This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
File:                     4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json)
Hash identifier:          wtDylzVVjxl4fJPC89Ofr4aYsXwF3OQvWjkRI9NZkl0=
Subject key identifier:   DE:F9:27:2A:89:15:2F:F6:A2:DC:E8:66:0C:59:AB:68:7D:91:DA:D9
Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
Certificate issuer:       /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Certificate serial:       1980
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
Manifest number:          1974
Signing time:             Mon 22 Dec 2025 16:10:27 +0000
Manifest this update:     Mon 22 Dec 2025 16:10:26 +0000
Manifest next update:     Mon 29 Dec 2025 16:10:26 +0000
Files and hashes:         1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: m594bldGKFRmwlvaJVKYFisLWuI70cpMD8fxd/HrvLE=)
                          2: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: /U/CsYIhht9s+NW7SN7K/1R2JyIlhuy3zjDWLZs60Yg=)
                          3: 09C0DFCE202011F098619934C4F9AE02.roa (hash: VTcOwA4/ZHFl9NF0jVq8bKcfk95wITIQIkP9/wxqkas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
                          rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 16:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6528 (0x1980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1306, serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
        Validity
            Not Before: Dec 22 16:10:26 2025 GMT
            Not After : Dec 29 16:10:26 2025 GMT
        Subject: CN=69496d73-b2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:07:db:20:4d:8c:db:55:48:45:f9:e0:6d:
                    f9:cf:16:f8:67:f2:65:10:f7:fc:3b:79:2f:66:56:
                    af:41:60:10:ce:4b:54:ae:db:99:44:e3:24:0e:b7:
                    d1:b5:de:bd:88:12:6a:a1:a8:f0:33:67:d6:8b:d5:
                    cb:da:57:54:e0:85:ff:a8:0e:da:e3:21:74:04:3f:
                    7d:72:c6:7b:e0:f2:75:8e:42:22:e3:cf:cd:30:f4:
                    e2:ea:39:57:04:ab:8b:cc:86:d7:3b:27:a9:1d:9e:
                    3f:e1:37:18:2b:46:24:ad:a5:92:ad:54:34:6c:17:
                    ca:79:4c:f1:59:31:b0:8e:84:87:19:50:56:83:c5:
                    78:05:0c:e8:42:2e:93:07:0f:04:4c:fa:0e:46:61:
                    60:7d:e3:22:cf:40:bf:ec:c6:81:4e:9c:8c:70:63:
                    aa:ca:15:7c:2a:22:df:8f:77:7a:7a:c3:f3:19:55:
                    46:ca:13:d6:ca:cd:8b:ea:5c:9b:02:8a:d0:2c:e8:
                    e3:78:de:a6:ec:18:81:7e:2b:14:c0:30:6c:70:2a:
                    d3:80:97:a4:ae:92:c9:d3:2a:e8:f7:40:41:c0:4d:
                    4b:58:0a:f2:5b:1e:05:99:f3:ac:ca:be:2b:99:32:
                    96:4e:6c:06:ec:5b:a2:e0:77:9e:f0:85:90:95:2b:
                    12:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F9:27:2A:89:15:2F:F6:A2:DC:E8:66:0C:59:AB:68:7D:91:DA:D9
            X509v3 Authority Key Identifier:
                keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f3:4e:c0:68:97:dc:9f:5b:85:4d:a0:83:30:49:d0:02:3e:
         cd:c1:39:b0:6b:2f:4b:43:f6:4c:6b:f4:3b:84:f1:6c:be:0f:
         22:2d:76:34:db:a9:f3:3f:e6:07:22:8b:22:c2:dd:58:31:ea:
         99:47:02:3c:50:e3:b0:2e:61:b2:36:15:70:d0:4a:65:79:07:
         44:55:5d:f9:14:e1:c8:8e:b0:e9:55:aa:3b:42:d0:77:df:f5:
         46:5b:3f:52:e6:14:23:14:f3:af:ad:f3:ba:41:38:29:95:49:
         58:b0:a8:4e:02:ba:d4:88:80:cb:55:75:9f:82:d7:40:de:1e:
         b8:66:25:2d:a9:da:ee:18:43:5a:ab:44:4b:f6:c9:53:3a:60:
         55:12:04:93:1a:95:61:93:e2:7f:5d:88:5c:86:10:0c:34:6c:
         03:ee:a3:7f:a7:69:21:86:29:6b:b6:d7:69:73:25:18:04:86:
         bc:4b:41:0a:79:50:5b:d6:61:00:ba:72:35:33:b2:d6:7f:c3:
         cd:01:6b:ef:d7:82:31:4d:43:c2:cc:42:bf:9f:27:52:64:20:
         93:a9:4b:e1:b5:27:46:cf:4a:f4:d4:63:3d:87:59:52:21:17:
         11:73:ad:aa:b9:b7:16:0c:e6:e2:4c:98:14:ad:d2:fc:e0:b7:
         6c:55:82:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:10 2025 by rpki-client