This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
File:                     Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json)
Hash identifier:          bTovqUHAOO7nzQ9b+CT2/OLXCEALb9Zl1Ugm2FhbbgE=
Subject key identifier:   EC:53:E0:65:C2:87:AF:E2:9A:06:6F:7E:56:61:47:75:30:87:24:A2
Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Certificate issuer:       /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Certificate serial:       0C1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
Manifest number:          0C18
Signing time:             Mon 22 Dec 2025 18:19:58 +0000
Manifest this update:     Mon 22 Dec 2025 18:19:58 +0000
Manifest next update:     Mon 29 Dec 2025 18:19:58 +0000
Files and hashes:         1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: 6ujlKmlfTQqgfM17zGuWWKRn/Q8wYTeAvFmWUjmQbZg=)
                          2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: Jvoa2wjsCRH9WrHhsgTUNGCatVDEZjWYoT6a8W58UDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3103 (0xc1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
        Validity
            Not Before: Dec 22 18:19:58 2025 GMT
            Not After : Dec 29 18:19:58 2025 GMT
        Subject: CN=69498bce-0b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:68:d7:ad:b9:00:c9:8e:93:21:99:80:44:
                    73:ad:78:63:ab:ca:33:bc:89:8e:a6:aa:e8:f6:14:
                    6b:aa:a1:47:cf:73:f0:0c:03:27:21:6b:88:2b:ad:
                    b7:bd:8d:a8:6b:ca:28:b8:46:6b:33:5b:6c:11:c1:
                    41:da:ed:55:19:3c:e7:d7:77:bc:a6:e8:4e:ee:6d:
                    d5:df:de:d3:62:81:c3:ea:52:3c:84:94:94:a4:74:
                    80:70:ac:8e:f9:da:65:ab:5d:94:91:f2:10:0b:45:
                    9d:b8:73:07:72:a4:fe:85:26:d6:b3:25:46:7d:a7:
                    f2:ad:3f:7a:06:11:85:2a:89:5d:8b:e5:a8:80:18:
                    2d:8e:9c:b6:e7:f9:46:54:03:60:af:24:00:b2:26:
                    23:46:3c:ab:ff:50:c9:29:64:e7:1d:f0:39:68:17:
                    15:f6:6a:42:68:82:26:9f:1c:99:d6:00:05:9f:59:
                    17:f6:cd:42:05:8b:85:11:6b:00:13:82:77:98:11:
                    c2:2b:e1:eb:80:58:80:da:28:3d:f2:43:d9:74:c8:
                    f8:d3:7d:47:b3:4a:2d:cd:a0:88:4d:41:49:c9:44:
                    94:52:d1:f5:9c:02:ec:fc:8c:d6:f7:fd:a7:ae:cd:
                    fb:3b:a9:fc:00:03:60:e0:fb:c2:98:37:51:c3:90:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:53:E0:65:C2:87:AF:E2:9A:06:6F:7E:56:61:47:75:30:87:24:A2
            X509v3 Authority Key Identifier:
                keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:72:15:94:f5:40:87:f6:9f:cb:e4:03:eb:3d:4c:7e:a0:
         f8:67:7c:2c:a4:5d:12:a9:3f:9d:87:89:96:02:4d:a6:77:14:
         e0:0c:58:01:53:35:f6:f2:25:72:25:71:c1:0e:53:27:87:83:
         28:f9:2b:b2:2d:1f:4d:63:f8:2a:65:06:03:23:d6:01:de:06:
         f8:ea:eb:5e:7a:a0:08:37:b6:07:55:29:b3:01:9a:03:62:07:
         a8:ad:ba:0e:7c:be:ac:a8:39:3f:e1:da:b5:3c:c0:c0:75:6f:
         98:e3:52:6f:96:3e:3f:94:69:f8:2f:6d:78:81:9e:73:cb:cd:
         34:dd:8f:8d:98:9b:65:34:62:82:b3:8f:f0:30:22:f3:aa:a0:
         ab:e1:9e:94:aa:e8:eb:f5:1a:f5:0b:b6:28:fe:1b:52:7f:48:
         0a:48:05:18:8e:67:b9:27:25:a3:24:3c:0a:9d:3e:63:a5:c3:
         0c:2c:63:14:1d:fe:bf:cf:1f:00:31:bf:20:ad:18:d3:b1:8a:
         f6:10:dd:57:a2:25:ea:e3:35:77:a5:d2:26:a4:f3:79:7c:bb:
         71:d7:ee:52:94:39:84:3f:28:46:9b:96:3b:e3:07:52:ef:45:
         74:9e:33:75:5a:91:4c:06:f6:a4:60:ea:2d:9b:59:8e:85:36:
         8c:30:77:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:40:00 2025 by rpki-client