This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
File:                     53anM2-PZ4WjagEEaEC1FKDUGSk.mft (raw, json)
Hash identifier:          aZAQaFbT6cRNDocTGqwuooTrVFMC6icEk/Hcyve0Oo0=
Subject key identifier:   A2:92:67:5E:33:6F:D8:B1:3B:9E:93:7E:90:D8:DE:C7:C7:D2:BA:83
Authority key identifier: E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29
Certificate issuer:       /CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929
Certificate serial:       0CAB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
Manifest number:          0CA4
Signing time:             Mon 22 Dec 2025 17:56:34 +0000
Manifest this update:     Mon 22 Dec 2025 17:56:34 +0000
Manifest next update:     Mon 29 Dec 2025 17:56:34 +0000
Files and hashes:         1: 53anM2-PZ4WjagEEaEC1FKDUGSk.crl (hash: Nu+UTDBaHqQUMWZUPTrhqQw8q7YzzSJFMvRzHbu897k=)
                          2: 964FB9AE06A111EAAE446E30C4F9AE02.roa (hash: YYUgqKOEnvJbq4h/uxt+tcdbs5oUyYjSsW1HZ0Uncpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3243 (0xcab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1486, serialNumber=E776A7336F8F6785A36A01046840B514A0D41929
        Validity
            Not Before: Dec 22 17:56:34 2025 GMT
            Not After : Dec 29 17:56:34 2025 GMT
        Subject: CN=69498652-a312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6b:49:8b:52:58:54:72:57:74:73:1b:af:88:
                    60:8d:fc:4a:06:c6:79:57:19:be:aa:3b:0b:3a:08:
                    0f:01:38:ba:21:0a:6e:43:25:59:84:63:97:a2:55:
                    49:9b:a9:0c:df:e7:c8:65:b8:69:99:5a:ed:4b:a9:
                    4d:8d:64:27:39:7c:ee:ef:bf:f1:70:22:e3:90:8e:
                    06:96:20:a6:d6:b3:d0:04:e8:13:b9:17:50:7a:14:
                    a0:2c:7d:02:30:98:33:ef:e6:7e:2d:2a:2a:70:52:
                    0a:5c:58:4b:dc:bf:b6:ae:05:0b:48:11:37:55:92:
                    47:83:fe:d0:02:97:ba:8d:15:a1:6c:bb:f6:d0:32:
                    92:b4:26:98:be:06:72:71:42:98:ef:7a:44:7e:ee:
                    0c:9a:5d:2d:f5:44:2d:80:54:9e:a1:1e:7d:35:6a:
                    60:c0:bf:c2:f0:56:dd:94:cd:d2:83:c1:8f:cc:92:
                    bd:6e:08:e7:a0:c1:3f:ba:b3:2c:a6:76:08:49:d1:
                    ee:52:0f:4c:34:04:d4:cd:1b:ac:d9:04:0b:19:e3:
                    37:30:76:5b:84:5e:4d:ef:bd:b2:c3:bb:d4:78:bc:
                    76:9c:a6:3d:07:1b:e0:2d:19:e2:a8:2e:a3:8a:42:
                    94:f7:34:18:bc:0b:59:1e:70:e8:01:59:a8:36:26:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:92:67:5E:33:6F:D8:B1:3B:9E:93:7E:90:D8:DE:C7:C7:D2:BA:83
            X509v3 Authority Key Identifier:
                keyid:E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:bd:f2:8c:7f:49:49:9c:8a:70:c2:1e:86:40:bd:71:3f:bf:
         98:51:96:1f:cd:48:14:e9:ac:f9:b5:ab:9b:0f:cd:06:0b:e8:
         17:1f:d0:11:63:54:15:80:5a:0d:c5:c0:50:f1:e5:8c:71:d4:
         ac:0c:89:62:93:52:f3:97:5b:91:0e:30:ef:88:ee:5d:0f:7b:
         a2:b7:8d:c6:ab:69:86:40:3a:9a:2f:50:4e:90:77:df:8b:f9:
         ab:6e:ac:9e:6a:3d:5e:6e:7c:59:95:64:46:8a:4a:56:b7:87:
         86:81:fc:28:05:c2:fe:21:d2:09:37:84:45:06:88:7b:db:95:
         ff:fe:24:58:10:5b:41:4f:9e:9c:0e:9a:98:00:1f:d1:58:9b:
         34:e2:de:dd:e1:d1:a5:64:cd:b0:3c:9c:66:89:19:31:b1:6b:
         63:45:2a:72:37:95:2a:c6:d4:25:83:97:fc:04:f4:c7:30:d1:
         6a:35:7e:30:8d:a8:c4:2d:ed:ad:d6:00:ad:46:03:88:73:54:
         3c:b3:ae:ba:4e:ee:88:48:7e:9a:df:e4:9f:c0:32:78:61:8f:
         ef:d9:a3:2f:4e:73:51:a9:45:7f:dd:9b:fa:f2:b4:a0:2a:d5:
         c0:04:ff:4f:85:e8:46:2f:02:ca:9c:ff:53:a9:ad:c3:bf:50:
         14:db:a8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:38 2025 by rpki-client