This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
File:                     SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json)
Hash identifier:          EjeCmCf9UKSAw8B34s/OnPGrYLcwywztMQ2FUa0HuG4=
Subject key identifier:   B5:28:01:61:82:74:A5:AD:85:47:9E:5E:91:C4:9A:8B:26:B5:F4:11
Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11
Certificate issuer:       /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
Manifest number:          0135
Signing time:             Tue 23 Dec 2025 03:33:54 +0000
Manifest this update:     Tue 23 Dec 2025 03:33:53 +0000
Manifest next update:     Tue 30 Dec 2025 03:33:53 +0000
Files and hashes:         1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: xBJ7P/DhxCaFcNhS/O87SylXyATtoYSKT6PtvLlE3CM=)
                          2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: eodiFGpIfsgXUXxslrRHT6wLB6egOaD+ezHH/eHicB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811
        Validity
            Not Before: Dec 23 03:33:53 2025 GMT
            Not After : Dec 30 03:33:53 2025 GMT
        Subject: CN=694a0da2-0d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:94:d0:27:c7:6b:c3:4f:91:8d:2f:7a:ed:
                    04:24:47:9b:f0:d7:6c:10:aa:ac:ab:8c:d3:75:c7:
                    4a:d7:db:17:e0:84:c3:4b:08:bf:f8:29:87:2b:e5:
                    cd:b6:af:99:f9:23:d3:26:6f:8d:d6:54:34:bb:04:
                    ad:db:8d:49:ae:fc:2d:99:3e:2d:6e:10:5d:57:28:
                    fa:fd:f0:b8:25:da:4c:e7:af:46:b9:fb:57:00:ab:
                    2c:66:30:63:f4:d2:b2:76:13:3a:ec:6d:34:7d:b5:
                    b6:6a:1f:87:49:df:5f:b9:7f:3c:e2:a0:11:58:24:
                    9a:e0:3f:81:dc:70:05:88:68:33:f4:19:68:32:f2:
                    07:bf:45:47:77:c1:72:30:e2:c5:84:40:c0:b8:50:
                    77:15:1b:b9:af:ae:5c:ba:bb:f4:64:a6:ab:dd:f5:
                    16:3e:93:3e:a0:6e:d5:de:f8:91:b8:91:10:96:ce:
                    55:1f:0d:20:ee:55:be:be:46:11:19:3e:61:28:62:
                    c3:7f:ca:69:7a:61:4f:24:29:b3:af:68:bf:ce:a4:
                    b4:59:61:dd:fa:a5:1b:b7:2c:4c:23:6f:f6:01:de:
                    cc:48:5d:20:77:7e:4d:61:8e:e6:0d:3f:2b:9b:4a:
                    30:d1:3a:0d:6e:68:1e:5f:f0:93:1e:7f:75:cf:8e:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:28:01:61:82:74:A5:AD:85:47:9E:5E:91:C4:9A:8B:26:B5:F4:11
            X509v3 Authority Key Identifier:
                keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5c:df:8d:87:f3:76:94:23:84:60:a1:83:33:68:f6:38:be:
         81:2d:e0:a7:ea:4d:06:f8:10:70:e2:56:23:13:6e:54:a0:40:
         a3:1a:b3:11:ef:58:cc:d9:42:1f:20:55:b0:ad:12:47:dc:16:
         20:8c:cc:e2:fb:be:62:99:55:0d:db:a4:45:e3:82:17:26:cf:
         1a:22:3c:90:32:bd:aa:73:69:10:36:03:75:77:c6:38:5c:d2:
         ee:4c:ea:23:b3:c4:7e:6b:7c:1f:9e:b8:66:ca:b5:b9:e7:77:
         99:9c:b7:61:d7:17:36:1f:1d:b6:5e:91:66:92:69:81:c5:56:
         c7:5e:eb:16:43:e8:2d:02:0f:4c:7a:b1:d8:fd:11:9d:6f:39:
         b9:ae:29:0b:bf:e5:b7:8e:d9:5c:06:9b:d3:5c:56:c3:d0:13:
         12:6e:27:6c:1c:cb:57:11:1a:72:be:8f:3b:5b:74:06:ca:51:
         40:38:d8:32:af:88:d3:ba:15:0f:a2:08:78:86:2b:d9:af:99:
         67:12:c3:50:68:89:01:22:33:38:6b:6e:87:b9:0d:ff:a7:0a:
         6a:b3:69:8e:0a:a0:2e:c6:f9:3f:9b:64:88:22:f6:b0:57:54:
         79:71:e7:4b:22:30:19:ff:71:51:3e:e9:30:13:a6:ba:75:f6:
         e2:fc:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:50 2025 by rpki-client