This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
File:                     5P3k1jhc-jqHPsReepFHztMJvAI.mft (raw, json)
Hash identifier:          DEFPYX1ORtuZiU/DK4bK+uyzgT9xUq6xOG6p1TwiDCk=
Subject key identifier:   B6:08:A3:54:93:71:FE:54:5B:E8:D0:42:D7:FB:14:66:A2:4C:7D:A4
Authority key identifier: E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02
Certificate issuer:       /CN=A91EC46B/serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02
Certificate serial:       06DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
Manifest number:          06D4
Signing time:             Mon 22 Dec 2025 21:20:22 +0000
Manifest this update:     Mon 22 Dec 2025 21:20:22 +0000
Manifest next update:     Mon 29 Dec 2025 21:20:22 +0000
Files and hashes:         1: 5P3k1jhc-jqHPsReepFHztMJvAI.crl (hash: R4yzXzL5KCrTj0jdwrQWmN0P6XMTbjAECh2KubjNSAI=)
                          2: 18ED6F18862211EB99005123C4F9AE02.roa (hash: 90VtaliYuYSpWhN/aywXhHAjbblGVidwwylxbvYodJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl
                          rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757 (0x6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC46B, serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02
        Validity
            Not Before: Dec 22 21:20:22 2025 GMT
            Not After : Dec 29 21:20:22 2025 GMT
        Subject: CN=6949b616-2116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:4f:02:35:e8:0c:1a:cd:5e:9e:35:8b:bf:
                    7c:f0:b5:f4:d4:46:16:d2:04:57:0f:0b:49:11:a7:
                    47:d1:0b:41:7d:83:c4:15:c6:99:00:01:65:42:d4:
                    9d:e7:7e:a2:74:6d:32:58:03:65:e5:47:54:a8:7f:
                    de:71:2f:ac:98:01:16:9c:f0:56:99:2d:3e:9c:49:
                    35:e4:04:fd:cd:3a:5c:bc:58:40:6b:4a:e6:9a:27:
                    87:e6:77:96:76:d2:63:7f:ac:8f:98:44:c9:8c:ae:
                    7d:05:d1:4c:b9:99:d2:32:86:15:af:10:38:8b:b2:
                    05:a0:57:34:0a:60:2f:20:89:43:db:c4:84:4a:eb:
                    59:d4:c8:8d:37:3b:f3:98:dc:b1:db:4f:e4:3e:0b:
                    7d:b9:6d:df:81:d1:20:19:3e:1f:68:d7:27:94:91:
                    96:8b:c1:c7:ee:5c:80:29:91:15:fb:9f:27:d1:e1:
                    d3:6c:e9:5b:e6:c8:c4:6b:64:13:3f:0e:65:84:23:
                    e8:6d:63:ea:40:f0:ce:f9:e9:22:3d:63:8e:54:17:
                    2f:9f:5c:ef:4f:31:b1:85:29:2a:e9:94:33:0a:cf:
                    34:24:ba:34:0a:e6:12:b0:63:b9:c3:6b:92:61:ae:
                    3e:f8:1c:ce:b6:79:1a:46:94:76:f6:c3:85:f7:6f:
                    6f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:08:A3:54:93:71:FE:54:5B:E8:D0:42:D7:FB:14:66:A2:4C:7D:A4
            X509v3 Authority Key Identifier:
                keyid:E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a8:9f:39:32:8d:41:38:f5:0f:34:a1:26:00:e5:13:87:62:
         e7:b7:f2:4d:4f:76:aa:9d:f1:a6:7f:ba:df:fe:a7:a7:43:cd:
         73:42:f7:65:af:4e:cc:fb:e0:22:ce:fd:55:85:0f:fe:46:7f:
         8e:3b:dc:b2:e7:0e:e6:72:51:25:27:1a:f2:05:91:6d:0d:1a:
         24:49:83:bc:4b:f1:f4:54:15:00:cd:72:cd:d3:3b:49:07:1c:
         04:3b:6f:a7:f6:f0:5f:d0:41:18:70:90:66:a1:97:05:ec:75:
         94:8d:01:d5:1e:dc:8e:53:1f:a5:ee:2a:2f:74:57:cd:f5:06:
         99:60:b6:74:4d:fd:f1:04:91:86:aa:d7:20:b5:cb:b1:3b:05:
         e9:4c:01:4c:00:74:c6:3d:b1:6c:a3:04:ee:fa:ad:fc:3d:55:
         df:dd:71:32:31:65:f6:1e:5b:34:ee:0c:a1:af:11:e6:8c:11:
         d6:d9:49:ab:45:98:ad:02:97:6d:d8:f4:74:36:e7:f1:75:94:
         75:b0:de:4d:3d:fd:b7:69:1a:6d:e5:f5:6d:a1:7d:bf:90:2b:
         a4:22:36:d9:5a:31:a0:21:00:a3:be:6c:7f:35:ab:eb:a6:aa:
         28:59:4d:b0:19:b4:9e:73:6b:d1:58:67:4c:d3:e1:4c:9c:26:
         c4:fc:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:42 2025 by rpki-client