This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft
File:                     v54NeIhwkRvVdMDs1KBcKQoJtf8.mft (raw, json)
Hash identifier:          QKBM7azZUBQ9Wzecz1TX/U3HnSqmcNDq5VIjX7rmvWc=
Subject key identifier:   37:A6:00:11:2B:31:4F:F0:28:D2:B9:7C:71:52:BF:D7:6E:49:2E:9B
Authority key identifier: BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF
Certificate issuer:       /CN=A91E2391/serialNumber=BF9E0D788870911BD574C0ECD4A05C290A09B5FF
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft
Manifest number:          69
Signing time:             Tue 23 Dec 2025 05:52:44 +0000
Manifest this update:     Tue 23 Dec 2025 05:52:44 +0000
Manifest next update:     Tue 30 Dec 2025 05:52:44 +0000
Files and hashes:         1: v54NeIhwkRvVdMDs1KBcKQoJtf8.crl (hash: xbkxB5JuVrvjvYpJ3NI/pI9BUlsUt5ls3UWc6yPLYaM=)
                          2: CE833D6041CD11F088FC5360C4F9AE02.roa (hash: RTwx+ZXjQ9Oy4qWQVUIKFrKPg4NKSpbv6f+uvarpu+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.crl
                          rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2391, serialNumber=BF9E0D788870911BD574C0ECD4A05C290A09B5FF
        Validity
            Not Before: Dec 23 05:52:44 2025 GMT
            Not After : Dec 30 05:52:44 2025 GMT
        Subject: CN=694a2e2c-e31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:50:64:9b:e5:1b:d9:ec:7a:64:c4:96:c9:
                    d9:c5:db:86:13:a8:d1:70:b4:0d:2a:46:65:e9:6a:
                    1d:0a:36:83:bb:9f:14:74:01:09:a2:d6:b0:5d:a6:
                    ae:82:4d:1a:60:0d:d2:f1:f3:9c:d7:6c:26:f1:9c:
                    06:53:b7:7b:0e:08:cc:f1:19:90:e7:41:44:cf:0d:
                    cb:f5:05:50:4b:aa:49:61:7d:67:9d:a0:31:ee:59:
                    17:49:37:b3:a5:54:9e:61:f0:aa:8c:21:9d:7f:aa:
                    6a:74:67:3f:f2:45:ac:48:5e:93:a3:2c:a3:9a:6a:
                    d0:d9:a3:27:41:aa:0c:4b:1a:19:09:1d:06:b5:c3:
                    fc:8b:e6:a4:c7:db:86:96:5a:f7:b0:82:d9:a9:43:
                    73:d4:9f:38:fb:b7:91:d0:8a:eb:a9:44:af:1b:d5:
                    33:b2:6e:84:0b:63:d9:a2:e4:7d:71:25:91:18:db:
                    6d:79:a0:3d:72:ad:07:6f:7a:8c:5f:39:50:9e:c2:
                    20:7b:f9:cb:08:9a:9f:01:7c:2f:0d:5a:3b:90:64:
                    f6:4b:75:aa:74:6f:c4:fa:41:45:b7:d1:d5:69:83:
                    c8:ee:3c:0a:f1:2c:81:96:64:a8:83:e5:e8:7c:7f:
                    aa:e1:1f:b8:cd:5d:c3:db:75:76:19:f6:50:98:9d:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A6:00:11:2B:31:4F:F0:28:D2:B9:7C:71:52:BF:D7:6E:49:2E:9B
            X509v3 Authority Key Identifier:
                keyid:BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f0:26:50:fb:e1:ae:b3:f4:db:1f:af:e3:4c:e5:ff:60:01:
         e2:5a:3f:bf:1a:ed:28:57:ee:2d:32:23:0d:4e:f4:3f:c4:c2:
         26:7c:88:5e:28:4d:3b:93:53:54:d6:8a:de:42:26:9e:f2:0d:
         6a:1a:a6:2d:44:48:bf:b4:07:e8:55:2b:de:94:05:70:f9:76:
         d0:02:d4:ec:d6:a9:cf:20:46:51:3a:47:c0:bc:46:f4:78:63:
         7c:5e:2e:22:7f:4a:99:49:d2:d2:8a:53:65:96:24:c2:6b:6b:
         75:45:90:52:4f:9b:0e:4f:c4:a6:f3:dc:93:36:4c:47:16:da:
         89:ab:c9:4a:9b:63:6c:18:c1:f6:b8:c1:48:47:da:45:0f:2a:
         75:38:2b:2e:53:62:89:ff:15:7e:39:ba:6a:fe:e8:50:00:3e:
         0e:82:15:6a:12:d1:54:dc:c6:e6:34:9b:82:32:89:bb:22:d2:
         75:3b:20:ba:ca:8a:b1:8e:c0:da:c3:a7:2d:db:1b:71:34:d3:
         f9:11:ee:1b:ee:e2:51:0e:9b:20:db:a6:0a:1b:b1:36:9b:b8:
         19:25:53:3f:b5:e7:a1:21:2f:49:e0:bc:66:8b:3d:b5:1a:ba:
         51:dc:27:17:e6:47:78:4b:38:af:d6:e4:a6:63:b8:00:cf:19:
         da:f3:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:48 2025 by rpki-client