This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
File:                     1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json)
Hash identifier:          qpIep2lubhyuY8VkisC1QnyM1j8hi0Khs/goC6WIDjo=
Subject key identifier:   42:E2:D6:52:EC:D4:49:5A:24:06:05:CB:82:9D:C7:01:A8:7D:00:DC
Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04
Certificate issuer:       /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104
Certificate serial:       01E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
Manifest number:          01E5
Signing time:             Fri 19 Dec 2025 01:51:39 +0000
Manifest this update:     Fri 19 Dec 2025 01:51:39 +0000
Manifest next update:     Fri 26 Dec 2025 01:51:39 +0000
Files and hashes:         1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: DogugpymJBcYYYq2Zhr+bZKr5x4uNJSyXzGvHENth/A=)
                          2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: /U2wldHiHrPFBo2wVFsGuIVi0YglDoRZcVdncnVvj2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104
        Validity
            Not Before: Dec 19 01:51:39 2025 GMT
            Not After : Dec 26 01:51:39 2025 GMT
        Subject: CN=6944afab-96bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:52:e2:77:93:1a:26:2f:a6:55:2a:67:24:
                    c0:03:a6:74:5f:d3:41:b2:5c:a8:ee:9b:71:b9:cc:
                    04:d3:10:16:2e:a8:f9:fa:21:91:ce:32:17:99:98:
                    84:8e:48:c2:1b:71:ea:28:6f:48:fa:c7:9c:f3:33:
                    67:5b:99:83:e6:5d:59:01:73:d3:50:8a:ec:9f:c5:
                    43:10:a0:4f:97:cb:28:dd:ef:7e:eb:f0:6e:a5:eb:
                    17:90:bc:5c:46:63:c1:a3:cc:76:04:33:c2:00:23:
                    38:14:46:9e:db:8c:90:fb:48:6c:50:08:fe:8d:64:
                    12:40:c2:48:57:ec:b2:b3:15:c1:c8:aa:db:42:d8:
                    57:5b:37:d5:4e:e2:de:9a:07:2c:91:ea:54:4e:1e:
                    29:f6:14:ba:2d:27:b8:69:9b:d3:f2:75:63:98:3b:
                    f1:75:bd:93:02:ed:ed:a9:89:99:e3:a4:de:c7:c9:
                    fa:2c:dd:97:26:ca:ad:5e:07:71:44:9e:6f:65:8e:
                    82:60:85:6a:39:02:7e:9c:1c:d2:7e:ac:7e:8c:c3:
                    b5:e0:b7:38:e5:01:59:42:60:37:49:08:66:b4:7e:
                    95:66:5e:4b:9e:b3:fd:20:6f:c5:25:d0:63:9b:31:
                    6c:19:1b:99:17:80:87:90:05:a7:36:1e:97:6f:46:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E2:D6:52:EC:D4:49:5A:24:06:05:CB:82:9D:C7:01:A8:7D:00:DC
            X509v3 Authority Key Identifier:
                keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3e:17:de:a4:55:bf:fb:83:11:ed:e3:f6:76:f7:4e:47:b7:
         55:3e:9e:b3:cc:ce:f2:dd:ef:c5:dc:c8:dc:64:cc:81:3f:94:
         7a:9c:2a:0e:a9:59:e3:e2:86:8f:33:79:1b:d7:21:5a:4c:83:
         4e:fa:4e:8f:5c:66:3c:94:36:ee:7e:6a:33:6e:d0:b3:01:8a:
         b9:7e:d1:e0:d7:b4:92:85:b7:f7:a6:78:10:42:94:25:ae:b4:
         f4:79:91:4e:3b:c4:d3:18:45:61:ff:c9:b4:86:1f:f7:84:94:
         48:6e:50:c3:47:a9:46:4b:0a:b3:87:52:07:ab:63:82:8e:77:
         35:ed:61:f7:a9:19:5f:58:75:2f:e4:87:1b:08:8f:15:f6:cc:
         d9:9e:5c:c1:87:07:f4:81:e4:f7:96:b0:b1:58:d5:25:c1:18:
         a5:8f:cd:e8:40:b3:ba:a7:e1:87:d8:1d:2f:da:da:ce:b6:5d:
         03:fe:24:33:23:87:a3:6e:1a:83:9a:ca:b9:97:80:17:b6:03:
         52:08:32:a4:e1:e5:71:93:03:74:3f:41:96:78:ba:58:b0:4c:
         96:ec:fa:41:07:73:09:78:26:8a:b7:27:4f:2c:d9:fd:20:07:
         d4:fb:a3:4a:cf:f7:07:9b:6a:69:ea:5c:57:54:a8:53:31:35:
         ea:76:3a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:53:21 2025 by rpki-client