This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
File:                     57QbPSVuxr0M5xIbNw3kdBuDXmE.mft (raw, json)
Hash identifier:          gjZeaFVa/I8ZHXqEBfDDjaxhAT/RgXeZN214gaAR16s=
Subject key identifier:   E2:0F:06:93:A7:7A:7F:3E:AC:A9:51:27:36:7A:E3:DC:E7:89:08:17
Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
Certificate issuer:       /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Certificate serial:       0E67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
Manifest number:          0E58
Signing time:             Mon 22 Dec 2025 17:25:42 +0000
Manifest this update:     Mon 22 Dec 2025 17:25:41 +0000
Manifest next update:     Mon 29 Dec 2025 17:25:41 +0000
Files and hashes:         1: 57QbPSVuxr0M5xIbNw3kdBuDXmE.crl (hash: Rd0rkhoFDW/nxQu/0Y4LqeqasOwyTfhtT0iYjBw9wQo=)
                          2: 0F56E156828C11EDA6BCA176C4F9AE02.roa (hash: 6jQR+LA7AhS3kcRLFdYcgiTc91j8m964KZdBUexFMD8=)
                          3: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (hash: f/BgI5BL/1PcY7ExwBK48s2FrmJ9kEJMRjBuMiCgse4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3687 (0xe67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
        Validity
            Not Before: Dec 22 17:25:41 2025 GMT
            Not After : Dec 29 17:25:41 2025 GMT
        Subject: CN=69497f15-6c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:a6:27:e6:95:87:11:d6:d2:f1:3b:3b:eb:
                    0e:f3:cb:fd:0b:f5:58:67:ee:7f:89:fa:35:98:67:
                    c7:b1:7c:cc:96:2d:c5:8e:87:ab:59:0f:1f:e0:ae:
                    f8:ec:00:b1:6d:96:71:40:97:c1:af:2c:0c:42:e2:
                    2d:e4:52:73:d4:06:3b:f2:79:82:af:53:b7:81:01:
                    66:39:31:f7:77:93:e4:4e:3a:ba:b1:ae:0b:a6:db:
                    55:36:a7:f6:51:bd:8d:59:fe:88:5a:d3:6c:52:64:
                    33:23:c1:ac:ab:88:2e:f0:76:99:f2:c3:45:4f:1b:
                    73:1b:37:c3:5d:df:28:da:13:a6:de:21:b0:7a:d8:
                    38:90:f9:a7:23:8d:25:f9:ed:8c:9e:16:40:82:c6:
                    da:89:ec:7c:49:e7:cb:e2:13:a7:fa:06:6f:9c:9e:
                    48:45:2e:67:75:1f:38:fb:70:d2:5a:08:8c:e5:d5:
                    ea:59:1a:8c:8d:b5:d0:41:9e:e7:3d:e1:7f:35:5a:
                    b9:c1:cd:fc:79:80:5c:e6:43:04:82:5a:f9:c0:81:
                    c0:13:bb:26:51:ad:00:fb:41:9d:e4:ed:40:e4:40:
                    89:61:71:6d:77:f4:c3:cd:a0:b1:f8:1e:2c:db:d8:
                    0c:0c:72:27:54:23:a4:b7:36:cb:01:18:5e:9e:8a:
                    35:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0F:06:93:A7:7A:7F:3E:AC:A9:51:27:36:7A:E3:DC:E7:89:08:17
            X509v3 Authority Key Identifier:
                keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:da:dc:60:0c:2e:51:02:c8:b5:e9:2b:2c:05:79:6c:d6:bb:
         3e:62:ab:b8:c0:a2:b3:20:27:98:19:c7:bc:43:b1:cd:06:c3:
         fc:61:ef:e9:ac:b7:e9:d6:b2:ee:85:41:56:7b:40:a7:34:c5:
         2b:00:77:de:86:95:97:c4:05:69:9c:13:eb:a7:16:94:a3:5e:
         d0:cb:15:a5:f5:71:5b:1b:56:b9:1a:d9:d6:1a:2d:62:d6:59:
         b0:b3:8c:d7:be:6b:34:d0:fa:3e:ca:7e:7f:23:93:6b:09:8d:
         3c:06:62:9e:2f:11:0e:49:d2:ab:2b:22:d3:63:a9:83:b0:9b:
         d1:ed:8c:d7:88:4b:23:8e:db:ce:b0:0b:9d:b1:7e:86:e7:12:
         1b:04:de:43:76:54:97:5a:ce:f0:fc:dd:57:84:0c:a8:bb:03:
         a2:79:fe:0b:45:92:60:fa:b9:f6:03:97:cd:32:12:f4:11:12:
         71:ee:be:8f:7c:f2:f3:ef:8c:36:d1:2e:ae:04:9d:0b:01:71:
         c9:a7:77:4b:48:2d:b0:cc:77:07:0b:37:67:52:f3:a0:29:43:
         e5:9b:8a:76:ad:ba:d4:dd:1a:dd:4f:d2:51:ef:b9:54:c7:f8:
         d1:92:5e:6e:fa:b3:61:5c:06:37:28:6c:3e:12:09:c8:25:5f:
         8c:b4:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:21:58 2025 by rpki-client