This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
File:                     aWYanwY1V84rVDewGIk9fZ_dvtA.mft (raw, json)
Hash identifier:          FyAKejcILMyZg/NYifHZ/xcw9F8Gs9EZQIhCxzx3P1g=
Subject key identifier:   F0:A3:84:AE:D8:96:0F:C0:7D:7F:84:D9:68:CB:D5:B4:EB:2F:09:AF
Authority key identifier: 69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0
Certificate issuer:       /CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
Certificate serial:       06B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
Manifest number:          06AE
Signing time:             Mon 22 Dec 2025 21:31:49 +0000
Manifest this update:     Mon 22 Dec 2025 21:31:49 +0000
Manifest next update:     Mon 29 Dec 2025 21:31:49 +0000
Files and hashes:         1: aWYanwY1V84rVDewGIk9fZ_dvtA.crl (hash: HikwkTry6/0AxpOjtDR5UPhbtJR/NZsNlGpgHKtQSYM=)
                          2: DDCD4C168EC611EBAB7F3476C4F9AE02.roa (hash: Y2ugT7F/Nq9bo4RxO3pzLxKsvKtinv0AiQJTvZ2Vh+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl
                          rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718 (0x6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91431A6, serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
        Validity
            Not Before: Dec 22 21:31:49 2025 GMT
            Not After : Dec 29 21:31:49 2025 GMT
        Subject: CN=6949b8c5-1ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a9:4d:e8:75:42:44:59:71:69:68:b4:6b:a6:
                    a1:11:2b:a0:72:2a:fb:11:ab:12:b7:7c:1a:d7:09:
                    2b:e2:e6:cf:6a:4b:74:70:aa:10:19:b2:8f:ce:90:
                    56:d6:92:49:58:20:4a:0a:f7:3c:90:b4:99:1f:6f:
                    1f:46:61:cb:1b:1e:8b:19:88:30:33:b7:49:ef:13:
                    ff:28:7a:64:c6:75:63:ea:0b:9d:be:8a:c5:c0:01:
                    86:96:cf:75:86:49:2d:d9:df:e5:e3:1b:2c:82:24:
                    4f:d3:d7:1b:b5:8d:4b:d3:05:fe:71:a4:98:6d:63:
                    93:fd:69:b1:41:91:4f:a2:39:7f:65:7d:4f:c0:3f:
                    d4:82:f7:a7:53:2f:7d:8f:59:9f:1c:27:4a:90:f8:
                    d9:c6:f8:6d:ea:9f:0b:0d:18:4d:2f:64:cb:ca:f3:
                    ed:3f:a8:29:5c:a3:f7:12:d8:b4:49:4b:ca:56:b8:
                    a7:66:63:6b:a3:67:df:18:49:5e:77:a6:2e:55:9a:
                    b0:45:ec:35:46:80:fa:e5:25:ce:96:e1:4a:dc:8b:
                    e8:14:84:12:fe:de:44:5e:74:4f:ad:ed:b8:1e:be:
                    35:7f:b1:10:99:35:8f:31:63:d3:2c:36:2b:a7:13:
                    57:38:98:00:6f:b2:24:0c:bf:93:7d:dd:35:2b:74:
                    21:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A3:84:AE:D8:96:0F:C0:7D:7F:84:D9:68:CB:D5:B4:EB:2F:09:AF
            X509v3 Authority Key Identifier:
                keyid:69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:08:50:f8:2b:28:ef:76:1f:68:bd:99:3d:1d:93:05:13:30:
         1f:13:50:2f:9b:e3:48:e3:41:9d:0e:10:95:42:75:ac:1b:6b:
         71:02:1a:c9:d6:a3:04:a0:88:0c:8a:e3:b5:fd:d2:f9:03:86:
         cc:9b:dc:60:93:ff:aa:23:b2:5f:df:8a:a3:76:4a:3d:fa:52:
         3c:62:8b:10:b8:3b:41:b2:87:4f:37:49:50:c7:9c:49:20:63:
         45:b1:8b:12:fa:3d:11:b5:1a:d1:f8:17:09:69:34:6b:89:ad:
         05:75:77:05:2c:63:90:de:72:d6:f1:f2:17:95:fe:e4:a9:b9:
         cc:23:50:4b:69:8b:61:13:58:19:d4:fd:00:36:a7:e1:4c:3b:
         c1:a2:a5:94:a2:60:bc:b8:85:14:a9:26:99:77:fa:5e:11:c3:
         14:af:66:dd:ff:3f:f8:71:89:91:20:4a:a4:38:65:00:5a:90:
         50:61:2b:99:33:51:67:5a:62:c4:03:0f:7b:47:05:d2:34:0b:
         e5:37:1b:62:ae:08:a7:97:d1:e6:c1:56:d2:ca:0c:99:d6:88:
         47:18:f0:79:a6:6c:13:ac:74:f7:c8:d0:fc:8e:6f:ba:54:be:
         70:47:14:d4:8b:4e:91:36:b7:31:62:ad:db:b8:ff:91:4d:7d:
         62:37:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:49 2025 by rpki-client