This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
File:                     m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json)
Hash identifier:          VR9zg5sgRnVcDGltGXHk0+Z1wk3gDDWTdSS6+9qrI74=
Subject key identifier:   98:C4:31:8A:C0:39:EE:61:1C:3B:2B:76:1A:C7:ED:49:70:88:4A:86
Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
Certificate issuer:       /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Certificate serial:       0897
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
Manifest number:          088F
Signing time:             Thu 18 Dec 2025 20:04:16 +0000
Manifest this update:     Thu 18 Dec 2025 20:04:16 +0000
Manifest next update:     Thu 25 Dec 2025 20:04:16 +0000
Files and hashes:         1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: ArxUeSjfW/q8le8ubmk1VyA8AmUluV8xW72TKp7mdGQ=)
                          2: 91CB02E0DBDD11F0B3C660C858641951.roa (hash: DhUNLqZR+magQuA03apPa2yLjtOOxq4K5P8AAogIojA=)
                          3: 7B3B0868DBDD11F089B5B5C658641951.roa (hash: kgOcs9CLVX7ZJC+2axbnc6VaT+hi4XvLWDxoRt9QMvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
                          rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2199 (0x897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
        Validity
            Not Before: Dec 18 20:04:16 2025 GMT
            Not After : Dec 25 20:04:16 2025 GMT
        Subject: CN=69445e40-6bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:8d:a5:46:38:52:3d:99:60:ee:7b:9e:ef:
                    aa:6b:f6:2f:8d:71:63:c7:e9:53:a4:be:21:e6:f5:
                    82:9a:2d:de:5b:7f:c3:66:90:e9:73:b9:28:28:89:
                    f5:a3:3c:98:e4:3b:ee:8e:b3:91:f8:d7:90:59:6a:
                    eb:3a:6c:02:18:63:14:01:c0:aa:e7:d0:a4:4f:4b:
                    47:3f:90:64:9d:02:f0:9f:a7:ba:76:a2:d6:7c:d5:
                    93:23:7c:e4:b9:47:ae:37:0c:cf:fd:7a:18:ad:28:
                    32:20:e1:09:d7:23:40:2b:9b:ca:e0:ac:68:f1:35:
                    66:69:79:3f:bb:0a:70:26:c8:29:9e:ff:cb:3e:24:
                    39:fa:97:75:0a:f6:77:2f:78:3a:cc:d4:2b:0e:11:
                    e3:9e:48:90:54:ba:82:97:de:70:6c:c2:92:bd:12:
                    d1:94:26:f2:a9:b8:70:48:9a:bd:70:2e:83:56:b4:
                    62:be:b3:f1:e8:c6:f4:08:9c:03:b6:15:cc:94:bc:
                    84:fd:2e:fb:18:e0:90:36:6d:39:5f:13:40:df:8d:
                    56:61:c5:ce:ea:c7:78:23:9f:c5:b3:7f:1f:2c:db:
                    17:5f:b8:e4:4c:41:b7:c9:22:02:38:18:1d:b5:80:
                    a9:b4:e3:c9:48:82:b8:56:19:a5:60:35:9c:55:0e:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C4:31:8A:C0:39:EE:61:1C:3B:2B:76:1A:C7:ED:49:70:88:4A:86
            X509v3 Authority Key Identifier:
                keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:07:3e:0f:99:78:81:55:f6:ef:b4:ca:ee:b8:d5:27:18:d1:
         cd:eb:ce:fe:63:fb:f0:23:78:05:0c:a4:53:b5:c4:d6:94:0b:
         46:ae:d3:a3:86:f1:a5:7a:13:0f:7d:32:e1:86:9c:02:21:87:
         d9:04:69:69:ff:00:fe:8e:cc:cb:0d:02:f8:5d:da:e0:f0:eb:
         f1:e9:9f:36:39:2f:81:c6:c6:1c:3c:01:30:56:84:b2:d0:fc:
         cd:53:02:6f:97:bc:f8:4f:18:7b:19:ca:86:48:25:11:34:21:
         a2:57:81:36:d2:5c:37:c2:87:de:e4:b2:8e:be:fc:2f:b4:0b:
         79:4e:a1:4c:ca:a6:fb:86:9f:7e:b1:88:31:4f:16:e3:a2:80:
         80:35:89:ad:cc:29:0f:75:67:b3:16:1f:08:0c:fe:af:4b:08:
         65:a9:d5:fc:d3:ad:70:f4:c3:ee:3b:a5:25:d7:ed:79:a7:23:
         68:0c:fa:68:16:1a:22:75:20:62:08:74:75:1c:a1:c0:0a:55:
         94:89:84:95:f1:19:4b:2d:56:53:1e:1a:db:fe:1a:3b:d3:1b:
         ef:5c:bf:cb:c7:a6:47:eb:d7:21:eb:be:03:83:1c:21:b6:d2:
         63:12:45:f8:5b:42:5d:30:e2:a1:ca:9e:02:52:7f:c9:bd:55:
         c5:4f:27:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 02:35:08 2025 by rpki-client