This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
File:                     R2e2k72EYu6vqD2egDydKGtiHcg.mft (raw, json)
Hash identifier:          tOOt8pd5jFxxoQgGqDbCZcqLKGoNbP6MYezPHugZpU4=
Subject key identifier:   63:BB:9E:DA:B9:90:A0:93:44:F6:F0:B8:E6:CA:92:5C:D1:7B:59:D9
Authority key identifier: 47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8
Certificate issuer:       /CN=A91F9B6C/serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
Manifest number:          99
Signing time:             Tue 23 Dec 2025 05:21:52 +0000
Manifest this update:     Tue 23 Dec 2025 05:21:51 +0000
Manifest next update:     Tue 30 Dec 2025 05:21:51 +0000
Files and hashes:         1: R2e2k72EYu6vqD2egDydKGtiHcg.crl (hash: DtYSlw8Rp4bF5/JdK7ZTlPsa2fo7dsbLQ8etaxHoqeQ=)
                          2: 3D60B6FCFA5E11EFB84AF068C4F9AE02.roa (hash: yLFkoGvAUsdVN5oxAs3J8MXs+0h1YiH2nhkES11B0AE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl
                          rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9B6C, serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8
        Validity
            Not Before: Dec 23 05:21:51 2025 GMT
            Not After : Dec 30 05:21:51 2025 GMT
        Subject: CN=694a26ef-b423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:00:ec:a3:53:2b:d2:e5:7d:0c:16:52:f7:
                    8e:55:02:04:a4:fa:27:1f:35:26:92:c0:3a:96:c9:
                    75:7a:8d:d5:c3:48:0b:ce:e8:ed:a2:e9:d6:c4:5d:
                    ed:46:c4:40:ac:e7:52:86:d3:be:6a:9a:85:b7:ad:
                    d4:26:76:68:63:fb:2f:f6:33:dc:fe:a9:0a:14:57:
                    9c:09:04:c1:d7:5f:b4:26:be:63:a8:a8:e2:48:58:
                    7f:42:66:4e:cb:dd:73:bc:2a:3a:8a:30:88:e2:ee:
                    8d:9c:97:15:02:1b:48:da:66:bf:b0:42:d7:84:e6:
                    c1:dd:80:82:64:77:99:d4:1c:12:f3:f5:b0:22:fd:
                    04:66:33:74:28:f5:c0:13:d4:94:a7:21:17:9b:63:
                    83:1f:89:a4:91:69:cd:86:91:fa:21:82:66:38:f7:
                    8e:41:d2:e8:81:7a:12:26:21:60:6e:a5:4e:4f:43:
                    ba:1b:98:52:50:66:ba:6d:de:e9:14:aa:07:76:b6:
                    6f:74:25:ef:75:c6:80:93:aa:d7:c0:e9:b0:c6:ed:
                    10:7d:42:1a:7d:00:d8:48:5c:29:46:7e:a9:c8:39:
                    b6:d8:25:bb:d0:43:d8:f2:d6:f0:6f:dc:c4:52:c8:
                    1a:26:34:97:8f:91:07:13:c8:a2:1d:9e:a7:b4:7c:
                    84:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BB:9E:DA:B9:90:A0:93:44:F6:F0:B8:E6:CA:92:5C:D1:7B:59:D9
            X509v3 Authority Key Identifier:
                keyid:47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:c5:43:58:86:8e:73:91:24:61:3f:19:c7:38:89:18:2f:
         91:b1:b5:ed:d4:77:4e:f3:c9:bc:ed:8a:e5:bb:f7:b1:68:71:
         ad:74:bc:f1:f9:ee:3c:e0:08:ad:57:24:60:93:bb:57:d7:48:
         33:30:cf:4d:b0:94:b3:28:a6:ca:ff:a5:4f:a4:1d:2d:a7:0d:
         8c:82:ec:a9:57:96:4f:ba:44:fa:42:fc:88:4c:79:b6:ea:3c:
         21:46:73:09:d6:e5:f7:eb:e2:f3:7b:2a:f7:03:de:25:4c:4b:
         81:99:d6:65:71:2e:b1:50:4f:c9:3a:93:b5:d7:13:e2:19:85:
         64:12:09:f6:1a:0e:ff:e0:f6:45:23:bf:6b:6f:a6:65:44:63:
         bf:9d:58:9c:92:29:54:8e:6c:11:2d:40:34:a0:34:10:99:b7:
         0f:1c:fb:11:b4:25:14:34:28:7f:a8:a4:26:de:b9:ea:c7:d7:
         8b:4e:fb:74:4f:2a:36:ce:8c:09:66:15:be:83:ac:4d:68:97:
         51:79:10:6d:c6:4d:95:7f:a6:38:93:ca:45:93:0f:ef:61:fa:
         c1:a5:67:8d:b5:86:a8:ec:5a:c2:30:03:62:41:d8:74:c2:3c:
         61:79:53:2e:12:bb:05:bd:d6:27:d0:1e:4c:29:72:60:05:03:
         49:30:21:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:44:59 2025 by rpki-client