This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
File:                     sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json)
Hash identifier:          eL3+Kq1k0ZlGgM0JLAWtqe3x1nYrOswpUy/GQRKcSw0=
Subject key identifier:   91:76:92:15:6B:2F:05:1C:0A:8C:A6:62:C3:2F:13:BE:59:24:5B:76
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Certificate issuer:       /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial:       07EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
Manifest number:          07E2
Signing time:             Mon 22 Dec 2025 20:31:24 +0000
Manifest this update:     Mon 22 Dec 2025 20:31:23 +0000
Manifest next update:     Mon 29 Dec 2025 20:31:23 +0000
Files and hashes:         1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: DyhguOGGtb260OJy0HunuAfELw3V8lDTuN64uGMHd34=)
                          2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: 1PaL5t22VHHOGdbUhH+qGnaUlXQ1MvnbAc80idZHNIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
                          rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2026 (0x7ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
        Validity
            Not Before: Dec 22 20:31:23 2025 GMT
            Not After : Dec 29 20:31:23 2025 GMT
        Subject: CN=6949aa9c-8321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:ce:17:49:a4:ef:6e:01:ae:19:0c:1a:e7:
                    8e:6c:21:f5:92:24:cd:22:55:d8:1e:71:44:c6:43:
                    7f:fd:ea:47:e5:72:bb:8e:eb:e9:a7:be:2a:26:b4:
                    a6:5e:63:d7:e0:0a:12:33:20:b7:75:50:fd:2e:2b:
                    50:64:c2:a3:8a:f7:61:e8:7f:e2:21:90:2c:fe:83:
                    56:94:f5:85:13:8f:48:3d:96:6b:e3:48:60:c3:ec:
                    c7:0d:68:47:8a:5d:f6:85:36:1e:36:5f:d6:dc:af:
                    49:15:9e:f3:27:6f:3b:fc:6f:2a:4d:db:4f:3c:13:
                    c3:d6:60:4a:a1:f8:9c:96:a1:d7:a8:3e:50:0d:9f:
                    c3:75:63:d4:21:00:8d:82:13:3f:83:ba:1b:9d:37:
                    c2:7f:d3:ba:94:97:f2:55:38:e4:62:d1:29:2f:54:
                    57:f6:a6:aa:f5:3e:3f:7a:0e:e9:07:cc:7e:4b:85:
                    86:bd:e0:eb:5e:21:d5:0c:5e:cb:59:ae:00:a4:e7:
                    49:b9:2c:05:82:7d:d4:a1:3b:49:59:9e:01:80:1f:
                    73:c0:99:cc:86:4c:bb:e4:a8:8a:12:5d:4e:32:cd:
                    19:96:05:c9:c8:c5:1a:d2:17:1e:7a:73:40:1f:1c:
                    94:ab:d4:9a:15:44:c9:f7:1d:d2:5c:25:ae:13:54:
                    20:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:76:92:15:6B:2F:05:1C:0A:8C:A6:62:C3:2F:13:BE:59:24:5B:76
            X509v3 Authority Key Identifier:
                keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:bd:dd:b3:60:98:50:8e:00:40:6c:af:82:18:02:10:43:a2:
         5c:35:e7:14:a8:1c:a9:24:d0:29:ae:d0:c7:26:e9:07:60:f8:
         ad:6c:e4:f9:3a:5e:91:05:4f:73:d1:84:54:4c:38:84:f2:28:
         8d:79:a7:4e:1a:b4:be:d3:c3:49:cf:ad:4d:a7:7b:8b:e4:8b:
         75:58:cb:81:ac:0a:2d:3d:12:28:b1:e3:45:5c:52:05:a6:4d:
         84:b1:d6:e6:57:0e:81:cc:bb:99:1f:9c:ca:61:87:97:51:f2:
         0f:25:e3:0a:47:c1:79:7b:d4:0b:57:14:cc:9f:15:43:e1:44:
         37:dc:d9:17:77:e5:2f:13:68:df:9a:b0:ef:8a:e6:cc:eb:8b:
         4b:dc:c9:68:79:42:a7:52:ac:4f:ae:93:9a:12:d7:78:4a:61:
         b0:ca:cd:d0:75:a1:b5:8b:0c:cd:f9:8f:d7:14:16:75:db:5d:
         b5:2f:3b:b8:2f:02:15:4b:64:ed:2a:96:0c:95:7f:1c:55:74:
         c3:2e:94:99:9b:59:ad:b3:90:28:d5:07:6d:a4:fb:fd:8d:a2:
         1c:cc:6d:1c:b9:d7:a3:c7:f1:37:82:4d:4f:fa:e6:d5:d0:69:
         af:b8:85:21:bf:55:13:37:0c:32:a3:9e:51:9d:d7:46:d0:7c:
         cf:c1:16:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:47 2025 by rpki-client