This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
File:                     1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json)
Hash identifier:          lw0jaa3Nns6Sexu564jlZ4EQLuFzFqxRrtbGBpTTCEE=
Subject key identifier:   3F:D2:F1:D3:E3:5A:F0:54:02:43:18:8E:33:D1:C5:F0:BC:2A:9B:35
Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
Certificate issuer:       /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Certificate serial:       1016
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
Manifest number:          100D
Signing time:             Thu 18 Dec 2025 17:17:11 +0000
Manifest this update:     Thu 18 Dec 2025 17:17:11 +0000
Manifest next update:     Thu 25 Dec 2025 17:17:11 +0000
Files and hashes:         1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: 92ZeYnQKIajrTq9YNhY33Ryj54XjJNB+2M+9tELH4Uo=)
                          2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: vKLtsTjRDQmvaoDy2+JZ+X/edFfE0cROOj6FdGkYWZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4118 (0x1016)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
        Validity
            Not Before: Dec 18 17:17:11 2025 GMT
            Not After : Dec 25 17:17:11 2025 GMT
        Subject: CN=69443717-e799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:0c:fe:00:06:0b:ce:39:80:d3:e9:75:f4:
                    bf:a6:0c:82:dd:37:85:f5:14:d1:5b:e4:77:e9:53:
                    bc:c7:83:a0:02:57:07:99:01:bd:18:d8:e6:94:ec:
                    10:7a:1c:26:08:44:63:7a:99:72:91:7b:13:71:16:
                    55:d5:1c:3e:98:45:b9:7c:c0:dd:27:df:cf:ce:87:
                    78:e6:0e:48:4f:57:d6:bc:b6:b7:d8:4f:65:b1:f5:
                    d6:d5:4f:6d:5d:61:0d:c1:01:2f:c5:09:19:11:44:
                    54:f6:bc:48:48:db:4d:bb:03:fb:db:c6:aa:c1:0c:
                    e5:54:a7:86:f4:d4:54:ee:70:7d:fb:ae:19:2e:ed:
                    10:4b:ae:7e:71:e5:17:a4:6e:63:81:5b:48:eb:13:
                    0e:11:fe:88:13:19:ae:80:94:fc:eb:0a:4b:c3:ff:
                    e9:03:1a:23:2e:11:19:dc:a3:d2:a0:5a:e2:ec:f3:
                    a2:25:ee:38:2e:b5:67:b1:b1:4c:d9:39:6f:2d:d6:
                    06:6a:b0:ed:a6:66:d3:e5:ac:94:57:0f:b9:33:73:
                    4e:c6:f4:b0:f1:4a:1d:1c:2f:41:5f:e9:ac:cb:68:
                    45:89:74:35:36:f3:e6:d5:0d:cc:6f:eb:32:ca:cd:
                    a9:38:bc:da:9e:0a:43:3d:38:eb:35:7e:b7:f5:92:
                    ae:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D2:F1:D3:E3:5A:F0:54:02:43:18:8E:33:D1:C5:F0:BC:2A:9B:35
            X509v3 Authority Key Identifier:
                keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:cb:63:26:3b:79:a9:b4:79:6a:ae:94:37:4a:0f:84:83:7b:
         59:ec:02:7b:e6:74:9f:ca:ac:b1:ab:58:31:3d:05:94:69:5e:
         a1:b2:46:a2:62:39:0c:74:8e:47:f7:ad:76:58:f5:89:6c:13:
         d7:e6:b4:ee:87:65:f5:c7:c6:8c:19:ee:b3:1e:89:ba:ac:26:
         a7:8a:4f:1f:3a:44:88:25:57:01:66:e8:14:a6:6b:92:ee:de:
         18:ad:5d:45:a8:4b:5a:4d:12:3b:96:9c:ae:8a:d4:ac:52:77:
         9d:44:af:03:f7:49:6c:60:26:86:a2:89:14:be:4e:c4:9e:0e:
         1b:27:78:6c:54:33:61:b3:06:4b:1b:97:43:83:d2:b0:f8:d3:
         67:1f:af:b8:eb:75:47:4b:3e:6d:82:eb:f9:22:23:c0:0f:0b:
         b1:8f:56:2c:a6:dd:64:21:04:60:a7:82:b6:d3:0c:69:e0:2f:
         da:28:53:27:7d:6b:1b:03:3a:6e:32:99:7e:f7:9c:9c:8d:32:
         f5:ca:c0:df:1b:86:ea:f4:9a:ed:68:f8:bb:01:6e:c5:75:12:
         00:d1:9c:0d:34:45:6e:91:cc:b0:77:65:a6:0a:43:72:b4:85:
         a7:f7:4d:40:3a:c5:c2:27:2a:17:65:b0:99:66:e3:c2:4a:d1:
         6c:98:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:24 2025 by rpki-client