This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
File:                     u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json)
Hash identifier:          jlo4T61ZXDgoBtLRd/EuH1gDjQN9O7v143V1Yit7+Zw=
Subject key identifier:   F4:21:DB:80:E6:07:55:A5:14:E2:65:A1:12:AD:DE:A7:F0:95:F8:A4
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Certificate issuer:       /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial:       1840
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
Manifest number:          1832
Signing time:             Sat 20 Dec 2025 16:18:47 +0000
Manifest this update:     Sat 20 Dec 2025 16:18:47 +0000
Manifest next update:     Sat 27 Dec 2025 16:18:47 +0000
Files and hashes:         1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: 7NukMoMGsRJH83gHHx7lUga8s5d5JUgtTOmKqlme71E=)
                          2: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: gFLbFRy/ivjEl0Dcp/t/VXs92pwAJ2tSip4UwHoVC3M=)
                          3: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: b8auFL+OGTstQHyewNvl2CDT74Oau9yNM7VkRWGDuEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
                          rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6208 (0x1840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
        Validity
            Not Before: Dec 20 16:18:47 2025 GMT
            Not After : Dec 27 16:18:47 2025 GMT
        Subject: CN=6946cc67-1850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:e5:1e:09:fd:26:46:83:6e:d7:c7:c1:04:
                    ed:bd:ec:93:d0:e6:25:31:d8:f3:c0:f5:19:01:2b:
                    42:c2:6d:e4:e9:67:68:18:6a:34:40:a4:86:a8:fb:
                    59:67:a5:05:a4:46:b2:3b:15:7c:b0:67:a1:00:97:
                    29:4c:80:70:bf:49:23:2f:23:5b:ab:64:0f:20:84:
                    18:a0:bf:ee:c1:84:63:07:2e:69:49:a0:b5:f2:60:
                    59:b3:30:2f:23:3a:dd:79:b6:d7:9a:33:6f:59:95:
                    16:00:87:0f:13:28:be:2c:13:8c:99:2e:54:5f:40:
                    c7:65:ff:b4:bf:d1:af:d1:2b:a9:fd:4b:8f:16:96:
                    60:df:1d:c6:4b:07:26:f7:ab:06:a6:50:26:23:f2:
                    db:cb:9e:5e:c1:4d:b7:20:9e:46:e2:7b:dd:d9:95:
                    a1:bc:2f:0b:b3:0d:f1:3c:ff:92:6d:25:98:08:e6:
                    6c:28:0e:4e:5e:41:c3:d0:b8:a6:22:8b:88:9c:3a:
                    43:7c:23:11:d7:51:72:c2:8e:1a:4d:22:66:9c:70:
                    61:81:94:13:c1:69:d7:a1:68:d4:31:9a:10:40:cf:
                    ed:ba:44:bb:fc:22:b3:46:b3:d3:11:9f:d8:72:3e:
                    bd:2a:36:32:2e:69:69:cc:2d:e6:3a:55:ae:35:89:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:21:DB:80:E6:07:55:A5:14:E2:65:A1:12:AD:DE:A7:F0:95:F8:A4
            X509v3 Authority Key Identifier:
                keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:78:99:5a:09:17:1b:10:19:44:ee:fd:c5:2b:5d:7f:86:1d:
         b5:73:d4:45:e7:1f:bf:22:49:b4:31:1f:43:fa:cf:31:46:48:
         7c:36:24:2e:d7:17:58:3a:66:8b:20:e0:84:60:42:50:37:a2:
         d6:58:c2:de:a0:84:dd:d9:d9:0e:67:ac:e8:ee:b6:21:15:b3:
         87:f3:d8:a6:0d:0f:02:d9:a3:5e:1c:c5:a5:b6:ab:11:5e:ca:
         c3:a1:e2:35:20:dd:79:5d:d0:1c:a5:2b:ce:17:2b:bf:a6:13:
         22:9a:4e:33:6c:a4:83:fa:8c:64:b1:5f:9f:74:21:55:c5:66:
         82:ea:84:a7:da:b0:44:3d:77:bf:88:d6:0b:5f:37:22:78:af:
         07:25:c6:da:8a:29:cb:fa:39:9c:3d:de:a6:23:41:93:e7:55:
         7c:98:5c:54:bf:76:b9:1b:bc:4c:94:e0:1e:94:99:0c:9c:b4:
         03:30:9a:e0:4e:b1:2a:53:d2:15:11:12:8f:f6:a3:23:7e:14:
         30:de:d2:33:d0:e8:3a:0f:5e:1b:14:6a:4b:a9:7e:3b:2f:59:
         70:68:d3:24:56:24:dd:3c:7d:ce:35:22:3b:c6:a4:5f:06:f0:
         5f:10:a1:56:78:08:b6:62:de:55:b1:98:21:f7:82:a5:e7:a1:
         b7:e6:39:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:58:19 2025 by rpki-client