This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
File:                     0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft (raw, json)
Hash identifier:          YSOlSRj5E7hY+/H5c/YqMy1ANjVSjutwU1PsWUT/bAI=
Subject key identifier:   CE:FF:DB:08:04:73:EC:EB:E4:3D:B7:C9:33:AE:D9:9F:1F:B4:8C:A0
Authority key identifier: D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
Certificate issuer:       /CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
Manifest number:          01A2
Signing time:             Sun 21 Dec 2025 02:37:15 +0000
Manifest this update:     Sun 21 Dec 2025 02:37:15 +0000
Manifest next update:     Sun 28 Dec 2025 02:37:15 +0000
Files and hashes:         1: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl (hash: V8wlg/u/ViYV/GaHSf7PGB1j2H+W6pPyiCfiynK1vGw=)
                          2: E50B556868D011EE8509F75CC4F9AE02.roa (hash: kHoy6v0ysySUqljIfyBeCRCH8CX8TIjWiaPyOL658Kc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
                          rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC24F, serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
        Validity
            Not Before: Dec 21 02:37:15 2025 GMT
            Not After : Dec 28 02:37:15 2025 GMT
        Subject: CN=69475d5b-e296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4e:e7:5e:f4:89:aa:70:aa:bd:a0:83:35:1b:
                    8f:29:7f:29:05:dc:7f:46:55:7a:6d:5b:bd:37:a1:
                    24:27:95:f8:d3:b3:d4:56:8f:16:32:49:d8:18:53:
                    b2:5d:59:a4:a8:0d:a7:43:a7:06:8e:86:b5:e9:bd:
                    c5:15:32:ca:81:d4:77:ed:ed:9d:49:c0:e0:83:ae:
                    0f:09:91:dd:d0:c9:67:7b:77:28:c5:57:b8:fa:23:
                    92:dc:50:54:0a:96:64:6a:ca:69:ac:60:03:f1:4b:
                    9f:28:b1:60:fe:91:9e:09:37:63:84:f7:2b:b0:2c:
                    12:d9:37:01:f9:ea:a5:3e:07:e6:22:c3:7b:af:52:
                    b4:b7:63:22:82:b4:87:9a:b2:c5:4d:41:95:bd:21:
                    17:3c:9c:bb:ab:25:6c:d8:fc:c9:4e:ce:73:5a:88:
                    7e:18:26:a2:ba:ba:cb:1b:68:a0:a0:03:87:57:e5:
                    6a:09:e0:3d:0b:1a:89:5e:fc:6d:e5:ad:1d:dd:28:
                    8e:aa:47:64:e4:a4:a9:81:60:b3:4c:6a:45:67:5d:
                    bb:57:d7:89:c5:bb:98:ea:0f:d6:97:90:3a:f2:ab:
                    a5:97:8c:78:52:3a:c8:3b:9d:a0:c5:79:ad:86:44:
                    95:92:08:da:df:6e:99:4e:7c:1b:4c:98:34:88:ea:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FF:DB:08:04:73:EC:EB:E4:3D:B7:C9:33:AE:D9:9F:1F:B4:8C:A0
            X509v3 Authority Key Identifier:
                keyid:D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c3:10:2d:44:f9:71:c0:d2:36:8e:5c:8f:dd:7b:a8:ea:55:
         68:50:9a:31:f8:4b:b0:93:18:36:20:93:0d:56:ba:1f:54:40:
         7b:fb:13:1f:5a:c6:b2:b8:62:44:46:73:58:9c:f2:4d:02:84:
         1a:c5:e1:77:4f:32:12:54:24:bb:3f:4f:63:45:71:e0:6e:1b:
         75:df:6b:0b:0e:12:cd:31:2f:b6:c3:1f:e2:b3:ed:2a:50:fd:
         8b:21:fc:22:22:07:17:17:e2:af:33:b4:f2:e0:e6:42:fd:51:
         62:f0:2d:41:a8:ee:07:3b:08:d0:e7:ef:31:11:3b:d7:a9:16:
         54:d5:e4:ae:a0:40:99:6a:04:05:2a:d1:b4:52:35:4e:8a:f7:
         11:a5:2c:a4:a4:88:3c:be:26:bd:b0:b4:92:00:b3:3c:4e:6c:
         dc:8c:f2:81:f0:0c:a3:31:cf:06:39:13:56:e1:5c:c3:45:19:
         b2:09:5d:60:5f:73:9a:2d:dc:6b:8e:9b:d7:e1:38:d7:49:1a:
         d1:86:f9:1e:90:a9:f7:e8:18:e2:26:56:b9:e9:1e:1d:9d:71:
         2b:47:d7:f6:be:19:86:cd:09:b3:c9:0d:cc:c6:8d:a4:f2:c1:
         d7:d8:08:64:c6:4f:de:d3:4e:b4:f0:65:14:fd:53:08:ca:94:
         ce:3f:87:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 16:44:58 2025 by rpki-client