This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
File:                     M1EvnGdsMJ4181WPA7muZBm_dBU.mft (raw, json)
Hash identifier:          1BupZ2UJaJ7DiDhukO9N/lvWrCVnAgsUBrUs8zXJEts=
Subject key identifier:   32:0E:DE:D1:7E:73:D6:17:AB:C0:CD:5E:C0:25:D1:E9:FC:E3:95:A4
Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Certificate issuer:       /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
Manifest number:          01ED
Signing time:             Fri 19 Dec 2025 01:47:12 +0000
Manifest this update:     Fri 19 Dec 2025 01:47:11 +0000
Manifest next update:     Fri 26 Dec 2025 01:47:11 +0000
Files and hashes:         1: M1EvnGdsMJ4181WPA7muZBm_dBU.crl (hash: V6N0mIX2LCSk18lCd0OC6RLWAgI4uW9JVmmu7GipNiw=)
                          2: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (hash: oCS3tdZ6gguGFimJ8+AyVEXE/8R/Gcn35NJsKRSfeUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl
                          rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB763, serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
        Validity
            Not Before: Dec 19 01:47:11 2025 GMT
            Not After : Dec 26 01:47:11 2025 GMT
        Subject: CN=6944aea0-4cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:5f:37:c2:1d:54:89:a2:37:f4:5a:86:ad:
                    5a:b0:02:07:13:71:86:93:47:eb:97:7e:f2:dc:25:
                    87:84:6c:02:c1:f7:ac:9c:fc:ac:bf:c9:2e:35:95:
                    66:2b:8f:64:da:7f:22:5a:cf:16:bd:9a:04:44:5d:
                    3f:e4:62:ab:4d:1b:70:56:57:17:56:c8:3c:d7:b1:
                    81:ab:63:e7:99:89:1e:81:ac:81:cc:a4:22:5b:1c:
                    ea:1d:0e:b8:e9:f5:1c:f6:25:d3:79:83:76:00:99:
                    ce:93:1c:91:12:b2:c4:fd:bf:77:2f:ca:2d:50:48:
                    3c:ff:e1:45:55:2a:43:24:3f:08:96:88:95:ce:fc:
                    0d:ae:0f:92:f5:7c:7d:e0:60:fb:81:2b:3a:f2:55:
                    42:9a:58:dd:55:8d:64:a1:58:4f:61:d0:aa:a2:73:
                    00:16:a2:30:a4:b8:77:50:bb:77:35:01:d9:fc:af:
                    d8:47:32:df:01:83:a1:41:19:e8:cf:d3:97:b3:ff:
                    15:ee:2f:e3:f1:a9:30:1d:64:97:68:16:81:15:0f:
                    8b:e5:8e:11:05:2c:09:4a:6e:e1:20:51:42:07:7d:
                    6c:8e:fa:d7:1b:c7:50:08:dd:93:b6:cf:2d:ee:8e:
                    8e:2b:20:8c:1c:c1:49:d7:4a:d1:3b:6e:3a:60:fe:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0E:DE:D1:7E:73:D6:17:AB:C0:CD:5E:C0:25:D1:E9:FC:E3:95:A4
            X509v3 Authority Key Identifier:
                keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4a:3c:cb:79:76:1c:39:34:84:bb:bf:80:d7:5d:7e:74:28:
         f2:bf:83:0b:6f:a1:f9:82:46:cf:df:47:58:aa:ac:bf:98:e0:
         b1:e9:42:d7:9a:c6:da:1e:a9:8b:6c:e8:21:ce:0c:c3:83:b6:
         a7:8c:c5:b9:16:77:8e:b8:79:f5:b6:19:ae:87:5c:2e:e8:d4:
         3c:28:58:2d:29:5d:b0:b0:16:a4:eb:a0:cd:a3:d8:2d:4f:b2:
         95:f4:90:32:b6:a5:da:9c:de:18:ec:84:07:8b:b0:85:9a:aa:
         90:6b:1c:4b:97:3a:c6:10:4b:2f:ce:c4:4f:d0:a5:d1:19:60:
         1f:ee:66:84:f5:41:c7:bb:c2:a8:7a:08:d4:4d:10:2a:f8:c1:
         b9:32:dd:4b:bf:18:e1:38:9c:14:e9:fd:29:86:97:ef:eb:9a:
         c8:66:f8:7d:aa:a8:a7:83:92:d6:63:1f:45:3d:dc:84:48:c6:
         26:f4:13:bb:40:d2:26:b4:7a:59:cf:0a:6f:72:82:f5:3a:f8:
         d3:07:ad:4a:81:e3:22:8e:f0:a6:59:42:d4:a0:40:42:6e:56:
         6a:cd:0e:52:43:87:3c:03:b8:d3:a6:89:6e:35:8e:3b:c9:af:
         79:0c:d5:d6:dc:72:a7:b8:c6:58:ff:1c:fd:38:33:10:ec:ca:
         b6:3a:ef:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:01:20 2025 by rpki-client