This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
File:                     RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft (raw, json)
Hash identifier:          u5eee+Ln+Qvw85UCl9jx93E4ric8EkGvDf+TDVzfbtM=
Subject key identifier:   6E:EE:35:AD:23:C8:4A:AE:E3:67:49:EE:0D:1C:8A:64:C2:01:0D:C1
Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
Certificate issuer:       /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
Certificate serial:       059E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
Manifest number:          0593
Signing time:             Mon 22 Dec 2025 22:21:31 +0000
Manifest this update:     Mon 22 Dec 2025 22:21:31 +0000
Manifest next update:     Mon 29 Dec 2025 22:21:31 +0000
Files and hashes:         1: RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl (hash: PWTuTHwCBV5waopGgS4bdeNirZytacEROsUl9wwQMcA=)
                          2: D249CE5EFE8911EBA7BEB564C4F9AE02.roa (hash: po2KMn6zY0kiDIXMsK+Ya6gGcbuzyqGCNmpP7nPOhRQ=)
                          3: 0006ED8263DD11EC9A50031BC4F9AE02.roa (hash: PgPrbR0fCfUw8BhUQ7eR3PB9T8RP6QKcZtXwflcH4Ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1438 (0x59e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982FB, serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
        Validity
            Not Before: Dec 22 22:21:31 2025 GMT
            Not After : Dec 29 22:21:31 2025 GMT
        Subject: CN=6949c46b-e2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:be:b8:19:60:ec:9b:7e:59:46:7c:57:db:d1:
                    ce:60:a1:5d:f3:74:83:68:a4:b5:47:ef:2f:71:ce:
                    6f:9d:7e:22:73:a5:e0:f1:26:6a:9a:34:1d:dd:1d:
                    3b:1b:67:78:df:35:57:3f:68:75:1c:29:0e:4b:e4:
                    c0:2b:f6:bc:3d:77:e6:10:44:e0:17:c7:be:73:ab:
                    be:c7:14:26:81:c8:60:c0:6e:6d:97:4f:d5:41:c6:
                    03:db:d6:b8:c9:a3:eb:c5:d8:d4:7a:87:60:57:e1:
                    99:b5:64:ce:94:28:79:06:33:41:6e:e2:9b:5c:bf:
                    9d:b9:1d:46:eb:32:74:19:82:30:26:74:ef:b2:73:
                    72:5d:39:d2:29:0e:7d:29:9d:ba:48:b4:d6:5e:1e:
                    f7:6e:f7:bc:25:b3:36:b3:f6:44:64:05:8c:a4:de:
                    5b:98:4d:62:17:d0:5b:10:83:8e:20:f7:fb:27:0e:
                    ba:02:b6:9b:f6:c0:6c:71:85:7a:9a:73:37:19:1b:
                    c5:93:e4:29:fe:71:12:50:b2:ee:d4:5c:95:a7:56:
                    9c:0d:f2:20:97:cd:f4:6f:8b:19:d3:aa:02:1b:e6:
                    7d:58:4b:b2:8f:17:7f:b3:4b:8c:db:83:55:0e:75:
                    67:20:30:f3:f9:e5:27:94:ef:15:64:72:85:9e:4a:
                    0d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EE:35:AD:23:C8:4A:AE:E3:67:49:EE:0D:1C:8A:64:C2:01:0D:C1
            X509v3 Authority Key Identifier:
                keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:5e:4a:0a:3b:49:a0:f9:0f:6a:9b:38:32:5a:14:75:c8:
         b0:26:ab:7d:4d:60:13:d5:52:b9:d8:d0:ef:8a:b6:07:97:9c:
         af:13:e7:83:cd:53:1c:7b:e7:03:af:13:c6:f0:d0:bb:49:8f:
         19:4c:68:7f:17:9a:94:84:33:4d:63:2e:da:5a:6a:49:e9:a1:
         c4:7c:75:64:ac:ed:97:4c:fc:07:e0:25:41:98:04:9c:c2:1b:
         c4:d8:c5:76:f9:d3:30:9b:2e:83:07:b1:78:4f:25:6b:14:30:
         26:64:33:8f:3d:1f:cd:a5:ac:cc:35:ae:5c:55:7f:2d:9f:00:
         3a:9a:a4:a7:8a:40:02:e7:84:c7:fc:5a:38:df:f9:a9:48:21:
         12:c8:bf:2a:1c:f4:72:75:2e:c8:17:8a:94:35:29:72:d8:ba:
         66:59:a4:90:28:72:6c:fc:7d:15:a9:d7:6b:18:e9:84:fd:97:
         06:09:c3:d1:83:66:04:d9:bd:9c:ba:35:4a:66:d6:b8:80:13:
         38:fc:3b:33:21:ce:55:82:7c:75:f2:3d:f0:7c:df:27:59:8b:
         ba:a6:e3:fe:79:1d:04:4a:6e:4d:d1:77:d8:93:99:f6:ab:23:
         96:b5:7b:42:32:78:3b:dc:32:62:4c:a3:16:2b:2d:52:de:b7:
         95:61:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:20 2025 by rpki-client