This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft
File:                     rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft (raw, json)
Hash identifier:          LDkxte+xyw71nXuXnzg0xCw19FXx7e5WHUTp0wM6E9c=
Subject key identifier:   29:95:62:AD:91:7D:F5:34:9C:32:BA:56:91:BE:4D:DA:EC:B8:98:E7
Authority key identifier: AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38
Certificate issuer:       /CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038
Certificate serial:       0BB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft
Manifest number:          140F
Signing time:             Mon 22 Dec 2025 18:29:37 +0000
Manifest this update:     Mon 22 Dec 2025 18:29:36 +0000
Manifest next update:     Mon 29 Dec 2025 18:29:36 +0000
Files and hashes:         1: rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl (hash: ArbVdETA/Xl7UydsOomZ6cxhfAhHefJqB2puzD3GEl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl
                          rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2992 (0xbb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91580A1, serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038
        Validity
            Not Before: Dec 22 18:29:36 2025 GMT
            Not After : Dec 29 18:29:36 2025 GMT
        Subject: CN=69498e11-c8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:ca:71:89:36:bf:85:60:02:03:ae:ef:f1:
                    ca:96:a9:33:ec:1e:c1:70:6a:7d:d8:75:09:c3:be:
                    5f:5a:15:9c:8a:27:f6:2c:12:70:b1:00:6b:44:43:
                    1e:f2:76:d6:0e:3c:8e:7c:4c:76:25:97:74:6b:b7:
                    e3:32:ed:cb:ab:ac:1c:3c:6d:9e:9b:5c:69:b5:4e:
                    ab:05:f2:a9:88:ab:45:41:6d:3a:fd:11:9c:aa:2f:
                    4b:10:0f:d6:09:14:ee:dd:9f:e7:eb:00:d5:ae:9c:
                    7a:83:33:e6:64:ae:7b:d8:64:c9:29:3b:ee:b8:8f:
                    43:07:cc:51:86:43:e0:5f:7b:97:49:5d:cf:63:6a:
                    5a:40:1f:a9:cf:41:67:11:ca:07:d4:0d:d7:d7:16:
                    fa:e2:88:92:dd:1b:65:58:be:5e:74:ba:c6:71:20:
                    f5:e0:b6:d6:82:cc:55:92:e4:56:19:e6:0b:76:36:
                    20:d9:eb:f8:45:56:aa:4c:f0:82:2a:93:4d:29:90:
                    78:97:04:1a:84:e6:d2:35:b4:6b:7a:e2:b9:38:6a:
                    a4:68:41:24:7f:26:35:37:f8:39:5d:81:43:c8:5b:
                    1a:12:98:f4:04:5a:d1:17:32:ba:40:90:e2:52:79:
                    c0:c2:a7:8c:9d:ed:b7:60:6d:11:b4:77:cd:a9:37:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:95:62:AD:91:7D:F5:34:9C:32:BA:56:91:BE:4D:DA:EC:B8:98:E7
            X509v3 Authority Key Identifier:
                keyid:AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:de:87:70:7b:a4:6b:40:36:df:d3:99:4c:f3:c1:38:53:9c:
         d7:36:ec:50:87:4e:17:02:c3:f6:4e:da:1a:02:d3:b4:82:5e:
         13:73:01:1d:7f:89:e0:1a:63:12:8f:0d:27:1a:a2:65:7a:af:
         1f:04:53:e3:15:1f:b3:29:c4:c9:34:02:63:ec:fe:96:f5:19:
         3f:1c:61:0a:cd:0d:79:dc:53:c4:ce:1b:e9:4e:c6:29:f1:62:
         74:0b:df:a2:4c:42:63:0f:c2:91:08:1b:ea:b0:71:b9:32:57:
         0a:9f:b0:ca:01:d8:77:ac:c1:d4:5a:a2:76:29:88:0e:ce:09:
         67:7a:66:8d:9c:dc:fd:ee:a7:69:ad:f0:35:73:24:4c:db:f8:
         df:2a:b6:ff:e9:73:c8:48:48:1a:b3:59:63:a1:d0:f2:a5:49:
         b6:73:41:f0:f3:c9:ea:f6:75:12:99:91:79:c0:04:50:00:55:
         1c:c0:05:b9:51:e4:ab:df:71:1e:d2:0e:4f:21:de:a6:83:07:
         57:2f:36:11:b4:ec:8d:c5:52:2e:1d:fc:7e:df:88:a1:bb:90:
         b1:d2:8a:d2:b5:d0:3f:cb:53:46:1c:5c:8b:90:6e:63:5e:2d:
         03:98:08:67:90:2f:3c:6d:e6:10:8c:6a:1c:d9:78:2e:da:85:
         b2:af:3e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:24 2025 by rpki-client