This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
File:                     9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json)
Hash identifier:          njpR9oRPbXbP7yvV6uWv9783kVhRuxAAkPqMWjyCGpM=
Subject key identifier:   48:A3:17:CB:25:91:7D:27:74:8E:B6:2F:FC:E4:0B:D1:8B:84:4B:1E
Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
Certificate issuer:       /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
Certificate serial:       0B5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
Manifest number:          0B4C
Signing time:             Mon 22 Dec 2025 18:42:59 +0000
Manifest this update:     Mon 22 Dec 2025 18:42:59 +0000
Manifest next update:     Mon 29 Dec 2025 18:42:59 +0000
Files and hashes:         1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: vMKP0lQYtKjC7Z7dVkPlQyZ4CQIw6YcbFlw5o117UwY=)
                          2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: E1bxGJRzvWJL6Q5+3Ky9YwyG8DB0xwoHtSTdM2JXdjQ=)
                          3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: 6puo5654uIKkHM+m/KHN4NrZ20YMvKyYbtg3n+CoQPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl
                          rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2908 (0xb5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
        Validity
            Not Before: Dec 22 18:42:59 2025 GMT
            Not After : Dec 29 18:42:59 2025 GMT
        Subject: CN=69499133-4adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:ba:9e:64:1c:29:9c:2c:46:5f:e0:d7:82:
                    df:7c:19:1b:27:69:a2:2f:c0:3d:c0:46:fa:6d:41:
                    09:5f:b4:10:64:63:1b:d3:45:6a:1d:2c:54:58:bd:
                    7b:77:05:50:62:38:e4:4c:82:ba:ae:7c:ff:51:b5:
                    01:58:ed:6b:0e:2a:d3:72:e6:c0:c7:b8:1b:77:a4:
                    bc:80:52:1c:07:61:b6:d3:b0:8c:69:a6:ed:f4:6d:
                    7f:b6:bb:d6:5f:d3:8d:5f:aa:cd:80:21:15:24:02:
                    3c:18:50:32:d7:c7:84:59:c2:ad:4f:f7:7f:75:c1:
                    38:04:14:d9:6c:27:c8:8d:a3:02:c7:6d:cf:11:d6:
                    1e:f5:e3:c7:8d:0e:cb:3a:06:a9:5a:cd:7c:73:f6:
                    b1:57:a9:a8:74:4b:dd:90:90:1d:8e:74:23:ce:a2:
                    30:cc:45:74:dc:9f:36:49:63:1c:59:d0:5f:a2:8e:
                    79:bf:82:1c:73:75:d8:aa:1d:b5:de:13:b7:50:56:
                    ce:d2:1e:0c:6a:0c:b0:cd:75:a7:9a:8a:01:70:e9:
                    b4:56:2f:fb:8b:2c:9b:e4:85:6b:b6:33:aa:0f:e2:
                    b8:69:9f:db:08:db:ac:e8:57:39:58:f8:b2:ac:93:
                    3e:de:c8:38:ca:db:4e:00:88:a2:7d:38:fb:fb:f9:
                    c4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A3:17:CB:25:91:7D:27:74:8E:B6:2F:FC:E4:0B:D1:8B:84:4B:1E
            X509v3 Authority Key Identifier:
                keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d3:9d:da:b2:05:5d:01:5f:de:86:d2:43:40:65:d6:54:ff:
         64:72:05:06:1d:57:a5:22:c3:f6:d9:43:26:30:6c:d4:79:9c:
         36:ef:0e:c1:bf:77:bf:ed:6b:1b:2e:4a:1e:58:ee:23:07:ed:
         b1:b4:bb:80:7e:fa:00:5e:a0:e8:da:82:9e:80:46:e4:c1:86:
         cf:94:f4:6c:ba:8a:93:51:33:a7:b9:70:71:38:63:80:f6:fd:
         d9:4d:31:67:7b:28:83:4f:0d:91:25:db:33:97:7b:08:4e:f8:
         e8:99:46:37:6f:d0:fa:c6:ec:c1:43:c2:1c:df:ff:c1:f7:5a:
         c8:6b:9e:82:02:4b:56:f7:00:64:f8:22:1b:93:9f:27:4f:59:
         27:86:44:a8:b2:df:81:59:8c:91:f5:50:61:06:45:39:9d:77:
         fe:fb:97:ff:8c:63:6b:31:41:e6:29:81:26:4b:a6:95:e2:24:
         e0:c5:e2:1b:60:09:d1:d1:c2:0c:f5:81:a7:d3:d6:00:db:70:
         48:24:12:76:27:5b:60:01:0f:63:53:61:ec:e7:10:79:6e:19:
         ff:91:ab:d6:d7:f9:b6:43:e1:e2:65:5c:a6:3d:cd:73:5f:04:
         f2:cd:0e:46:16:c4:08:33:27:22:8f:bf:31:f6:05:db:0f:1c:
         4d:8c:1a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:34 2025 by rpki-client