This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
File:                     RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json)
Hash identifier:          tHjopNYU7nqbuJgdpitbFrzrRBkAiJhqVaae9k8z17s=
Subject key identifier:   07:AF:E3:EA:9C:AB:26:E1:7B:3B:E5:A8:42:1A:15:1E:C9:95:E3:0C
Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
Certificate issuer:       /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Certificate serial:       050C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
Manifest number:          0504
Signing time:             Wed 24 Dec 2025 15:42:36 +0000
Manifest this update:     Wed 24 Dec 2025 15:42:36 +0000
Manifest next update:     Wed 31 Dec 2025 15:42:36 +0000
Files and hashes:         1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: EHvEVCyn70Xu4/i8QPO/YWSjarpODuSL0JXhvIXaw14=)
                          2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: mHbYCPxnBj3PWJdh7qbfDGDK73T1pf2kWSW1uT2gXIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
                          rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292 (0x50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
        Validity
            Not Before: Dec 24 15:42:36 2025 GMT
            Not After : Dec 31 15:42:36 2025 GMT
        Subject: CN=694c09ec-9186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:7a:99:25:ec:1a:db:9f:88:a6:b4:ab:01:
                    89:9b:be:0b:8f:f2:cb:6c:12:19:b3:9e:ff:fa:3e:
                    75:96:e2:f9:64:fa:89:63:bd:e4:b5:3d:1e:81:c6:
                    3d:cb:c5:75:ac:05:4e:2a:bb:d9:26:4f:42:b0:b5:
                    f6:82:43:c8:44:2b:47:96:0a:1d:b1:62:0e:80:c4:
                    fd:37:d7:48:04:b3:7e:85:ed:76:4e:90:81:c9:c3:
                    69:32:0f:8b:a4:3f:5a:bc:a9:3f:e5:2b:26:27:bd:
                    35:22:d3:f2:5c:c2:08:ba:4b:fa:2e:bb:8f:0f:d3:
                    76:95:d0:a0:77:08:e8:17:54:af:d0:0e:ad:af:95:
                    dc:54:a5:d4:e2:46:81:a9:f0:2f:60:a2:52:72:f6:
                    f7:04:2f:a9:86:94:89:31:b5:27:14:f9:90:b3:61:
                    e6:d1:ee:96:de:bd:25:63:f2:30:05:46:32:ad:da:
                    23:1e:eb:d4:eb:39:a3:f5:2a:cb:34:bb:93:d1:80:
                    1d:76:3b:c2:76:c8:44:bb:9a:53:9b:0a:af:23:b4:
                    65:0f:2c:09:e9:43:9a:e9:4a:50:98:e4:f0:4f:62:
                    71:fe:fd:73:ee:16:ab:39:f7:7b:b3:b4:b9:0b:39:
                    0a:42:bb:ae:9a:5a:63:36:66:91:d2:6b:89:02:50:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AF:E3:EA:9C:AB:26:E1:7B:3B:E5:A8:42:1A:15:1E:C9:95:E3:0C
            X509v3 Authority Key Identifier:
                keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7d:f6:9d:70:42:ed:31:c0:62:a5:09:2d:d4:eb:22:4b:f8:
         fe:8d:81:6d:ec:94:aa:9c:91:aa:67:54:b2:79:7b:ae:ec:ae:
         e9:3c:ef:39:b6:3c:99:15:41:6f:42:74:d9:e7:85:30:43:08:
         c1:10:af:a8:f6:46:ff:6d:d4:f7:ce:c4:2d:be:45:b9:4d:4e:
         c7:6a:b8:77:e7:cb:68:68:2b:93:99:27:b2:92:ae:3c:16:c1:
         41:aa:3c:0d:ba:b1:ea:4d:2f:27:53:10:c7:7f:48:69:8e:f5:
         05:d2:f1:57:dd:81:8e:c8:c3:f8:4e:e5:f3:dd:92:94:09:80:
         55:4b:3c:f3:a0:fc:78:55:b7:64:16:97:40:bb:ae:45:e4:dd:
         09:10:39:05:c8:b0:51:a8:dd:b6:ec:76:43:86:f9:77:26:ff:
         d7:2f:05:13:f3:c0:19:2f:99:53:e5:98:38:e7:1d:32:3a:98:
         7a:73:e1:e6:79:8a:10:d0:30:55:90:fb:0f:d5:15:4b:0f:d7:
         0c:0f:ed:63:a4:9a:74:b7:87:16:53:ea:0b:b9:7e:58:48:4e:
         67:bd:34:59:f7:6d:ee:c1:6c:f4:68:e2:68:7f:75:00:cf:a7:
         6f:67:d9:aa:ed:9c:94:40:ac:33:20:12:a4:46:89:2b:07:af:
         c5:21:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:16:32 2025 by rpki-client