This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
File:                     0fGDjm-uASwUWNKgeiJNnhEBJdw.mft (raw, json)
Hash identifier:          czGhJscBsKymt8MFiVebkB9YFBEHv/vw0/UPxBjJWv0=
Subject key identifier:   F4:6A:9F:3C:B4:3E:8E:18:AC:D2:B2:66:51:CD:A3:D0:C5:74:D9:36
Authority key identifier: D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC
Certificate issuer:       /CN=A91D3603/serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
Certificate serial:       0545
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
Manifest number:          053E
Signing time:             Sat 20 Dec 2025 22:44:52 +0000
Manifest this update:     Sat 20 Dec 2025 22:44:52 +0000
Manifest next update:     Sat 27 Dec 2025 22:44:52 +0000
Files and hashes:         1: 0fGDjm-uASwUWNKgeiJNnhEBJdw.crl (hash: igOmQRflNCrpOCbFj3vStW3gBZq7jDEX1evdSayuxVo=)
                          2: 11F818F81F7311EC9027050AC4F9AE02.roa (hash: b/ItM9VGVv0zUWnweJ6+Pz3YcBgADXF1u82bmhYCBN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl
                          rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1349 (0x545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3603, serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
        Validity
            Not Before: Dec 20 22:44:52 2025 GMT
            Not After : Dec 27 22:44:52 2025 GMT
        Subject: CN=694726e4-6ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:63:ce:ab:70:3f:43:6c:20:17:2e:c3:f6:
                    6d:69:70:cb:d7:b8:66:8b:aa:bf:ab:a8:0e:43:1b:
                    6c:ca:b7:46:16:21:46:4d:74:29:47:64:5b:74:5d:
                    bb:bb:19:f1:19:9c:9f:a4:a0:a5:84:ff:86:6b:13:
                    2c:0d:27:1d:84:92:65:4b:7c:0a:d1:a2:99:85:bc:
                    a4:23:88:46:37:33:25:62:6a:77:7a:36:90:0c:aa:
                    68:fd:8d:e0:3d:28:a2:0f:ef:d7:6b:5d:28:e5:cb:
                    a5:55:19:a0:dc:22:b3:cf:a4:06:d1:47:3b:ad:38:
                    53:db:44:97:18:8f:e6:53:07:d1:13:b2:c0:fb:0f:
                    6d:96:ea:65:79:a8:77:b9:95:aa:37:83:b8:87:3b:
                    28:b3:f7:f7:da:85:b3:2a:38:e7:5f:18:a0:09:c5:
                    54:74:7e:86:e9:59:a0:cc:92:db:57:0c:44:82:78:
                    4e:1a:0c:99:d8:63:2f:9d:f8:ef:0a:84:5c:1f:af:
                    6f:ae:f5:dd:bf:22:a3:0b:68:80:92:7e:c9:f5:79:
                    26:26:b7:22:66:7d:d3:3e:d2:9c:13:01:a4:01:47:
                    11:e5:75:3d:18:46:8f:42:e9:4c:ce:a3:59:11:94:
                    91:b8:76:7a:af:61:2a:6f:76:5f:c3:67:78:24:3a:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6A:9F:3C:B4:3E:8E:18:AC:D2:B2:66:51:CD:A3:D0:C5:74:D9:36
            X509v3 Authority Key Identifier:
                keyid:D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b5:14:a0:80:a9:75:d1:99:ae:e9:47:03:8e:9b:23:ed:a1:
         f4:11:a1:b0:53:d3:2e:21:58:c9:df:80:a0:e8:a9:e1:93:3c:
         db:36:a9:44:0e:31:82:ab:cd:14:17:3a:e3:db:02:40:ca:ee:
         66:4e:da:07:68:83:10:36:4f:5a:c1:7c:15:79:91:8f:d1:63:
         7e:9f:c4:ed:79:2e:82:96:26:06:8a:b8:0a:a6:17:09:69:eb:
         c6:3b:c3:91:de:59:02:80:2c:c7:64:47:0e:e2:68:9a:99:58:
         12:df:66:4c:96:c3:41:9d:42:0c:5b:ae:3a:d8:b7:02:57:10:
         9d:89:79:29:b6:92:77:43:60:c8:54:42:fd:c3:c4:b5:ff:b1:
         22:23:79:3b:ad:7f:13:9d:ce:6a:7d:e4:9f:39:30:f1:c4:71:
         76:92:6e:de:03:97:24:d5:b5:77:9c:eb:30:27:03:4d:98:0d:
         6f:6e:bb:b9:4b:bb:52:76:ef:ba:18:2c:1f:1e:f7:67:2a:c7:
         31:36:6f:3c:93:04:64:06:69:1e:85:b4:ad:e7:1f:99:e1:c4:
         ce:da:b6:a8:c8:00:88:af:16:86:f1:a8:f7:6b:9f:a8:2d:13:
         f0:73:83:d7:55:ad:2e:29:3c:ca:49:7f:70:5c:b1:ad:06:71:
         9e:8d:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:05:51 2025 by rpki-client