This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File:                     K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier:          nH23qke+K3EWkHqBicFDTMbz8NDzHG2Ib8FCO+APb7Y=
Subject key identifier:   CA:78:B2:1D:85:A4:C3:4C:B7:DD:62:17:8A:A7:4D:1C:AA:9B:AB:34
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer:       /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial:       0421
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number:          0411
Signing time:             Tue 16 Dec 2025 23:49:34 +0000
Manifest this update:     Tue 16 Dec 2025 23:49:33 +0000
Manifest next update:     Tue 23 Dec 2025 23:49:33 +0000
Files and hashes:         1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: k0Ee3IXTGzF1cxRUIbLwdRFNIy/TdW3mmjtLa4MsY6A=)
                          2: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: 8EZQM/G5p946FK5IAxG3P6xewk8qoFsvyNghIhRO4OU=)
                          3: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: LDUnyOdS9OamILyV+DlZlg+xzQGvjMOiRA/W3kxK9fM=)
                          4: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: FoCE53zxIc9RGDT20cSl66HA963RFqLllbD6isI2Eks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 23:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
        Validity
            Not Before: Dec 16 23:49:33 2025 GMT
            Not After : Dec 23 23:49:33 2025 GMT
        Subject: CN=6941f00d-5b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:99:5c:16:45:93:81:1e:4f:44:53:00:3a:
                    ec:e4:67:aa:6d:87:09:55:ff:54:d0:9a:da:c8:dd:
                    10:a8:07:3a:01:9e:d7:54:41:1d:e7:7c:14:14:21:
                    e9:94:27:a2:06:7a:59:d6:3a:9d:d0:df:02:c2:b6:
                    b2:5f:c8:d2:60:54:44:40:3d:6b:cb:d2:ac:e8:45:
                    75:18:a3:8d:c2:58:b0:7b:22:12:a1:b8:6b:29:a9:
                    62:e1:88:f4:61:ef:1a:57:8e:82:d7:28:41:00:fb:
                    e6:00:a7:36:d3:74:9a:ac:96:59:2c:9f:b3:10:12:
                    58:fb:91:ce:61:7b:95:2e:40:37:27:00:09:d6:21:
                    e7:47:ee:b9:e4:14:20:32:e0:39:e1:ea:a3:1e:96:
                    08:f6:dd:2e:9f:40:54:36:fa:94:1d:f9:37:a6:fd:
                    41:0f:35:77:2a:af:80:b1:22:a0:c9:2e:df:1d:ac:
                    6b:c5:fb:0e:bd:28:8a:47:04:e6:73:ad:65:b1:c3:
                    e5:de:78:73:b4:83:2e:3f:58:9e:3b:b1:f9:be:b9:
                    0f:f3:05:4e:2b:ad:49:58:92:48:84:71:0e:d7:2e:
                    bf:24:2a:be:34:15:60:65:a8:ea:8e:c1:e1:cb:9e:
                    24:79:ab:9d:36:98:c1:a3:f8:2a:c3:e3:14:b9:d7:
                    be:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:78:B2:1D:85:A4:C3:4C:B7:DD:62:17:8A:A7:4D:1C:AA:9B:AB:34
            X509v3 Authority Key Identifier:
                keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:99:a2:7a:0c:0d:65:c0:2f:70:6b:4f:fa:c2:81:aa:ce:1f:
         bf:0a:86:72:61:be:4c:12:1f:0f:c9:6f:a3:6c:4d:0b:23:8f:
         f7:ad:e1:e2:0c:9f:ed:bd:47:0f:44:47:2a:b8:b4:02:db:6e:
         61:16:5c:a6:34:49:f8:6e:40:ac:48:48:d1:f2:27:2f:8d:aa:
         cd:4d:42:07:7a:2a:68:7d:68:37:20:4e:cc:ae:a4:d0:7e:38:
         fb:d6:36:e0:0b:15:9e:94:48:a0:85:9e:6d:9d:52:7a:b9:41:
         12:50:7b:b3:09:7c:28:18:94:51:53:8a:0e:2d:9e:79:de:a9:
         a6:9d:12:2c:4d:be:a8:4a:a1:b4:2a:ba:6d:37:31:52:6a:f4:
         ad:7b:70:67:0f:64:a0:05:f7:d6:34:48:71:c5:a3:1d:29:32:
         0f:c2:5e:df:80:c7:15:fa:3b:51:5d:04:07:33:59:1b:a3:3c:
         05:0f:c0:9c:e3:80:64:9a:de:96:a2:67:f5:f1:f9:ed:e5:14:
         48:56:cd:c5:0a:26:84:71:07:52:99:7f:43:b3:9d:f2:91:95:
         2c:e1:af:0a:06:af:f3:2d:2b:65:cc:96:a2:1a:03:e6:81:08:
         32:a3:a6:91:75:51:9b:ff:c0:d4:53:fa:08:54:58:2e:6f:23:
         b9:29:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:34:58 2025 by rpki-client