This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
File:                     9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json)
Hash identifier:          G1mvGouu6P94TYpMduRPXquKztz4se4mDLbAyZEJFHM=
Subject key identifier:   25:ED:39:E4:C3:A1:32:9F:6D:EB:F6:DF:05:41:CA:E5:26:12:82:72
Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Certificate issuer:       /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
Manifest number:          01DF
Signing time:             Tue 09 Dec 2025 01:05:52 +0000
Manifest this update:     Tue 09 Dec 2025 01:05:52 +0000
Manifest next update:     Tue 16 Dec 2025 01:05:52 +0000
Files and hashes:         1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: NTYqXWkzs6U1tUGBJGRZ6ZRpze6T/EeOkJ4sRkgNxSw=)
                          2: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: JS7S95pwMMq4VJCG+rsKP1S3MhXCo+P6oTggAIuVIcE=)
                          3: 57CB703EBCED11F0A3B2C039C4F9AE02.roa (hash: MH6wsYDU+7B4vBy0zb2eprwe8/XNCjBzLMel9f7LB3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 01:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
        Validity
            Not Before: Dec  9 01:05:52 2025 GMT
            Not After : Dec 16 01:05:52 2025 GMT
        Subject: CN=693775f0-1de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:b3:ef:8f:d1:7d:5c:0f:61:0d:bc:89:33:
                    1d:17:ab:69:9a:2d:22:11:5b:28:d5:08:57:aa:08:
                    b2:42:70:97:79:60:ad:08:ce:74:f2:d8:e1:7f:90:
                    dd:a4:29:92:23:91:55:d7:a6:f3:14:22:eb:ca:9c:
                    21:36:31:19:85:28:03:2a:ef:16:62:09:b4:93:32:
                    45:e5:a9:03:69:b0:07:27:29:2d:34:b2:6a:77:c4:
                    94:bf:bd:33:e2:c9:c8:65:1d:cd:c1:62:cd:ac:27:
                    11:83:0b:a1:79:f6:26:a4:39:33:59:23:2b:fa:51:
                    d7:84:b1:ae:10:53:5a:2f:9a:00:3a:af:51:c2:de:
                    60:1e:14:de:24:0f:59:51:f5:88:20:bd:ac:95:8c:
                    7f:cd:c4:f6:5e:43:47:e3:32:b3:4f:49:03:d7:e8:
                    6d:e6:ad:7c:34:85:ae:b2:d5:79:d3:df:4e:fd:56:
                    82:7d:83:69:05:c4:1b:ba:3b:66:f9:38:ab:a3:bc:
                    3a:a0:65:75:7b:fc:b8:12:ef:b8:7b:63:67:c0:94:
                    89:d3:ea:9c:64:bd:63:36:c5:37:86:ab:2c:cd:06:
                    9b:25:47:72:33:0b:30:a4:05:b2:0d:31:a9:60:84:
                    c6:2d:7f:f8:ec:d2:07:6e:40:ec:68:15:1a:c6:c3:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:ED:39:E4:C3:A1:32:9F:6D:EB:F6:DF:05:41:CA:E5:26:12:82:72
            X509v3 Authority Key Identifier:
                keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ff:fc:08:b2:a2:cd:61:78:5b:46:32:34:83:8d:61:dc:2f:
         53:1e:03:ff:5f:70:95:a3:81:72:33:7b:00:c0:87:4a:04:b9:
         75:76:ad:83:9e:6f:e2:f2:7a:8a:1a:0a:6e:f3:c3:43:a8:a8:
         39:28:84:c0:7d:e3:67:fb:be:de:2e:eb:cd:b5:09:a5:02:a0:
         37:e8:0f:4a:5e:cd:08:a3:42:40:e7:e7:a5:fb:38:99:52:51:
         49:12:45:31:d0:43:3d:da:73:2a:42:af:94:d3:59:e5:8a:21:
         62:43:bc:e1:69:b4:7e:26:b0:a2:8a:89:c0:7d:97:c7:da:e1:
         95:1f:8d:00:b6:51:47:77:50:0d:0d:fc:c0:dd:53:10:0c:6a:
         c8:a1:a0:4d:6f:9a:c2:16:a1:d6:bd:49:62:3c:48:58:19:0e:
         e5:a4:4d:04:30:21:77:bb:6f:54:05:97:d9:3e:06:3c:ae:c5:
         6e:44:8a:1e:74:6b:fd:18:37:e6:7d:97:2f:2e:5b:62:1e:65:
         97:a8:4d:7f:44:d3:3d:09:d4:e2:f7:5a:fb:d0:2c:f1:60:f6:
         e0:d2:6f:cc:f0:dd:07:d6:c9:53:0f:cc:fa:48:22:00:fa:8a:
         95:e0:5a:4c:54:be:2b:4b:60:a7:66:c4:f6:6e:70:c4:22:1f:
         38:26:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 16:29:03 2025 by rpki-client