This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
File:                     pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json)
Hash identifier:          4ndiC1wxsWdvtDrRTHptjP1KPY2eLkJ7hsiefVQvNmQ=
Subject key identifier:   9F:01:18:0F:82:41:D2:48:7A:70:3A:7A:3E:29:BC:B6:1C:E2:59:F7
Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD
Certificate issuer:       /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
Manifest number:          98
Signing time:             Tue 23 Dec 2025 05:22:02 +0000
Manifest this update:     Tue 23 Dec 2025 05:22:01 +0000
Manifest next update:     Tue 30 Dec 2025 05:22:01 +0000
Files and hashes:         1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: HDRdgPdSWdslmhwAo/0dPHNC92+HyBzBDVXMArM6iZA=)
                          2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VCQENYwleJhQRqqUILKpkln6ADdmKoB6HviWfuCE7i4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl
                          rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
        Validity
            Not Before: Dec 23 05:22:01 2025 GMT
            Not After : Dec 30 05:22:01 2025 GMT
        Subject: CN=694a26fa-03cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:12:cf:8f:fa:0e:9a:32:e0:3d:a9:89:b1:
                    d6:6f:d5:6a:45:fa:6f:d8:1f:72:51:9c:47:cd:a7:
                    74:ad:2d:46:05:30:5e:06:54:88:81:f9:c3:ed:8b:
                    8b:63:42:02:0b:f7:06:97:e1:be:a9:93:c3:61:d7:
                    4e:95:68:d3:2e:e9:81:63:a7:0e:ae:8d:24:eb:57:
                    5b:a9:7e:1d:b1:d0:cb:cc:bd:0b:93:7a:b8:5b:cb:
                    5f:f9:12:b7:e2:8b:95:90:59:eb:cf:80:32:45:d0:
                    ec:e6:03:61:3c:4f:e2:3d:f1:33:18:4e:c9:90:09:
                    52:17:df:3e:b7:40:0d:6f:d1:34:dc:b1:89:03:2e:
                    49:fc:df:a4:0c:5e:5f:cc:ef:b1:06:fc:e5:03:a4:
                    e8:61:7c:22:76:8b:e6:c6:94:dd:79:f5:07:3d:b3:
                    df:e0:37:b7:60:d5:fd:86:4c:96:c2:18:66:57:42:
                    bf:bc:15:ff:db:de:e5:d2:6b:cb:9e:39:e2:9d:e9:
                    4a:e9:b7:49:64:a9:9d:f9:86:5d:ab:5a:b4:30:7e:
                    27:f7:6e:bf:30:6e:e8:1f:d6:25:23:cc:18:ca:d4:
                    38:ea:ae:69:66:52:17:e2:88:ca:b8:fb:5a:ca:c4:
                    25:7e:c2:2e:9c:75:9c:4b:5a:19:f8:75:44:5d:a0:
                    27:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:01:18:0F:82:41:D2:48:7A:70:3A:7A:3E:29:BC:B6:1C:E2:59:F7
            X509v3 Authority Key Identifier:
                keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:61:89:a2:0e:a7:a6:12:26:ad:5c:b1:c8:e9:f6:d5:c8:e0:
         ce:7f:99:dd:cb:15:3e:a9:c4:a0:f9:15:73:b7:33:0b:10:33:
         5e:41:4a:f9:c3:05:47:99:a6:bd:a2:7c:f8:d8:53:64:6e:ba:
         7b:09:45:50:06:e3:91:92:83:f4:38:96:3c:a9:e6:13:15:33:
         bd:ac:27:71:af:f4:35:d5:34:c0:2b:cb:ea:1c:db:ca:b1:37:
         f5:47:26:5e:aa:f5:93:aa:71:c1:75:da:ed:4d:7d:26:44:15:
         85:09:27:f3:d2:a5:29:b4:75:d9:c9:92:2b:a1:f6:bd:e4:34:
         17:f9:4a:e5:1d:e3:2e:f6:02:04:b4:ad:6e:c1:76:eb:da:67:
         2a:21:bb:06:ef:48:e7:68:93:09:ed:79:b0:f3:11:bc:73:f3:
         99:47:69:55:40:a2:e2:ab:5f:f3:e8:bf:e7:bf:73:72:34:f6:
         ae:9a:14:29:e7:2c:1e:92:55:0b:d1:3b:b7:22:48:ed:9a:f8:
         47:55:5d:15:29:57:c9:3e:9a:0d:ae:82:82:16:e6:bc:00:9b:
         fb:ac:a1:2a:d9:bd:2e:c8:cd:a7:b2:cd:4e:69:c4:cc:ff:d6:
         dd:9c:93:c2:79:13:ea:64:57:be:e5:a7:87:82:29:c5:39:3a:
         eb:35:ea:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:18 2025 by rpki-client