:e7:57:e6:df:5a:e7:a1:
         31:c7:b5:f5:87:f1:95:10:e1:26:ae:e0:de:11:76:57:4e:42:
         68:74:7d:0a:89:8a:61:14:81:69:06:e1:35:97:6b:71:a1:26:
         7a:19:f1:22:8c:71:69:01:b3:b7:a1:c2:e7:9d:96:eb:28:02:
         b1:2a:ef:f7:78:db:62:1b:f2:70:6a:ef:2e:f8:ac:4b:9e:ac:
         f3:ad:17:b0:5c:7b:64:f5:b6:2a:ec:7e:b3:0a:23:46:6f:2c:
         0b:2e:b7:9d:2b:14:6e:41:84:d5:b8:d8:74:11:71:a4:cb:95:
         18:d2:a8:49:4e:c6:c2:ff:c2:8f:e5:14:8d:06:bc:e0:47:1d:
         bb:00:31:09:58:f8:39:5d:55:07:5e:eb:78:77:bb:93:b5:cf:
         9f:c8:b8:5d:2e:73:a4:e5:53:41:46:be:7b:3e:fc:09:82:61:
         11:f2:80:ad:df:89:a3:08:90:8d:4a:55:70:12:d6:35:c9:c4:
         8a:01:cd:bc:fc:d2:ab:65:2b:1d:1e:b1:5a:44:91:fe:ba:96:
         98:5f:58:53:48:53:87:d1:34:36:b6:ff:b0:b9:e3:23:0c:df:
         5f:81:a3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:41:29 2025 by rpki-client