This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
File:                     1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json)
Hash identifier:          WdQ0pegzr3C+FZkSlzZrED8oFrqMWWq4zoFEJAClEtQ=
Subject key identifier:   47:C4:4D:72:5A:7E:11:28:DD:71:38:B7:AF:CF:A1:1E:81:16:4E:67
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Certificate issuer:       /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial:       02CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
Manifest number:          02C4
Signing time:             Wed 17 Dec 2025 00:51:05 +0000
Manifest this update:     Wed 17 Dec 2025 00:51:05 +0000
Manifest next update:     Wed 24 Dec 2025 00:51:05 +0000
Files and hashes:         1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: sQPmm0Y0BOjjc8fDjH8VrsuPZIUZACeTs4o+19J0QNg=)
                          2: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: ZMuXU8x5oSWaUY/w5FJOwLEX4Eyd5ZHjHOMaRrHb7zk=)
                          3: 834FFE88679911EEB8243436C4F9AE02.roa (hash: 2l18e24CMiHud0NJE3O3nns7nMxFpBn60Kr5He67lRQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 00:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
        Validity
            Not Before: Dec 17 00:51:05 2025 GMT
            Not After : Dec 24 00:51:05 2025 GMT
        Subject: CN=6941fe79-bf41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:39:67:ae:73:a3:87:8f:ad:fc:d9:39:bd:
                    72:80:07:3d:ea:ea:09:98:4a:0e:f2:89:1f:f2:df:
                    89:f4:58:91:a7:9d:ae:1b:ce:70:e5:a3:a5:60:7e:
                    2e:8f:74:74:e1:e5:db:f4:05:c9:2b:c1:2b:71:54:
                    bc:85:f6:e5:f4:06:39:03:9b:dc:79:83:02:cf:c9:
                    32:46:5d:f9:60:67:bb:3b:a1:21:fd:ae:a1:61:39:
                    b3:f7:43:97:0b:94:aa:37:2c:53:39:20:72:af:a0:
                    01:c4:53:db:d4:f9:49:f1:5b:af:72:49:2d:82:bb:
                    f0:07:9b:d1:f9:f4:70:8e:22:ee:c7:b7:dd:c7:98:
                    52:ad:de:3e:ef:fb:57:37:27:02:01:bc:d4:dd:fa:
                    7d:02:5e:5a:d1:5c:b7:2c:41:62:e0:ad:0d:da:83:
                    51:1d:e5:f7:04:bc:75:f1:62:64:40:fc:4e:52:a4:
                    d5:07:b5:6b:e8:3e:a4:18:51:a3:51:7a:97:4e:d0:
                    2a:5c:c7:b6:36:92:27:59:cd:5e:a1:c4:16:96:25:
                    f1:f7:0d:8f:56:f9:a8:9f:4f:6b:a3:3d:56:b0:1b:
                    78:8a:7a:28:b7:13:44:cd:55:c7:db:98:3e:27:65:
                    24:14:9e:bd:7e:16:50:9a:5c:5f:fc:0d:62:36:23:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C4:4D:72:5A:7E:11:28:DD:71:38:B7:AF:CF:A1:1E:81:16:4E:67
            X509v3 Authority Key Identifier:
                keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:2e:80:a3:39:10:19:fb:69:de:c0:07:d4:7b:33:36:ae:2c:
         36:f7:2a:db:53:15:4a:79:25:28:c1:4d:a6:ed:42:4e:b9:09:
         fb:7e:4b:d4:62:c2:11:89:93:7b:01:57:dc:e8:8e:41:d5:fa:
         93:ea:f5:f2:2f:be:f5:cc:69:f0:83:40:c6:25:b7:f2:26:87:
         f8:01:92:9c:4e:5c:3a:3b:cb:27:99:6b:d4:f0:fe:57:97:24:
         dc:dc:ce:18:a1:6c:f1:5d:9f:d3:38:0f:5b:bd:5d:54:3a:fc:
         8a:10:01:1a:51:83:ce:b3:55:43:e6:08:10:38:6c:8e:40:12:
         70:6e:d2:17:41:0b:dd:a6:8b:21:59:92:ca:f1:3a:76:a6:7c:
         b9:31:db:0c:f5:7e:f4:2d:9a:4d:b8:85:e5:3a:57:b7:3c:1d:
         e1:12:0f:af:15:29:a3:36:6a:ef:e2:fd:65:78:d0:9e:88:9b:
         ea:2a:fb:ca:da:24:e9:af:fb:cf:a1:72:3d:c9:63:a5:31:83:
         9d:43:f0:b1:ae:3d:b4:ad:66:68:69:50:0a:1e:42:27:42:be:
         af:f0:36:d8:74:d2:af:63:c6:17:4a:35:f9:54:c9:22:64:b8:
         c0:a1:0e:12:06:b9:9c:b5:ab:27:8c:d6:05:78:ee:5b:7e:3d:
         35:f1:13:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:37:00 2025 by rpki-client