This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
File:                     sEu6HxjA5wgx81T3RV7hXTIpQbM.mft (raw, json)
Hash identifier:          jFY7KeKPPh2CPlczRZ8ZpCaPWS6QcRaIJmOHwmqAPEY=
Subject key identifier:   69:76:71:51:6D:95:FC:26:49:62:0E:EF:4F:FA:04:BC:BB:DE:BA:0B
Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
Certificate issuer:       /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
Certificate serial:       06ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
Manifest number:          06DF
Signing time:             Thu 18 Dec 2025 21:26:44 +0000
Manifest this update:     Thu 18 Dec 2025 21:26:44 +0000
Manifest next update:     Thu 25 Dec 2025 21:26:44 +0000
Files and hashes:         1: sEu6HxjA5wgx81T3RV7hXTIpQbM.crl (hash: VnbCGpKh4GJZwliQXN2YedRMgJMTpKSYSqGdiDQtvj0=)
                          2: DA33C49E08E211ED8B10721AC4F9AE02.roa (hash: zgRU+P4on5aXmZrrpnxUigxzSC5YeVSm8pI31wcNWhY=)
                          3: 710DB204831D11ECA37CC12EC4F9AE02.roa (hash: Z5ha/v9GqKizxbd45/FrP2BFLgwBNOYXevkcvzeQ5FQ=)
                          4: 2E9F8D4A08F911ED8F90BA78C4F9AE02.roa (hash: NxEcxn/akrW+vm2Z/ZPAl6UxKcvJlhSrSKjiAprfZig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl
                          rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773 (0x6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73FD, serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
        Validity
            Not Before: Dec 18 21:26:44 2025 GMT
            Not After : Dec 25 21:26:44 2025 GMT
        Subject: CN=69447194-f19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:96:36:cb:a3:d0:1f:57:d8:f5:ac:9f:93:
                    3e:7b:63:0e:68:ed:28:02:b4:2f:3c:7d:cc:a7:37:
                    90:68:3b:fe:cc:4a:59:9a:0f:6b:74:5a:1e:3b:cd:
                    96:9f:ad:f7:c3:7c:fe:f7:8d:af:a5:09:e0:26:11:
                    56:79:1b:1a:f0:ba:4b:44:86:59:56:35:e9:4f:b9:
                    b3:36:b8:69:94:cc:d9:f1:dc:4d:ab:43:3f:64:05:
                    38:3a:26:7e:62:74:b3:6e:47:88:cd:02:7d:11:b9:
                    06:72:66:03:22:fa:9c:47:6e:66:ba:e8:2a:e8:e9:
                    14:9c:d5:19:f8:12:59:1f:bd:6a:61:c0:a2:3b:4d:
                    3c:50:1b:57:96:7c:e7:27:82:df:64:e3:df:7c:1c:
                    74:a6:6e:35:9c:02:e9:2a:22:65:5f:1b:df:2c:fd:
                    d4:4b:bc:eb:5f:19:14:38:cb:a1:9e:55:6c:7b:f4:
                    e8:5c:09:05:52:b7:70:3d:1a:31:0c:2c:a0:0d:8d:
                    e7:cd:90:c1:9c:d7:a7:22:49:46:17:04:75:20:30:
                    70:e5:94:3c:82:2d:21:aa:2b:da:fe:f1:8c:e0:f7:
                    02:1a:7e:fd:44:5d:65:13:23:8d:9d:46:40:a5:14:
                    44:71:75:d6:b7:ca:69:86:25:3f:f4:b7:b8:d0:fd:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:76:71:51:6D:95:FC:26:49:62:0E:EF:4F:FA:04:BC:BB:DE:BA:0B
            X509v3 Authority Key Identifier:
                keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a3:26:f4:2a:79:41:91:1f:92:94:ef:cb:14:55:69:57:85:
         af:2f:17:69:03:69:f4:94:73:a0:a5:51:e8:94:cb:3e:42:f0:
         9b:0b:64:18:eb:f6:e3:ed:d6:57:af:32:6f:a5:67:26:ae:3a:
         85:a1:a2:16:6f:69:4d:1a:12:ee:a8:53:1a:57:e2:6f:93:5b:
         e0:ac:a4:0d:c1:76:f9:62:c4:1d:9f:1f:da:42:b9:c0:e8:d3:
         82:6f:6b:1b:94:e5:ff:8e:06:d0:e1:50:a5:b0:0e:04:00:cc:
         83:5f:34:e2:bb:29:b0:77:76:87:e7:5a:23:b6:e8:76:39:ab:
         3d:48:97:75:13:62:03:f6:02:b8:2b:ea:1d:18:46:5d:a5:b3:
         62:a3:c4:64:9f:ed:f0:a2:0b:89:1a:f6:85:d4:89:53:c8:d2:
         22:76:4b:5a:f0:1c:c6:26:48:65:6e:24:14:07:99:43:32:63:
         f8:69:5f:7f:a7:c2:4c:df:b5:c1:bb:a0:be:86:cc:dc:52:c2:
         ce:99:25:c8:1d:c3:e6:8c:57:64:d0:cd:fb:22:f9:22:82:4f:
         d9:4b:6e:15:f7:3d:ea:3e:ea:1c:3f:d8:93:38:5a:38:9a:03:
         8b:41:e1:de:08:19:7c:aa:b1:1b:28:8e:b5:4a:ce:b1:d4:54:
         21:73:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:58:59 2025 by rpki-client