This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
File:                     v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json)
Hash identifier:          eiIe3orewKtQ6BEdp52HKUPp5fRKTOd4rkVUsp6FOik=
Subject key identifier:   E9:81:65:40:F2:CC:C8:E2:CD:36:19:AC:6B:AB:BE:DB:0F:FA:97:24
Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1
Certificate issuer:       /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1
Certificate serial:       06E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
Manifest number:          06C4
Signing time:             Mon 22 Dec 2025 21:38:43 +0000
Manifest this update:     Mon 22 Dec 2025 21:38:43 +0000
Manifest next update:     Mon 29 Dec 2025 21:38:43 +0000
Files and hashes:         1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: Lsvzy8da7jhX7bNeW7UXGIhTdOIb5FSPAiPhNzLNU0g=)
                          2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: qwmxlndqpG7JrumB4z3O6rcTC15p9htgSuxchg773a4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766 (0x6e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1
        Validity
            Not Before: Dec 22 21:38:43 2025 GMT
            Not After : Dec 29 21:38:43 2025 GMT
        Subject: CN=6949ba63-2041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:79:e2:0e:6f:e8:ff:dc:39:5d:77:8b:00:
                    0d:e6:25:20:03:1f:10:b1:e6:cb:d3:ef:e0:35:ed:
                    a2:d8:31:cb:a3:44:be:f2:f8:a2:9d:5b:08:55:68:
                    77:c7:80:19:3f:a0:11:54:53:6c:2b:fa:7a:86:5b:
                    e8:c1:ab:e2:23:d7:c3:f3:7b:4a:db:b3:b1:03:dc:
                    ca:2d:99:5c:29:91:0c:b4:67:f5:0b:dd:84:95:f0:
                    a9:5d:28:e6:be:74:23:19:46:8b:1d:f3:6c:6b:40:
                    a8:02:c1:0a:68:d6:83:4d:8e:0a:e7:9f:99:9a:10:
                    41:4f:02:5c:fb:f8:37:82:d2:27:35:4d:4f:dc:8b:
                    c4:4c:6d:13:13:d5:30:7d:ad:cd:a1:14:0a:38:f9:
                    73:c9:61:f7:48:32:e4:4b:40:f0:81:fe:c3:aa:e4:
                    cb:f7:ef:4a:30:28:87:0e:3e:55:ec:44:43:f1:1f:
                    e8:a4:ef:5d:e0:2b:62:65:2c:16:9e:88:09:9f:a4:
                    51:4a:a8:16:81:e0:11:ea:09:02:f6:1c:b8:28:6b:
                    53:08:01:ad:64:b2:ff:67:f4:57:dc:61:0c:16:88:
                    07:9d:95:e2:49:8c:71:30:4f:3c:7c:c7:77:12:f3:
                    53:ee:73:9c:74:20:6a:1f:bd:8f:15:ab:06:91:53:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:81:65:40:F2:CC:C8:E2:CD:36:19:AC:6B:AB:BE:DB:0F:FA:97:24
            X509v3 Authority Key Identifier:
                keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:93:b0:b3:37:4e:66:f7:5c:d2:ea:a3:f8:eb:d8:27:00:fb:
         a6:5f:05:5d:f0:2c:5d:f0:9e:70:72:15:1d:a1:81:78:b0:31:
         1e:ed:86:cb:2d:51:83:ba:d7:a0:75:08:25:ad:e0:f3:c6:d3:
         de:25:89:b6:b5:81:ac:85:88:43:26:7f:20:09:87:85:6f:1e:
         8a:26:32:f5:0f:45:90:c6:0c:54:b0:73:75:c6:d2:d4:38:5b:
         fc:b8:6f:17:52:a9:7c:18:94:7c:97:67:88:0e:09:2b:b5:7c:
         82:c2:53:96:a8:50:6d:77:80:2c:2b:35:2b:c2:fe:10:dd:52:
         66:7e:3d:04:fc:8c:94:24:86:eb:1b:c8:a9:b5:75:aa:90:a3:
         72:7b:08:53:1f:3b:f5:f6:3e:02:52:6c:af:88:d6:7a:0b:eb:
         f6:4d:31:4d:57:79:34:f7:0d:70:f9:ff:d2:b1:d1:10:c7:76:
         9e:b0:07:de:83:d4:36:86:18:4d:7e:37:21:52:bd:6b:f5:8b:
         aa:1f:fd:72:83:7d:3a:0b:d9:04:eb:c1:62:6f:4f:7a:fd:22:
         85:7c:c3:42:e3:8b:55:17:ec:20:33:92:28:9f:ae:29:49:73:
         32:dd:fd:4a:6e:43:87:9e:fe:29:b3:0c:5d:53:70:b9:01:18:
         15:3e:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:06:24 2025 by rpki-client