This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
File:                     McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json)
Hash identifier:          lO9zdQ+fSnU8uQ5VIBt1dqDPwuo4f3xBAXczG7NV/rU=
Subject key identifier:   5F:9B:2B:E9:6E:92:AE:2B:53:58:7A:B6:02:B9:A9:5C:1B:30:D2:96
Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6
Certificate issuer:       /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
Manifest number:          01A1
Signing time:             Tue 23 Dec 2025 02:20:49 +0000
Manifest this update:     Tue 23 Dec 2025 02:20:49 +0000
Manifest next update:     Tue 30 Dec 2025 02:20:49 +0000
Files and hashes:         1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: P5zAoLv5eYNWThUlczYW7hNXZvRpoOuaOnh8A0NUhXM=)
                          2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: 2icqnjOM7NhkNWNRK/vV/u0TPESMuw0eja9A3sbJDHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C607C, serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
        Validity
            Not Before: Dec 23 02:20:49 2025 GMT
            Not After : Dec 30 02:20:49 2025 GMT
        Subject: CN=6949fc81-c557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:55:6b:0e:f4:1f:e0:18:b4:33:18:b8:23:
                    cb:de:35:48:40:6c:69:99:df:57:77:00:a2:8d:c7:
                    8e:89:b9:b0:13:b8:1f:ea:28:7b:38:89:99:16:04:
                    4b:fa:86:ac:7f:db:93:f8:07:ca:ac:b4:3d:d3:4a:
                    4e:5d:e5:fb:e9:42:3a:8b:a6:4f:c6:64:85:67:fd:
                    93:77:9c:6d:2d:b5:4b:66:63:28:fc:a9:09:24:4f:
                    8d:0a:df:96:0d:61:9c:c4:15:21:78:02:66:6e:ee:
                    0e:ab:f5:42:e4:e6:f8:cd:09:19:17:8f:f3:e5:c2:
                    94:6f:89:06:a0:95:8b:9b:28:15:84:5d:10:04:ed:
                    36:97:e7:85:18:c5:e1:ba:8f:d8:ab:46:66:83:99:
                    d0:01:64:b5:5f:f3:1e:d9:82:61:ce:e6:9d:9b:ac:
                    7c:c4:2f:b9:53:f2:b7:e6:91:c6:84:a7:ef:c2:99:
                    d9:07:ea:76:62:fd:fc:68:ac:31:be:24:34:7c:bd:
                    65:fe:25:3c:54:07:55:cb:e0:70:60:3d:22:4a:e6:
                    f1:d4:f0:2b:ca:6b:cc:02:33:13:fe:06:c3:21:0f:
                    2d:d4:15:01:32:83:ec:56:21:ee:d3:2e:ec:b1:30:
                    89:f5:15:a2:52:ab:82:ef:c1:04:94:58:d9:a7:3a:
                    3e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9B:2B:E9:6E:92:AE:2B:53:58:7A:B6:02:B9:A9:5C:1B:30:D2:96
            X509v3 Authority Key Identifier:
                keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9f:40:47:f6:e9:bb:6b:5b:1e:7e:ef:c0:b5:4d:20:f0:63:
         82:a0:93:13:c5:9e:5c:62:9c:b3:14:50:b1:97:24:fd:9a:d9:
         ad:62:be:c5:2e:77:80:d8:37:6c:9b:14:b3:2a:de:5a:77:fa:
         e2:a8:f8:7c:71:7d:7c:29:4d:b2:c4:e7:37:de:62:22:e4:7b:
         a7:ac:58:45:48:c4:0a:87:46:0f:e3:37:38:40:7d:35:be:cd:
         92:11:85:a4:23:4d:12:3e:b6:f3:65:51:58:d9:cb:69:d0:66:
         81:75:cb:9d:d6:53:4b:4b:66:5a:00:e3:a2:f1:70:cd:3c:ff:
         ef:0d:fa:f6:50:37:e6:0d:14:64:e9:38:d8:be:6b:00:d7:a1:
         a4:e2:ef:06:0f:a2:ac:e0:5b:86:64:ae:9b:b1:f3:5f:67:67:
         24:e7:c9:9a:15:c1:1a:00:df:57:ca:cd:91:f1:3a:d3:dc:dc:
         1e:ac:d9:d2:d6:34:f7:4f:68:f6:f5:e3:51:c4:30:02:b4:06:
         d3:1f:39:0e:7a:97:bf:4a:e9:dd:b9:8c:cd:d6:f6:44:b8:15:
         be:a4:31:26:da:ef:50:00:8f:03:e1:c0:fe:00:15:17:3e:2f:
         cc:b8:ee:b2:cd:bd:21:6c:71:25:58:e5:f6:94:c2:77:ff:fd:
         4a:df:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:08 2025 by rpki-client