This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
File:                     091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json)
Hash identifier:          Ii4vbWuDgcfMZWJaQS140If7+Do9qbGv6/XKuTOeYcg=
Subject key identifier:   61:53:20:C8:6A:09:12:13:4A:2B:7F:23:36:19:51:98:82:13:5E:54
Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3
Certificate issuer:       /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3
Certificate serial:       0C07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
Manifest number:          0C00
Signing time:             Thu 18 Dec 2025 18:31:45 +0000
Manifest this update:     Thu 18 Dec 2025 18:31:44 +0000
Manifest next update:     Thu 25 Dec 2025 18:31:44 +0000
Files and hashes:         1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: C4e3J3VQ25x3gHN9EBMZST7r5EMuUToj/68EbiiCf6U=)
                          2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: iz8rOu7sc7+N3/1kzdgDjJg5F86O0Z4mGrtUPPC8sj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl
                          rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3079 (0xc07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3
        Validity
            Not Before: Dec 18 18:31:44 2025 GMT
            Not After : Dec 25 18:31:44 2025 GMT
        Subject: CN=69444891-f23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:86:c1:8b:98:dd:2b:f4:bb:0a:2f:ec:75:
                    45:90:31:19:64:cc:4b:4b:6b:ea:53:c6:47:a4:35:
                    4c:de:7c:90:a0:91:92:ce:d9:36:32:e4:a7:51:24:
                    43:7d:e6:57:74:20:a2:47:ca:9d:ec:20:e6:5f:92:
                    89:a2:76:f5:94:8f:df:0c:96:73:11:7d:52:41:2c:
                    de:bc:45:36:4d:6d:e4:32:01:c0:99:ee:af:4d:18:
                    14:60:83:a4:41:fc:50:6f:10:d9:d6:df:b7:60:1a:
                    6b:66:1a:57:ad:c3:21:ab:8f:64:07:64:48:76:5d:
                    fd:4a:52:21:fc:ef:67:27:c8:8f:1a:6a:f9:72:de:
                    25:a8:c1:ed:7f:b4:a5:ae:46:a3:95:6b:02:ba:4b:
                    df:88:65:cd:d8:20:52:8c:47:4a:ac:c6:38:0d:3d:
                    f5:8f:43:32:71:94:59:a3:5c:f2:e9:b4:33:db:84:
                    2c:1b:30:cb:80:23:98:22:82:92:9c:e9:60:ff:f6:
                    6b:6f:c9:ae:1f:5b:63:46:af:63:75:3d:b7:df:ad:
                    c9:04:ce:93:d5:4f:b7:45:30:f4:8b:2c:15:e4:c6:
                    41:e4:7a:c7:ae:39:29:47:a7:6f:79:04:6d:da:6e:
                    87:9f:ff:a2:3f:85:42:47:a1:66:6c:ca:33:02:c2:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:53:20:C8:6A:09:12:13:4A:2B:7F:23:36:19:51:98:82:13:5E:54
            X509v3 Authority Key Identifier:
                keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:85:22:06:3b:22:62:bc:41:f7:28:c7:72:26:20:ce:ba:9a:
         db:49:2c:01:ba:b8:e8:3b:3d:01:a6:00:91:23:6d:bf:77:6f:
         36:df:91:26:7d:ee:bd:db:84:02:83:3f:18:db:12:85:cd:b3:
         b2:3b:bc:9f:57:5e:7a:66:f6:07:90:fc:77:4b:41:c5:ce:b0:
         36:e7:1f:ef:68:f6:e1:4d:d9:ae:2c:60:63:3d:50:98:48:cb:
         82:14:f4:e2:63:6b:eb:10:ac:83:f6:c2:2f:d6:1d:e9:7d:a1:
         5c:1c:6b:8e:6d:3e:10:29:57:36:74:20:7f:f2:d3:da:19:06:
         af:b7:ef:02:46:ab:8c:93:a1:70:82:ca:ba:67:e0:b9:64:11:
         16:16:55:37:3a:17:1f:03:7a:93:cf:24:1a:88:79:13:19:2e:
         c6:b7:bf:75:67:16:ff:2e:99:94:ae:7f:25:a5:e8:1f:88:f9:
         67:6c:76:ff:6f:56:3c:95:7d:b6:a7:5f:7c:25:01:fd:a8:1e:
         88:7d:3f:e1:3d:ad:47:27:20:c4:92:92:38:5c:3a:a4:48:6a:
         d9:52:f2:b9:53:6e:41:91:9b:1a:65:1f:5f:45:0c:3b:62:1e:
         e6:38:d3:23:3d:37:e1:90:2e:5d:ef:3a:4c:73:d4:d7:be:10:
         49:55:88:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:34 2025 by rpki-client