This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
File:                     c0CQ78N5g_0XW-AvSUlmiiFDciE.mft (raw, json)
Hash identifier:          ITqBDWfjGKkoi+SkCukYE2KrXDu79imHqMSUx77VH80=
Subject key identifier:   4D:63:00:41:B8:95:FF:37:14:F5:D5:AA:88:28:CD:C8:84:AD:70:38
Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
Certificate issuer:       /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
Certificate serial:       052C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
Manifest number:          051C
Signing time:             Mon 22 Dec 2025 22:42:35 +0000
Manifest this update:     Mon 22 Dec 2025 22:42:34 +0000
Manifest next update:     Mon 29 Dec 2025 22:42:34 +0000
Files and hashes:         1: c0CQ78N5g_0XW-AvSUlmiiFDciE.crl (hash: SGWUXPycwsNsn+yFOH3Ait3zWRPYJy/EK4wVGFJG2jM=)
                          2: 7F8113B6D4DC11F091B5A227C4F9AE02.roa (hash: 6u6mSc1zaco1Tc/dQzBw0E4k6CuwW/dWAAEV4YYWdn8=)
                          3: 4B95A58630B111ECAC3FE61DC4F9AE02.roa (hash: 9tJ/pt8L/gxVmpVNxOtZ9pIC/aw1tdXK8msH8pvZQPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
                          rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324 (0x52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D025A, serialNumber=734090EFC37983FD175BE02F4949668A21437221
        Validity
            Not Before: Dec 22 22:42:34 2025 GMT
            Not After : Dec 29 22:42:34 2025 GMT
        Subject: CN=6949c95b-1625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:d9:f8:ec:63:83:9e:b4:42:96:ad:5a:7b:
                    81:25:fd:15:32:de:3e:bf:04:38:f4:b5:ca:f6:7f:
                    cb:ca:e4:8b:bf:42:4f:00:a5:cd:f4:03:f4:ff:b5:
                    75:5f:f2:2b:eb:5c:10:49:9f:d4:9a:a0:6e:7f:db:
                    3c:b0:19:5e:90:99:be:9e:26:c3:36:ba:4b:f5:6d:
                    ff:26:5b:f7:0d:c7:e7:b4:0a:16:50:5d:2b:ee:66:
                    4b:e6:51:86:6a:34:07:00:c7:2c:ef:59:31:b7:71:
                    39:2a:36:80:12:32:33:a7:a8:3d:b1:a9:9f:b1:7e:
                    c3:4a:84:96:fc:9a:bb:27:fb:8e:0d:31:89:bf:b8:
                    eb:ac:5a:20:92:93:d6:7b:41:af:b7:bd:0b:fe:2a:
                    ee:04:24:c8:ef:45:f2:9c:b1:25:bb:ba:e6:18:80:
                    47:b0:8c:be:66:5c:84:7b:ab:b9:e0:e5:50:fc:a9:
                    93:d4:47:a4:76:fd:bc:e2:5f:81:cf:02:2d:51:f6:
                    e5:04:55:a5:6f:3c:69:a6:cc:8b:22:7b:a7:6f:84:
                    24:19:20:b5:f8:35:74:42:88:d5:7a:a8:23:1d:36:
                    74:69:a6:54:46:ef:b3:1b:f1:e7:35:d7:e6:1f:68:
                    c8:1f:16:ca:9e:cc:89:92:4f:f6:68:0b:de:04:ef:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:63:00:41:B8:95:FF:37:14:F5:D5:AA:88:28:CD:C8:84:AD:70:38
            X509v3 Authority Key Identifier:
                keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:e8:86:59:ad:a9:42:1a:26:e5:9b:93:64:5f:24:98:3b:
         ac:31:14:53:11:90:52:7c:6b:17:81:fe:a8:33:b0:3e:87:2e:
         98:2a:fa:d6:68:7e:22:10:f5:c5:7c:59:6e:92:54:e9:25:7e:
         a1:31:d4:20:b5:b9:8e:23:34:0a:d0:68:78:74:de:46:7b:b8:
         d9:c1:dc:2b:c4:38:bc:62:fe:df:da:9a:cc:a5:7c:d5:b7:4e:
         58:4b:83:c6:70:cd:79:fe:c2:9c:34:94:55:71:69:e9:fd:5a:
         8f:4e:08:ef:0e:b3:c6:cb:4e:db:80:1d:c6:01:63:8e:d2:4b:
         09:f4:b4:89:2e:f2:c7:bc:6b:fc:89:57:60:50:2b:11:31:bf:
         d4:1d:17:d6:ca:f9:24:ea:12:8c:f7:38:c4:87:81:46:41:e2:
         52:e5:70:bb:6b:87:8d:1d:91:19:29:2c:a6:1f:46:74:1e:ac:
         2a:b2:99:82:59:b6:f8:07:41:41:e9:d4:f7:2b:ec:21:19:98:
         01:05:b6:b5:ea:17:2e:50:5e:7b:56:0d:03:25:64:40:78:19:
         ef:e4:55:d2:9a:ef:39:12:a6:a3:80:49:93:54:1e:3b:1b:11:
         cb:41:f3:1b:19:95:08:1d:06:00:2d:2f:de:ad:c8:1e:fd:39:
         dc:52:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:50:14 2025 by rpki-client