This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
File:                     gYkRn4AeKAprTdViZT7xA2lh0Js.mft (raw, json)
Hash identifier:          VgILe1btWnmAy25jSHLxD8Je8nqjhWGmy3J+wzzonZU=
Subject key identifier:   81:61:63:E7:BD:86:F2:32:6C:04:55:C6:8B:8B:5F:55:85:50:58:79
Authority key identifier: 81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
Certificate issuer:       /CN=A91D9CAE/serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Certificate serial:       04EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
Manifest number:          04E9
Signing time:             Mon 22 Dec 2025 22:49:51 +0000
Manifest this update:     Mon 22 Dec 2025 22:49:51 +0000
Manifest next update:     Mon 29 Dec 2025 22:49:51 +0000
Files and hashes:         1: gYkRn4AeKAprTdViZT7xA2lh0Js.crl (hash: Vk8hKaIEratH6lhWaec/11txdGbf5NdMum4JGZcp9Ds=)
                          2: D30098F6413111ECB71E086AC4F9AE02.roa (hash: Vt6tO0X/X1UwDMUAdETQmDLxSBvUfwttK8IaifttuUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl
                          rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1262 (0x4ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9CAE, serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
        Validity
            Not Before: Dec 22 22:49:51 2025 GMT
            Not After : Dec 29 22:49:51 2025 GMT
        Subject: CN=6949cb0f-d185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:26:c0:22:2e:51:73:49:6f:b3:f7:02:21:fd:
                    f9:38:c8:49:95:90:c0:08:a0:ef:0f:fd:87:1f:2c:
                    98:8d:c2:62:4d:90:4f:e0:db:68:b2:f8:66:5d:e6:
                    13:c4:3f:91:ba:50:ef:f2:6a:8b:7d:d8:24:24:26:
                    d4:87:9f:07:d3:3a:58:7e:7e:7e:3b:54:f4:9c:df:
                    26:c5:c2:aa:32:90:47:9d:c3:36:d5:d4:0d:0d:be:
                    b5:19:ba:30:00:3a:96:1e:13:67:f9:63:87:a7:af:
                    ba:de:da:58:73:5e:5c:90:79:60:27:69:f0:7c:ac:
                    74:8b:a0:0b:17:f5:0f:33:21:2a:fa:78:f8:cb:e7:
                    75:7a:a0:44:75:25:e2:ed:cf:80:91:f0:f6:34:9d:
                    a3:d0:0f:0c:b1:84:29:5d:07:57:21:13:ba:4e:26:
                    f8:4a:70:0e:34:f5:7e:a0:fa:a4:85:f8:8a:b3:18:
                    1e:55:ee:2d:a5:ab:cb:b1:20:93:8d:33:6f:b8:64:
                    77:91:fc:01:a3:4c:b8:8f:ac:d9:6f:8c:19:e9:c5:
                    a7:c2:ab:e5:2a:54:65:86:51:d9:4c:18:07:16:d2:
                    48:3f:45:dc:7f:f3:e1:55:f9:d0:31:f1:8d:a9:2e:
                    86:5c:db:c4:2a:5a:ca:28:4e:8c:b8:51:2a:52:c5:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:61:63:E7:BD:86:F2:32:6C:04:55:C6:8B:8B:5F:55:85:50:58:79
            X509v3 Authority Key Identifier:
                keyid:81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:49:2f:9b:ea:68:6d:d4:59:2e:09:19:c2:e9:96:e5:87:a1:
         99:46:b9:aa:7d:6e:3d:8f:b8:ee:7c:b1:69:12:9b:9d:b0:4f:
         c3:26:8f:01:06:45:4d:18:1e:0b:00:de:c3:f0:a1:9c:05:f9:
         3c:39:8b:ab:d2:b0:af:b5:f1:e1:3c:d5:25:f3:6e:d3:0b:13:
         07:45:86:61:cb:bf:3a:8e:e7:43:bc:0e:b3:69:75:d3:87:6d:
         00:7a:9a:4a:1b:cb:e4:51:a3:d5:fb:f6:f2:93:16:ca:8b:03:
         1a:5e:f8:17:98:e7:d3:41:b7:e5:61:54:71:f5:78:02:b4:88:
         c0:90:a0:fe:af:32:df:49:91:54:cf:be:f9:79:cd:e4:da:0b:
         41:59:cc:b8:c4:3f:b0:08:44:a9:ce:c6:1c:22:30:37:1a:84:
         43:08:51:4c:25:ea:08:7a:0d:0f:5d:2e:a4:5b:fe:30:d3:79:
         4e:a4:50:15:2c:eb:13:bc:5a:c1:40:68:56:d8:05:60:20:75:
         27:18:94:45:28:b1:b1:48:18:78:fb:b8:fd:bd:79:4b:ef:7f:
         ca:8f:2b:ce:ec:b1:f4:e7:b1:dd:ca:05:3f:07:12:8d:99:01:
         f6:49:df:38:9a:df:ed:90:de:ef:ad:b9:df:fd:22:81:1a:5e:
         3b:b1:1f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:44 2025 by rpki-client