This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
File:                     mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json)
Hash identifier:          1YdWpwjxGSQgs0p41sAj6xsfQ+Ng9NqMlj6r6ElZCmY=
Subject key identifier:   50:0E:DA:3D:31:75:01:DC:3F:B6:E9:4C:36:7D:DB:6F:05:1B:D4:D6
Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
Certificate issuer:       /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Certificate serial:       0225
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
Manifest number:          021C
Signing time:             Tue 23 Dec 2025 01:12:48 +0000
Manifest this update:     Tue 23 Dec 2025 01:12:48 +0000
Manifest next update:     Tue 30 Dec 2025 01:12:48 +0000
Files and hashes:         1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: diDZmcuDi5jxf7KMDmeyCTCk7WEI8Narvo6vdQhYNLo=)
                          2: 6B724CC6DB0011F0AC29E8F57ED3641D.roa (hash: 7rL0FBSKkznrl2udj8uNlQFyPTeXQMYsE1y8QdItuVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
                          rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
        Validity
            Not Before: Dec 23 01:12:48 2025 GMT
            Not After : Dec 30 01:12:48 2025 GMT
        Subject: CN=6949ec90-b16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d1:5f:66:14:5a:cd:d8:16:07:33:62:05:05:
                    23:44:b2:0c:32:2c:c1:14:25:cc:95:7b:e7:74:f9:
                    7e:4a:30:c0:32:e3:ca:3d:42:0f:42:29:03:22:15:
                    6d:e3:5e:b0:32:a7:4b:89:68:e2:ac:6a:eb:d1:0a:
                    a2:ac:6c:9d:9b:2d:eb:c0:b1:dc:a6:3e:49:44:1f:
                    47:58:39:e7:32:07:49:2f:e9:3c:06:28:18:aa:44:
                    4d:a9:cf:10:f1:ef:4f:64:c6:29:c6:32:28:a4:13:
                    76:7f:5d:a3:a8:b7:fd:84:5f:75:3d:ee:25:87:3a:
                    89:6f:85:86:c1:87:18:5d:97:16:a7:86:ac:79:65:
                    ec:f5:2f:84:29:c2:0b:35:86:59:ed:4c:cd:63:45:
                    00:55:af:89:54:b7:c7:24:11:61:1c:a9:e1:e7:4d:
                    03:11:94:dc:14:ac:44:8c:72:74:2e:0c:d8:31:40:
                    47:0a:01:a6:a9:d7:40:44:c4:c5:74:4c:81:94:bb:
                    dc:f4:35:86:f3:b6:2e:95:2c:be:46:6e:bd:b5:e2:
                    3c:55:5e:a9:94:6c:d8:bc:e1:5b:b0:f3:99:2a:c7:
                    d2:1d:e1:c9:34:74:2e:d2:8e:f4:57:89:9e:0f:f5:
                    12:20:01:0b:f9:05:80:46:57:a1:b8:3d:39:2c:71:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0E:DA:3D:31:75:01:DC:3F:B6:E9:4C:36:7D:DB:6F:05:1B:D4:D6
            X509v3 Authority Key Identifier:
                keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6a:23:a4:00:0b:38:2d:c4:1b:51:51:7d:cf:45:02:ce:87:
         bb:62:0d:ac:52:66:ab:b7:e2:ac:ef:d0:40:b0:e1:71:68:98:
         31:e9:8d:3d:ed:80:0e:2e:10:ed:f2:43:b7:70:7b:72:4e:e1:
         75:1b:c3:53:d5:4c:02:ae:5c:2b:c9:93:fb:b9:8b:06:f2:ea:
         3b:43:31:c5:16:6f:f7:72:6d:1f:84:82:41:fe:d2:06:bc:9f:
         6d:ad:ee:20:7c:1f:d8:a2:e4:00:6b:bd:db:98:ba:d0:5c:c9:
         7d:85:8c:ba:6b:1f:43:5b:83:9a:09:41:4b:6d:4b:80:26:16:
         b7:2c:66:16:31:cf:25:ff:73:0a:64:de:19:a5:14:db:bd:d3:
         e6:bf:bd:41:f1:8b:7b:5b:0d:b8:e2:53:81:08:22:11:de:39:
         2d:27:77:54:59:bd:61:5e:6f:da:02:57:32:48:15:1e:30:73:
         07:d7:cf:24:04:39:a4:5f:df:4f:45:1c:fc:7e:c3:3a:17:35:
         16:b1:4c:3e:9e:c5:a9:8d:1a:e0:db:b5:66:63:68:60:4d:d7:
         f2:4e:55:04:06:cf:bd:1e:01:03:7e:fd:81:2e:11:d7:99:00:
         17:35:e8:63:f9:87:46:f0:de:35:d6:6e:90:f4:35:20:fe:46:
         27:2e:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:27:15 2025 by rpki-client