This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
File:                     -SborqRks6WJBsCbrEbeMddAn2Q.mft (raw, json)
Hash identifier:          eqQG/YhA8+JZctgc2gYKrdZ4MNtLlLNdQ0TvRrgg2Ig=
Subject key identifier:   BA:B7:3F:4B:31:90:A1:5C:D7:5C:30:A6:E1:44:95:06:83:63:E5:C6
Authority key identifier: F9:26:E8:AE:A4:64:B3:A5:89:06:C0:9B:AC:46:DE:31:D7:40:9F:64
Certificate issuer:       /CN=A91D8806/serialNumber=F926E8AEA464B3A58906C09BAC46DE31D7409F64
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
Manifest number:          40
Signing time:             Tue 23 Dec 2025 06:16:05 +0000
Manifest this update:     Tue 23 Dec 2025 06:16:05 +0000
Manifest next update:     Tue 30 Dec 2025 06:16:05 +0000
Files and hashes:         1: -SborqRks6WJBsCbrEbeMddAn2Q.crl (hash: +/D0ajWBv0kEISZVATNzpDQ1sFS4a3PdzskOEqNBnOw=)
                          2: 0A2186867CD111F0B302D85AC4F9AE02.roa (hash: nhRwGjDx0Fm5UM7mImMZBw38WV939OfcRi7SwP7Yv4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.crl
                          rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8806, serialNumber=F926E8AEA464B3A58906C09BAC46DE31D7409F64
        Validity
            Not Before: Dec 23 06:16:05 2025 GMT
            Not After : Dec 30 06:16:05 2025 GMT
        Subject: CN=694a33a5-7569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:2d:2e:ce:b3:b5:89:23:99:18:7d:15:4c:
                    6c:f3:0b:57:43:75:61:4f:bb:26:6d:70:6d:23:5f:
                    7f:70:73:57:cd:77:1a:c4:27:57:41:33:1b:7c:6d:
                    83:7d:35:c2:99:80:27:0a:46:43:11:8d:6e:75:8f:
                    80:0c:21:3a:a6:37:25:ea:ea:f5:5e:3f:17:d3:c4:
                    4f:b0:b5:dd:4d:8a:a6:b8:31:d0:12:66:f2:c7:9d:
                    84:d5:fc:17:35:c5:13:23:d0:02:b5:9c:db:fd:00:
                    14:3b:d2:d8:9c:49:55:e1:e5:f6:cb:71:0f:ad:66:
                    a5:c6:f5:df:d1:0c:03:81:a6:d5:d1:f1:06:c6:db:
                    df:eb:2d:7e:70:2f:b6:18:e9:f5:72:f9:67:e7:2b:
                    75:ab:b3:7c:41:3b:1a:93:60:11:27:4f:9e:e6:27:
                    a2:b0:b0:b3:31:ad:1d:6f:8a:cb:cf:d2:1b:23:c8:
                    1a:21:33:80:f4:b9:94:b5:bd:8b:15:db:2b:47:0f:
                    8f:5f:04:53:25:5d:7d:cd:c9:da:4f:55:0b:04:04:
                    45:76:3f:49:87:4c:0d:0f:a6:30:7e:33:34:7c:5c:
                    7d:ad:b0:ea:12:16:a0:7c:c0:bb:4f:1a:66:15:e2:
                    6a:9c:62:60:4f:0c:8b:47:9d:82:d4:98:95:40:d9:
                    ca:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B7:3F:4B:31:90:A1:5C:D7:5C:30:A6:E1:44:95:06:83:63:E5:C6
            X509v3 Authority Key Identifier:
                keyid:F9:26:E8:AE:A4:64:B3:A5:89:06:C0:9B:AC:46:DE:31:D7:40:9F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ff:c8:b8:71:ba:d5:e5:bc:e1:09:ab:14:3f:37:85:7d:18:
         46:db:93:bd:d3:35:94:7e:04:3f:06:91:5e:33:3b:ba:69:43:
         82:ca:a6:4a:4d:be:d8:59:39:d7:e3:e1:d1:c7:85:37:9d:b0:
         63:a8:10:de:72:51:4e:52:82:1b:46:44:fa:90:1c:0e:ba:5c:
         a7:09:55:d3:c6:ab:28:6a:8d:ef:8a:1e:5f:88:36:0e:4e:82:
         52:2f:7f:b7:c3:d0:d9:1d:b3:7e:fd:a3:7a:89:76:b2:3d:30:
         d0:81:0c:e0:94:4a:33:20:b8:90:c1:e9:09:7e:ef:95:b8:ff:
         5e:b7:7c:af:85:9a:25:16:9a:a1:61:08:dd:16:8f:79:27:79:
         b9:aa:aa:96:1f:64:f2:c4:48:e5:fa:e1:78:e9:33:33:14:f0:
         fb:df:92:df:bc:5b:a4:1e:3e:41:db:f8:49:b1:c2:f6:fd:56:
         52:da:16:c1:60:85:be:5c:25:ae:a0:7d:d8:69:5a:ce:d6:c4:
         6d:a9:aa:c7:0e:0d:18:d6:fc:40:47:d1:92:17:94:ec:95:e0:
         9e:90:e3:38:7f:7c:56:d7:cd:58:04:f7:50:75:8d:be:81:2b:
         c5:ed:b9:ce:77:8d:67:9e:22:e5:04:ce:f4:10:3d:9f:61:f2:
         31:a7:ff:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:13 2025 by rpki-client