This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
File:                     98erVUq_Hcr4wXnBS8h6vPi3dg4.mft (raw, json)
Hash identifier:          XTvGx0YSn81yH8m/P5HT1ORD+1/lyOADZndNHA/W5Ps=
Subject key identifier:   F4:23:45:41:72:C0:31:60:78:1A:46:CE:33:39:75:CD:46:A6:85:6E
Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E
Certificate issuer:       /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E
Certificate serial:       0318
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
Manifest number:          0312
Signing time:             Tue 23 Dec 2025 00:08:29 +0000
Manifest this update:     Tue 23 Dec 2025 00:08:29 +0000
Manifest next update:     Tue 30 Dec 2025 00:08:29 +0000
Files and hashes:         1: 98erVUq_Hcr4wXnBS8h6vPi3dg4.crl (hash: tSnq2tDM6Iht6kgIJ5WxYymxrs5xbCCMMIBoz1f+dw4=)
                          2: A60C101AFB8411ECB7FF456FC4F9AE02.roa (hash: Qqe/3yjVxw2fDJJe2KN34hOiy8f6bsKaNvFnKDvrg90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl
                          rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792 (0x318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15EA, serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E
        Validity
            Not Before: Dec 23 00:08:29 2025 GMT
            Not After : Dec 30 00:08:29 2025 GMT
        Subject: CN=6949dd7d-64ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:f9:72:1b:58:79:d9:de:ff:7d:6f:4b:42:
                    26:68:3d:51:04:8d:9f:fd:3e:78:3d:3d:e7:1d:5a:
                    dc:9b:c2:32:20:ee:03:b5:de:89:d0:7d:9e:ac:8c:
                    f1:28:7d:19:01:a5:4b:3c:48:6a:a0:c7:f4:4c:42:
                    e4:d2:32:a2:65:b5:31:45:34:4a:16:7c:f8:c1:92:
                    b7:fd:89:ea:82:1a:7d:aa:82:f3:23:92:70:7e:fe:
                    0b:32:77:bb:0b:d7:bd:d4:aa:85:08:af:03:7e:ba:
                    eb:45:cb:e8:72:39:89:87:61:b5:88:74:bd:61:3e:
                    32:85:5c:67:a7:c9:50:07:14:95:4c:f7:72:e7:09:
                    c8:fa:6c:6a:86:df:b4:55:21:8c:ca:2f:05:a6:fa:
                    c2:8a:8e:08:ac:47:8e:15:de:56:6e:4a:33:97:0c:
                    90:4e:41:f8:86:77:3f:8d:c0:a9:a9:b9:ea:86:da:
                    ba:eb:ae:ca:2a:39:a9:a5:21:68:2f:a2:e6:98:6f:
                    ea:6f:85:c6:12:b8:fb:4b:4b:a6:84:8e:d0:f1:d9:
                    32:5f:b5:cd:54:16:3c:42:e1:1f:02:86:d0:0c:27:
                    05:4d:c7:56:c0:82:c3:cd:7a:37:81:0a:48:ee:07:
                    ed:a3:43:eb:3d:e2:d9:02:ef:e5:93:a1:85:93:c8:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:23:45:41:72:C0:31:60:78:1A:46:CE:33:39:75:CD:46:A6:85:6E
            X509v3 Authority Key Identifier:
                keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a4:01:46:72:ab:bf:75:10:7d:44:9f:2e:69:a5:b6:a6:ca:
         0f:f3:1a:84:82:f5:01:4b:f0:9f:9b:50:91:38:8d:20:66:d8:
         4a:6d:52:2f:53:8c:48:11:c2:67:19:6c:c6:c3:e7:22:2b:be:
         88:01:dd:89:b3:b7:c4:14:ad:b9:98:a1:ff:33:9f:ed:68:89:
         f2:3e:e2:20:7f:4f:71:44:85:bb:00:32:ce:60:c2:2a:17:7c:
         1a:6a:7d:9b:11:65:62:2a:60:de:68:33:ba:12:12:01:9c:84:
         e8:6b:39:33:5a:e7:08:b7:ce:22:1d:50:6d:14:6e:68:62:c0:
         80:c9:6e:f0:cb:c4:eb:f5:d7:4b:00:db:0f:0e:e7:07:1f:c7:
         db:bb:f5:c5:61:a1:df:47:35:46:e5:3e:82:51:b1:c8:07:9c:
         fe:58:b1:4a:de:af:a8:a8:63:f7:08:53:55:fd:68:47:17:ca:
         97:f1:7a:52:27:f2:99:86:ac:52:72:1c:09:a8:b8:87:ca:8e:
         e0:5a:eb:82:d9:a7:00:df:6a:9a:de:70:73:00:e3:1e:40:4a:
         92:61:2c:29:91:fa:b5:cb:24:3e:36:c2:4a:76:e8:cf:60:1b:
         e5:1f:8c:bf:42:4b:46:aa:a4:d6:c1:f8:a9:f3:2c:b7:6d:4b:
         1f:e0:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:14 2025 by rpki-client