This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
File:                     aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json)
Hash identifier:          V7eIA+sGGO9ZSkKVTCuw2TPDEb7iIBMqEKQkS3h/PIQ=
Subject key identifier:   53:71:0A:44:B4:80:10:70:A0:3E:0A:AA:17:4F:9B:46:C1:6F:5D:AA
Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
Certificate issuer:       /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Certificate serial:       06C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
Manifest number:          06C1
Signing time:             Mon 22 Dec 2025 21:27:18 +0000
Manifest this update:     Mon 22 Dec 2025 21:27:18 +0000
Manifest next update:     Mon 29 Dec 2025 21:27:18 +0000
Files and hashes:         1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: gIHDX+AOjN5JRf/p/D6Ai4pAeguCdJIigiafXQlhQu8=)
                          2: 9BC411EEA03F11F094CBF530C4F9AE02.roa (hash: WA/tDmga3l8gZvc4ZjpwlBlP3nDfqhnwsfFvTM1otOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
                          rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737 (0x6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
        Validity
            Not Before: Dec 22 21:27:18 2025 GMT
            Not After : Dec 29 21:27:18 2025 GMT
        Subject: CN=6949b7b6-aca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:90:34:de:61:50:c6:18:46:63:25:62:7e:
                    0a:d1:34:10:34:e1:e3:6f:8b:95:fe:be:0a:47:2c:
                    f6:42:76:31:b8:01:c3:62:b0:5c:21:24:fb:3a:ea:
                    23:9c:1d:db:86:f9:54:6f:78:ed:80:16:fb:85:bf:
                    78:51:8d:66:62:48:a6:6a:a3:43:8a:5a:0f:7e:30:
                    fd:36:32:7f:fa:eb:3a:09:34:a6:46:d4:3c:db:da:
                    67:7a:ae:0c:b9:db:fb:89:03:e4:e7:1e:1a:9c:04:
                    96:a3:a1:74:ec:0b:03:32:34:1a:1f:25:6c:71:27:
                    f5:da:15:b8:39:6d:7b:6f:e5:66:d0:5e:82:20:56:
                    07:4a:35:8c:40:ab:6e:d1:eb:80:e2:8e:0e:b5:2d:
                    f1:c9:dd:3d:98:55:9d:a3:a6:98:d0:a5:7d:94:62:
                    0f:86:26:01:b3:6c:3c:e3:a2:02:a7:cc:e1:7d:f5:
                    42:a3:d0:9b:4d:46:82:23:bc:e1:12:5c:ce:a0:17:
                    f6:08:94:57:6b:47:c9:65:c6:a6:db:c7:85:f5:b3:
                    93:be:4a:c6:09:de:32:a8:66:ad:5e:f6:f5:7c:45:
                    7e:06:4c:b9:00:b8:a1:7d:44:7c:d3:e0:c7:14:28:
                    ce:b5:65:b1:e7:a8:f3:54:d0:32:52:c6:9f:52:f1:
                    40:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:71:0A:44:B4:80:10:70:A0:3E:0A:AA:17:4F:9B:46:C1:6F:5D:AA
            X509v3 Authority Key Identifier:
                keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:32:39:52:47:5d:6a:5b:e6:14:a6:40:51:cf:b0:9f:c8:20:
         ef:f0:65:6e:58:1d:bb:68:3b:f7:2a:3f:19:11:e9:3d:70:0f:
         23:39:9d:8d:65:b0:9c:d6:3e:f6:0c:81:87:2f:89:d1:0e:35:
         a6:34:bf:08:85:e7:64:e0:ea:93:6e:03:10:15:31:19:38:12:
         2c:c2:b2:f1:3b:e8:a9:7b:c6:0d:73:f6:bb:4f:ba:ac:70:66:
         df:0f:1a:c0:f7:9b:c1:7e:15:9f:b5:b7:47:6f:66:6e:6e:29:
         ae:b1:65:ab:01:13:b6:b3:a5:f8:4f:db:04:18:0d:6f:ca:47:
         67:22:b9:e7:46:6d:ac:8d:bf:05:dd:f9:d0:c1:8c:1f:10:71:
         0b:ef:89:31:9a:1d:02:34:63:88:10:76:99:d6:46:99:57:c3:
         06:ca:77:2d:da:6b:b6:6a:4e:80:ea:45:c2:69:4d:10:5f:05:
         27:ea:db:18:fd:e5:3a:77:db:06:f8:eb:31:bf:5b:1f:60:b4:
         97:5f:c6:df:9c:20:ea:af:36:c4:cf:67:15:19:98:b4:c5:28:
         81:9c:e7:6c:2d:0c:60:47:93:9c:5f:d7:d8:51:99:be:ed:7a:
         39:87:ce:b2:e3:08:69:fd:aa:cb:07:39:37:ed:dc:d5:92:bf:
         53:0d:d1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:51 2025 by rpki-client