This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
File:                     AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json)
Hash identifier:          uM1TL8tJ2ViI8y+FpZK4Bw1AJ6FdUv5rGJhJwMgH9ao=
Subject key identifier:   5A:F2:96:74:E2:93:64:F0:1F:5E:5A:A5:6A:97:AD:4D:2B:76:74:04
Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4
Certificate issuer:       /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
Manifest number:          010E
Signing time:             Tue 23 Dec 2025 03:59:25 +0000
Manifest this update:     Tue 23 Dec 2025 03:59:24 +0000
Manifest next update:     Tue 30 Dec 2025 03:59:24 +0000
Files and hashes:         1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: 02PgjCtS3h3GD9UXdpdIPCGuxWkHnwH3Dvlye7hFG4E=)
                          2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: NhOdHEmUoQd5YvUf9TabAJ2MpFyvN1YFKpx5g77iQO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4
        Validity
            Not Before: Dec 23 03:59:24 2025 GMT
            Not After : Dec 30 03:59:24 2025 GMT
        Subject: CN=694a139d-f0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:86:1e:27:c9:2c:67:45:64:78:12:ec:e8:
                    7f:e2:ae:f1:f0:ff:7f:6c:ae:e2:1a:6a:53:5b:ec:
                    c9:71:4e:f9:93:dd:79:aa:07:64:cf:92:22:78:34:
                    dd:e7:0a:31:6e:c9:26:3e:c6:55:8e:55:88:01:d4:
                    e9:10:78:e6:89:87:cb:34:df:fe:33:8b:e3:72:38:
                    d3:d2:43:d7:09:49:2c:47:95:df:9f:92:49:0c:b8:
                    f3:6b:3b:19:45:7c:e5:35:d5:e2:9d:49:48:f7:26:
                    f9:2c:35:7f:ce:02:96:cc:57:19:1d:08:2a:ca:87:
                    8c:59:f4:22:18:6c:7f:01:8d:d8:a1:62:b5:9b:11:
                    e1:93:ad:45:17:f2:cd:29:d5:d4:da:21:d9:aa:7b:
                    29:7d:5c:d9:39:5e:b0:ee:0c:8a:bf:71:42:0a:63:
                    8d:38:23:fc:94:97:bd:3f:b0:9c:4a:92:c7:94:f0:
                    2d:cc:68:05:10:ce:53:f6:d4:78:e9:85:20:f5:51:
                    e3:18:09:ad:b8:17:c0:ce:2d:bd:a6:b0:f2:97:4e:
                    0e:26:e1:66:ea:ac:8c:7a:d4:48:bf:c8:1f:34:17:
                    48:7e:43:aa:57:6b:46:9e:18:fd:86:07:2c:d1:96:
                    85:84:91:ac:30:93:92:2a:37:17:0a:b1:4e:cd:6d:
                    54:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F2:96:74:E2:93:64:F0:1F:5E:5A:A5:6A:97:AD:4D:2B:76:74:04
            X509v3 Authority Key Identifier:
                keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:86:ad:31:04:ae:3b:68:6f:1b:64:f4:1c:c0:74:b1:44:fe:
         b5:0b:80:ee:d6:dd:21:14:b6:b4:b2:29:5b:25:e9:8f:a1:0b:
         ed:59:3e:6d:69:87:65:ee:98:83:15:6c:df:20:53:cc:47:b7:
         eb:13:32:17:ed:21:f3:11:63:d4:33:a9:6f:ab:74:0a:b1:96:
         ff:19:30:5e:99:3f:f3:5a:5a:51:9a:eb:a3:42:ec:7e:f0:64:
         a2:fa:db:36:2e:d9:7c:dd:26:3a:8a:8e:a9:90:d0:9f:01:63:
         27:39:35:ac:17:02:21:0b:ba:d6:57:b4:9f:35:cf:bc:db:e4:
         09:44:51:ff:9a:96:62:d4:30:37:f3:ae:d8:df:96:06:a9:4a:
         dd:5d:bb:97:cd:44:33:b1:d0:33:34:bb:9c:3d:b7:5b:7e:32:
         7c:64:8e:d3:3f:d1:d5:7c:23:b6:d2:7c:9b:53:70:25:c4:a7:
         2a:05:44:97:a1:73:a9:9b:36:ec:57:62:66:de:06:70:ab:0b:
         cf:6f:7f:11:41:05:da:92:1e:5d:04:98:b2:93:11:fb:a3:78:
         f7:cb:bf:79:8f:54:35:21:d5:d0:cc:25:2c:41:6d:ba:16:5a:
         84:4e:c8:3d:2d:48:36:06:ac:16:48:ae:73:15:0a:9e:14:ae:
         fb:10:b4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:57:49 2025 by rpki-client