This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
File:                     cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json)
Hash identifier:          26nnbY7vh5tEsnUvp+DTs0vruVmLeTjYTIXrS6rGa2Q=
Subject key identifier:   A3:6F:BA:4E:B0:1C:5A:76:4E:B1:93:9D:55:2B:9B:19:A4:40:37:64
Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
Certificate issuer:       /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Certificate serial:       1307
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
Manifest number:          4821
Signing time:             Sat 20 Dec 2025 14:20:51 +0000
Manifest this update:     Sat 20 Dec 2025 14:20:51 +0000
Manifest next update:     Sat 27 Dec 2025 14:20:51 +0000
Files and hashes:         1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: Q3F1szJ8NIPoyn3GMtygHYz4oNsKvEvoYNbwY5WJap4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4871 (0x1307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
        Validity
            Not Before: Dec 20 14:20:51 2025 GMT
            Not After : Dec 27 14:20:51 2025 GMT
        Subject: CN=6946b0c3-5526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:90:8e:f1:d6:e8:05:6c:10:71:18:2e:b2:
                    fe:7f:65:73:c9:e5:65:b6:12:f6:d7:d8:43:5d:f3:
                    c1:03:5a:a9:1d:5e:d5:17:1c:f9:26:96:66:da:0a:
                    7d:53:1c:74:e4:d1:72:20:a3:02:c5:eb:06:0b:a6:
                    5e:50:fb:b6:86:66:ca:7f:cb:73:43:c1:44:be:3a:
                    f7:e9:49:b9:b6:08:29:08:9c:b3:c3:8a:43:93:0d:
                    94:55:92:b5:9a:16:ae:82:bd:61:78:30:64:1e:49:
                    d6:59:b8:e2:0f:27:86:e2:0c:ae:23:08:c5:1c:d2:
                    80:21:1a:e7:e8:7d:81:b8:0d:63:55:3e:62:9a:a5:
                    95:63:39:c8:67:ee:05:f7:72:df:cd:a1:5e:07:82:
                    c5:1c:32:1b:50:cc:c4:cc:dd:27:79:b1:c5:cb:a3:
                    03:5f:74:2a:e5:90:88:c9:aa:83:2a:ac:e2:b7:9e:
                    6a:f3:a2:bf:87:f2:17:7a:d6:3a:99:dc:1c:68:49:
                    25:98:42:70:5e:3c:fc:6f:4f:cf:ec:ad:f5:2f:0b:
                    d7:eb:78:d5:e2:a2:46:11:88:da:fe:b6:17:c4:ff:
                    3e:9d:53:f8:36:ce:fe:a9:f1:22:a9:f5:6b:51:3e:
                    45:ec:94:e8:39:a4:2e:40:fb:5e:bb:2b:b8:5c:f1:
                    d1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6F:BA:4E:B0:1C:5A:76:4E:B1:93:9D:55:2B:9B:19:A4:40:37:64
            X509v3 Authority Key Identifier:
                keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a0:b4:8b:18:fd:cd:a4:d7:43:1e:ea:7f:e1:28:14:21:7b:
         5c:84:41:eb:53:4e:ca:00:49:cb:a9:79:04:c3:f8:7b:de:bd:
         17:7a:cf:45:1c:58:fb:ce:ea:6b:07:b6:3a:01:62:69:49:64:
         dd:1d:88:6f:08:7c:fa:8c:3c:55:74:67:3d:f7:5f:63:b4:4b:
         9b:7a:db:6f:dc:ef:f3:cd:75:79:3f:30:a5:ea:5d:90:a7:11:
         fa:c0:29:0b:c0:eb:01:4c:04:f3:17:f2:d3:cf:f8:0e:18:7e:
         ce:7e:44:e1:71:a3:c2:33:04:88:52:67:ec:7b:51:f1:3b:a0:
         bd:64:68:1f:bd:0a:05:01:f0:d6:8d:fd:5e:ea:ef:81:7a:6a:
         f5:60:43:ee:16:bf:d4:63:1a:7e:42:b7:3a:b8:5e:5b:57:8d:
         3e:c1:56:65:b5:19:c4:a6:0e:1f:a5:7c:5d:d0:5c:f0:93:9d:
         c7:57:77:f1:1d:ee:2b:fe:8b:6f:de:d5:1e:c9:28:7a:27:35:
         ab:16:8e:8e:d0:c0:9c:61:8f:42:62:57:09:4f:c3:ac:d2:47:
         fd:07:c0:83:4a:df:10:fc:a0:ac:ce:db:eb:f0:8f:3c:3d:7e:
         99:05:ad:d2:55:4c:86:46:39:af:e4:28:88:4a:2b:91:f5:46:
         01:56:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:26:41 2025 by rpki-client