This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
File:                     rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json)
Hash identifier:          tEEJakinG2+u5z7ZcZBfdbiH9zV/SrglTf4KScSIIUM=
Subject key identifier:   11:4C:29:18:6E:6D:8B:46:6A:80:EB:2B:01:15:59:A6:AB:17:ED:53
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       0538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
Manifest number:          051F
Signing time:             Sun 14 Dec 2025 22:53:44 +0000
Manifest this update:     Sun 14 Dec 2025 22:53:43 +0000
Manifest next update:     Sun 21 Dec 2025 22:53:43 +0000
Files and hashes:         1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: ZP2M8wF7Dz02LpiA9dnseglVzkcsNvf8OMeyWlfxpDA=)
                          2: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: 0rs0STSm9B6q1ImRupSPhNQw8yrXD67mSzQRxhTWeyM=)
                          3: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: H8xjH5y20P1rOG3WSUPBDAJqjIZUNQTVo2FaxmnxQzw=)
                          4: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: XSnUK976UXwYHciWW5wccgOD7fOjMode6M1FzFFnvQ4=)
                          5: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: hGiilfSQIcgKH4NIdZJeXzdl+FpDj03CR4zzG/JcbXg=)
                          6: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: wwz7C2WhiFB/fPJcMxt1QlkPUOWQEV9jMcZeemu9/Kg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 22:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: Dec 14 22:53:43 2025 GMT
            Not After : Dec 21 22:53:43 2025 GMT
        Subject: CN=693f3ff8-760c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:79:69:15:35:fb:30:79:aa:a6:fa:ab:29:
                    44:6a:72:d2:79:6f:2d:63:6b:30:25:cd:0a:a3:19:
                    0f:ba:92:27:7c:85:5b:ec:fb:ba:0c:3a:b1:4d:fd:
                    df:c7:2d:7c:b4:eb:ae:c9:46:cc:6c:e4:0e:ec:ed:
                    e6:74:82:c8:40:2e:33:60:5a:9c:03:df:e7:40:a2:
                    3f:ae:1d:f8:01:7e:b2:06:fa:ea:89:68:0a:a8:06:
                    8e:11:47:07:23:26:87:eb:63:98:10:49:bb:6f:d9:
                    55:be:a3:b4:01:ba:2d:2f:81:85:ca:50:e9:ec:e1:
                    85:8f:fc:a1:90:fd:a0:7f:07:6a:72:c5:7e:0d:ce:
                    df:fd:ed:a1:7b:b6:87:a4:70:9b:4c:d3:d7:6c:11:
                    55:78:f1:20:14:7a:5e:70:72:73:f7:56:63:8b:95:
                    03:7e:3f:d9:53:ba:52:b5:df:59:dd:26:45:8d:08:
                    24:83:66:e7:ea:8e:01:47:e7:77:06:7e:74:95:93:
                    0a:ce:7a:a8:7f:a3:92:03:29:66:30:41:92:f0:ef:
                    f0:2c:9a:5c:e3:e2:8a:d4:a4:77:6c:a3:5b:2f:35:
                    c1:47:e9:21:86:85:2c:95:c9:60:fb:5d:48:e4:c5:
                    82:04:92:ca:6c:43:dd:c5:5c:80:b5:ed:0f:a6:dd:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4C:29:18:6E:6D:8B:46:6A:80:EB:2B:01:15:59:A6:AB:17:ED:53
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a9:ba:52:90:82:72:8e:f2:e2:86:ed:3b:49:75:62:4a:09:
         1e:78:ad:12:fe:ce:a1:1a:04:b6:28:9d:96:3c:89:fa:aa:3e:
         e1:41:9f:49:20:0c:16:94:59:58:7d:b1:41:18:15:f0:d9:f4:
         fb:7e:df:22:26:c9:00:36:70:4c:69:f4:0e:b3:a5:4d:0d:0b:
         16:e3:b6:61:67:e5:54:24:94:52:4b:5b:0b:68:ae:0e:ac:3b:
         51:3f:bb:72:6f:24:3b:ea:9c:8d:71:a7:41:4a:a8:1a:20:38:
         18:03:02:47:06:a6:83:9b:72:05:b6:d5:f7:ab:1c:30:74:f9:
         31:8b:5b:45:f3:87:77:3a:79:c6:96:dd:4a:72:3a:f6:e0:92:
         39:98:15:f1:c0:37:24:0c:36:ac:42:02:c3:7d:9b:09:b5:1e:
         c1:4c:f4:5d:c4:c5:79:6a:c4:fc:98:6d:79:1a:54:eb:65:3e:
         4e:7b:79:c3:cc:b6:37:64:c5:bd:c9:46:0a:be:34:51:b3:d2:
         23:87:3b:47:9f:72:ad:9a:b7:c5:00:81:67:27:5c:c2:d9:78:
         a1:8a:00:39:99:49:e0:32:8e:ad:e4:2a:fe:e8:4c:47:96:6a:
         97:19:78:2b:50:2d:58:9c:59:ff:ba:37:86:c4:38:9e:4f:fa:
         6c:de:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:43:16 2025 by rpki-client