This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
File:                     grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json)
Hash identifier:          bp6QMjhtMoIbngH4fZ/AibdXOmp2xhl0Nb2AJ4ODeeY=
Subject key identifier:   DB:06:70:A2:18:65:BD:EC:E0:33:EF:18:57:24:10:D8:F6:EF:1A:5D
Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
Certificate issuer:       /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Certificate serial:       0591
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
Manifest number:          058C
Signing time:             Mon 22 Dec 2025 22:22:09 +0000
Manifest this update:     Mon 22 Dec 2025 22:22:08 +0000
Manifest next update:     Mon 29 Dec 2025 22:22:08 +0000
Files and hashes:         1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: uAFeVh/kMspdPbupAqEtcm5xNpAj+txxbMgyvHo/NWo=)
                          2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: 68/9CqYRkzm0ius//S97EiCu+9Aa9Wpy/boYkEQX4yg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
                          rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425 (0x591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
        Validity
            Not Before: Dec 22 22:22:08 2025 GMT
            Not After : Dec 29 22:22:08 2025 GMT
        Subject: CN=6949c490-c36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:28:7d:da:7b:e5:38:44:65:6f:61:09:1d:
                    4f:68:54:c1:3c:45:c8:b6:bf:89:f6:fc:73:21:85:
                    f7:9c:3b:9d:df:d3:67:b7:77:78:88:31:e9:13:26:
                    cc:56:e3:41:86:74:52:53:5b:c7:99:79:55:e3:e8:
                    3a:62:c3:ef:fd:15:52:57:21:dd:0b:ee:36:32:42:
                    d7:fc:f4:03:79:a6:cf:2c:40:3f:74:c0:c8:30:1b:
                    53:0d:ce:2e:18:43:24:d8:80:90:5c:77:28:72:f2:
                    42:04:68:41:f7:07:d2:e7:09:99:97:d5:2f:1f:52:
                    3e:43:4d:4b:32:19:fc:6c:28:79:8d:19:d3:01:55:
                    a1:48:9e:03:3f:0c:dc:58:a2:dd:53:e7:44:3f:84:
                    51:33:d6:6d:3c:a2:d1:a6:27:74:9d:f4:e8:d4:d2:
                    82:d1:06:a5:08:ef:e9:05:d0:c1:37:e1:51:20:95:
                    7c:73:ee:c8:90:ba:ba:78:d5:0b:8d:52:0d:b1:ae:
                    a8:87:36:b1:44:fd:76:3c:fb:a5:ee:29:77:e1:db:
                    d2:6b:01:d2:c1:e5:36:61:c8:77:8f:93:02:75:21:
                    e7:d1:36:46:30:3e:12:d8:09:df:4c:b0:ad:e8:2d:
                    a4:8f:e9:1a:8a:ce:b5:84:f0:32:5b:8d:a0:95:06:
                    56:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:06:70:A2:18:65:BD:EC:E0:33:EF:18:57:24:10:D8:F6:EF:1A:5D
            X509v3 Authority Key Identifier:
                keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:34:33:49:8a:63:7a:f9:e9:b2:c6:c1:c3:da:45:b1:a0:90:
         d3:4f:d0:4b:55:b0:7b:f1:c7:b6:0d:41:21:7b:ca:9f:42:57:
         c3:6c:86:e5:28:42:73:f6:3a:5a:43:57:de:2b:57:d5:2d:e1:
         c5:ae:ed:cd:e2:2a:bb:c2:f4:ac:18:d1:76:dd:4f:d4:4f:7c:
         23:1f:9a:53:f1:e5:64:59:0d:55:ed:e0:30:62:73:e4:49:97:
         8c:4b:2c:2b:23:7d:74:f9:51:ad:9f:96:7a:08:98:56:11:bf:
         f1:90:30:50:bf:d3:2b:d5:1b:1f:b4:bb:9b:fb:c1:a2:50:74:
         c6:90:03:87:71:15:c0:c4:4c:b5:5d:4d:f3:46:7d:ab:3b:92:
         4a:8b:83:e4:57:0a:5a:33:df:cc:55:2b:56:e2:95:9a:5e:8c:
         94:fd:dc:b7:e2:2b:eb:b6:9c:08:dc:60:ab:5a:84:45:de:97:
         de:2c:87:44:b3:f1:b7:60:4c:ff:90:b2:4a:e8:3d:b3:e6:7b:
         d2:46:f6:5a:13:89:db:8a:54:58:03:72:7f:67:a2:e9:d6:44:
         d1:0f:66:7a:84:2c:b0:c9:a6:25:e9:54:f2:ab:e5:9b:40:ea:
         ad:19:45:6b:9b:1e:ef:a7:9d:e2:4d:6e:26:91:60:2d:9e:97:
         ad:1d:8b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:32 2025 by rpki-client