This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
File:                     IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json)
Hash identifier:          TwTnmrIc6kVNVz80ajwu+oGXB/H7/qW/tZ+XyYNZ4xc=
Subject key identifier:   80:2E:48:55:0F:A2:40:F5:50:D4:BB:EE:7E:F6:B1:49:DD:25:88:C0
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Certificate issuer:       /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial:       11B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
Manifest number:          1174
Signing time:             Wed 10 Dec 2025 16:43:21 +0000
Manifest this update:     Wed 10 Dec 2025 16:43:21 +0000
Manifest next update:     Wed 17 Dec 2025 16:43:21 +0000
Files and hashes:         1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: xeVcarAJ5fFOKHR+QOvnWreVWdhIM2BYn5bfLvdMQD8=)
                          2: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: A1A/LnUqdsNFUNCbA9pj78Zy7mXZZnhX+0nyseCL3vE=)
                          3: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: tKQU1f9hJtuAYfiy2kdRz9mYUmd+c/z8iKCPuJpB5Jo=)
                          4: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: GKHRKfwk3bqrqOFGPvJ+kjY0NTnB33jXoiW8bXeNOjw=)
                          5: 4F2654ACACDB11F0A3F2FF3CC4F9AE02.roa (hash: ezSFE6z1AfPI1kfaZKGN0eX+4u/ZznyBrlMf93wLFII=)
                          6: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: HogXJmL/NwNRLzeVXgVFZcWMkVgOGwGFOMaQzjDPXUk=)
                          7: 981DEAC6B1C711F08CEB3C61C4F9AE02.roa (hash: Xd/ha+8Rf40EUcmF2S28Em4xm72VBdQzvds2dDfnPNU=)
                          8: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: PDXFymAQeHbTCItIfy8LqqoHr3PVKA+eJZNU6voGL5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
                          rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4536 (0x11b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
        Validity
            Not Before: Dec 10 16:43:21 2025 GMT
            Not After : Dec 17 16:43:21 2025 GMT
        Subject: CN=6939a329-18df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:cc:36:e0:88:b8:64:47:d9:ab:5e:76:00:
                    8e:da:80:34:b1:16:f8:67:bb:37:36:b0:fc:77:91:
                    46:10:0b:d3:29:60:8b:50:dc:9b:cf:68:38:ce:89:
                    94:f1:0c:1f:02:2e:e9:0e:b4:f1:b9:81:93:8e:3d:
                    a6:36:f4:cd:44:79:89:b4:f8:d6:18:07:5c:49:58:
                    88:7d:f1:20:47:38:c8:f5:9e:6f:16:f1:2e:d3:23:
                    e0:fe:82:28:3d:82:68:47:ab:35:01:2b:36:6e:76:
                    33:5f:67:ed:64:dd:96:b5:4f:ce:e8:d1:7d:fa:68:
                    61:0c:ef:1f:b9:7c:c8:15:53:12:ef:05:db:74:b5:
                    d9:46:57:a7:43:31:e4:2a:46:1f:f1:95:88:4a:4e:
                    16:ad:fb:49:c5:c0:db:ef:5c:3d:d8:27:c1:b2:5c:
                    cd:9a:a5:61:d6:06:c6:89:f4:f5:e1:5d:f4:93:59:
                    cb:bd:ab:2a:6e:c0:64:7a:26:fd:59:f8:b7:14:a2:
                    76:fe:c8:d1:63:b8:f8:54:70:4f:dc:5f:72:58:02:
                    d4:86:6e:7a:dc:cc:21:1c:9f:ac:9e:af:3e:34:08:
                    a9:2c:5e:ac:bb:95:4b:e4:d9:10:83:da:1a:bd:75:
                    8f:c7:76:14:5d:b8:21:fe:7f:82:b2:1e:ae:e1:0b:
                    c0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2E:48:55:0F:A2:40:F5:50:D4:BB:EE:7E:F6:B1:49:DD:25:88:C0
            X509v3 Authority Key Identifier:
                keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b7:4c:de:0a:27:d6:21:3d:21:1b:46:c3:54:f5:47:49:7b:
         a2:09:da:ec:41:0c:48:7e:9e:d7:82:91:24:8b:dd:78:da:ac:
         44:2e:b1:dc:9b:8b:a2:51:46:50:1e:3b:8d:e8:20:7a:de:36:
         47:af:ad:3f:4b:ad:4f:4d:44:b4:8f:4c:09:46:e0:7c:77:d9:
         1f:20:44:ad:3c:68:e7:0f:b8:4f:1e:80:6b:e4:3d:23:57:86:
         5e:00:66:ac:f7:f2:f4:79:ef:ef:75:95:6d:f3:f8:8e:b5:83:
         30:04:7d:16:6e:39:8a:55:4a:a2:d9:47:06:a8:dd:6b:1f:27:
         48:ed:cc:11:1f:79:c3:dc:ab:2f:82:ca:f5:7e:a5:fd:3f:25:
         57:65:30:e4:c7:1e:37:9e:47:67:71:70:c3:d2:b6:f4:e8:df:
         19:11:61:17:f2:de:52:77:7e:cf:18:16:a1:1b:92:8c:76:41:
         1e:13:b3:5c:3f:34:23:1a:01:e9:19:ed:c4:b5:e6:68:c1:4e:
         8e:c0:ea:04:5d:24:25:cb:cb:cc:b5:cc:a8:18:5f:37:14:0b:
         09:6a:4a:38:a0:99:92:a6:82:8f:c4:8c:12:fe:16:62:77:eb:
         3b:d2:f8:1c:5c:8a:93:97:10:b6:c8:85:6c:d0:92:7c:99:38:
         6d:ec:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:01:08 2025 by rpki-client