This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
File:                     -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json)
Hash identifier:          etA6LCoNStGWtRYx02Rk23DIkZaA746u5jBOLdxoUG0=
Subject key identifier:   A1:54:BD:43:A1:E7:C6:F1:61:64:71:79:C0:D8:DF:74:5F:D0:C4:2C
Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81
Certificate issuer:       /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881
Certificate serial:       079F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
Manifest number:          0798
Signing time:             Mon 22 Dec 2025 20:47:49 +0000
Manifest this update:     Mon 22 Dec 2025 20:47:49 +0000
Manifest next update:     Mon 29 Dec 2025 20:47:49 +0000
Files and hashes:         1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: kx1+pSSGdoyev/El8w9CgpxZIYI4ojKzgwGgUhK3/68=)
                          2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: fAeWrwprG7VOM279Y/8oithgtqvoI+DtUiT3hlYQPU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl
                          rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA053, serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881
        Validity
            Not Before: Dec 22 20:47:49 2025 GMT
            Not After : Dec 29 20:47:49 2025 GMT
        Subject: CN=6949ae75-013c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5a:f2:4b:bd:12:35:9b:c3:fb:ef:30:47:4d:
                    ac:67:4a:a4:24:02:69:8d:1b:33:17:e1:e1:1c:1d:
                    b9:ca:f2:26:aa:f4:8c:cb:c3:11:90:44:4d:f3:4b:
                    26:92:64:d8:37:ad:ab:d1:f6:fc:7e:08:0a:ea:b7:
                    ec:8c:68:aa:e2:93:a8:02:f8:84:89:14:18:35:20:
                    be:0e:6e:20:9d:f1:70:12:77:72:ce:41:e3:26:9e:
                    4e:18:55:17:02:c5:14:43:e6:a4:ce:f6:00:26:b5:
                    d7:5a:d9:75:5e:87:c3:ff:46:a2:f5:7f:cc:89:86:
                    fe:3b:01:83:bd:0e:34:d1:fe:49:a0:81:03:7f:39:
                    2e:2d:db:67:e2:5b:39:98:52:60:64:34:71:db:34:
                    96:05:1c:ca:79:3e:63:50:1a:3e:b1:95:61:b8:28:
                    b0:3b:07:79:75:ee:a5:44:f4:9b:58:5e:af:f1:b5:
                    9f:97:38:0f:16:8a:cc:b1:8c:af:5a:7f:ed:c9:e3:
                    6a:b8:c4:a1:3d:e9:35:b9:af:e9:2d:14:25:b2:50:
                    3c:fe:0e:05:a6:f7:03:17:22:5b:4a:8c:37:de:45:
                    f6:72:d7:54:b8:3d:81:b3:3a:38:04:76:21:d6:8a:
                    f4:49:1b:c4:51:b4:bd:b2:30:a6:d7:74:be:2d:05:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:54:BD:43:A1:E7:C6:F1:61:64:71:79:C0:D8:DF:74:5F:D0:C4:2C
            X509v3 Authority Key Identifier:
                keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ed:4f:24:60:d1:8c:56:2a:f8:a5:7f:3a:30:0e:35:24:93:
         a6:09:79:a5:10:ed:f1:d6:8a:07:b9:f3:f7:ed:5c:c8:33:4c:
         29:8f:0c:7d:06:22:4a:c3:63:6f:a2:54:d6:34:33:c1:b1:12:
         52:27:38:d6:bf:0b:dd:12:b5:6a:d3:22:f1:2d:6c:63:b8:0b:
         1d:9d:1c:fc:17:1d:56:02:83:55:72:7d:e3:af:1b:bf:f6:3d:
         9c:3b:13:ac:77:75:77:51:08:11:79:59:a4:d7:d3:94:a7:f3:
         5b:84:71:38:48:86:64:ca:c8:8d:6f:a4:24:b8:ef:56:61:74:
         dc:cc:f6:d0:e0:a5:c0:74:4e:d3:d8:68:37:e6:67:eb:db:a0:
         5c:7d:3c:8f:51:7f:c7:85:4d:a6:cf:c3:07:6b:01:1f:08:e9:
         ca:40:6d:51:ee:05:9e:4c:e4:62:40:ba:01:6c:f1:2b:2e:13:
         08:9a:dc:46:26:77:6b:44:53:27:bf:87:99:45:c7:14:53:6d:
         d8:a6:f8:35:b1:27:b6:ee:f4:6c:2d:20:5d:d2:b9:57:f9:0a:
         ee:4b:f0:af:a0:77:ed:67:95:53:6f:4e:00:9f:7d:ce:5f:13:
         be:56:6a:85:e4:61:fd:aa:f7:58:67:54:a5:00:bc:aa:5b:3d:
         0f:50:c9:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw
NzhGMUU4ODEwHhcNMjUxMjIyMjA0NzQ5WhcNMjUxMjI5MjA0NzQ5WjAYMRYwFAYD
VQQDDA02OTQ5YWU3NS0wMTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhVryS70SNZvD++8wR02sZ0qkJAJpjRszF+HhHB25yvImqvSMy8MRkERN80sm
kmTYN62r0fb8fggK6rfsjGiq4pOoAviEiRQYNSC+Dm4gnfFwEndyzkHjJp5OGFUX
AsUUQ+akzvYAJrXXWtl1XofD/0ai9X/MiYb+OwGDvQ400f5JoIEDfzkuLdtn4ls5
mFJgZDRx2zSWBRzKeT5jUBo+sZVhuCiwOwd5de6lRPSbWF6v8bWflzgPForMsYyv
Wn/tyeNquMShPek1ua/pLRQlslA8/g4FpvcDFyJbSow33kX2ctdUuD2Bszo4BHYh
1or0SRvEUbS9sjCm13S+LQXznwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFUvUOh
58bxYWRxecDY33Rf0MQsMB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz
NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTA1My9BRkI2QkY3NjMzNDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxO
VDd2eUdJVzlyMjBIang2SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCI7U8kYNGMVir4pX86MA41JJOmCXmlEO3x1ooHufP37VzIM0wpjwx9
BiJKw2NvolTWNDPBsRJSJzjWvwvdErVq0yLxLWxjuAsdnRz8Fx1WAoNVcn3jrxu/
9j2cOxOsd3V3UQgReVmk19OUp/NbhHE4SIZkysiNb6QkuO9WYXTczPbQ4KXAdE7T
2Gg35mfr26BcfTyPUX/HhU2mz8MHawEfCOnKQG1R7gWeTORiQLoBbPErLhMImtxG
JndrRFMnv4eZRccUU23Ypvg1sSe27vRsLSBd0rlX+QruS/CvoHftZ5VTb04An33O
XxO+VmqF5GH9qvdYZ1SlALyqWz0PUMlB
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:16 2025 by rpki-client