This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
File:                     _MUE2ks5jGbdvyw5K3UZzJDBoQk.mft (raw, json)
Hash identifier:          kZPr4H6R7iONxt1RhCGqCV2ZcRZ2Bg8kVjyZ347p+Mg=
Subject key identifier:   4D:14:89:75:B9:3B:84:D0:84:FE:BC:64:BD:36:80:29:26:1B:B9:85
Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09
Certificate issuer:       /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109
Certificate serial:       09DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
Manifest number:          09D5
Signing time:             Thu 18 Dec 2025 19:30:32 +0000
Manifest this update:     Thu 18 Dec 2025 19:30:31 +0000
Manifest next update:     Thu 25 Dec 2025 19:30:31 +0000
Files and hashes:         1: _MUE2ks5jGbdvyw5K3UZzJDBoQk.crl (hash: dFeBhMzxbu8+5JGOrZEvEBPVPJ73mbdsf3qjzqlzphk=)
                          2: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (hash: xa2e2Chwv4yeL7fHM+A196uDscfEXGZLiMt2MCiQxb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl
                          rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2524 (0x9dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251EF, serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109
        Validity
            Not Before: Dec 18 19:30:31 2025 GMT
            Not After : Dec 25 19:30:31 2025 GMT
        Subject: CN=69445658-097e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:a6:5e:a6:3b:a6:db:d2:de:e1:64:37:25:
                    5e:23:45:5c:ed:d4:df:ce:2c:1d:3e:ed:9d:50:3b:
                    50:af:b2:e4:15:18:92:23:55:e4:26:6e:31:8f:a7:
                    fc:e8:69:50:f1:44:8f:15:a7:d1:cf:6d:5c:57:ca:
                    cb:99:50:41:1f:80:52:7f:e9:4f:4b:82:db:fb:3f:
                    e2:1b:ed:b0:c4:51:23:c2:58:7b:e5:0d:6b:50:e9:
                    78:6c:bc:11:e4:8b:89:a2:64:ac:3c:9e:eb:cd:90:
                    5f:fe:c9:05:ce:16:cf:4e:63:12:66:7b:c9:3b:7e:
                    b0:af:34:b8:8d:5c:32:89:df:28:36:14:34:60:9a:
                    49:b9:75:a8:71:a4:e0:2e:10:0f:35:02:5e:df:aa:
                    47:67:36:5b:f9:a1:cf:14:22:56:d3:5b:b9:f1:6b:
                    7b:15:50:9c:a6:0f:58:4e:8b:e5:58:1b:a9:81:1e:
                    3d:d1:2a:8b:89:87:fe:eb:b2:89:1f:2d:66:40:a8:
                    a5:a9:cb:ee:a8:64:c3:4e:55:f5:5a:56:63:a8:c1:
                    04:62:42:99:f8:59:69:49:6b:55:f2:35:36:c8:11:
                    48:8e:b2:b7:3d:b2:c7:35:20:2d:ba:72:d0:cf:86:
                    cf:2c:07:3f:a1:ab:46:a1:eb:14:00:63:3e:fc:7b:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:14:89:75:B9:3B:84:D0:84:FE:BC:64:BD:36:80:29:26:1B:B9:85
            X509v3 Authority Key Identifier:
                keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6b:4d:6d:c6:73:6b:99:b1:4c:cd:79:69:7b:d5:bd:16:bf:
         7f:ea:c6:6f:4a:ba:3c:d2:74:69:f1:a9:b4:ac:ad:96:44:bc:
         db:bc:1d:21:b8:33:67:f1:ed:3e:2f:70:31:80:bf:a4:4e:11:
         23:8f:a7:2b:a3:c4:7f:57:5b:ed:e3:09:82:46:cd:82:c1:db:
         30:9b:40:e4:4d:f3:61:0c:dc:93:7e:d8:0b:af:49:df:9d:b6:
         4a:cd:ef:f3:32:60:28:78:21:d7:61:30:fe:2f:93:11:4d:b8:
         36:c9:f1:8a:d3:ec:e9:ee:75:55:94:69:35:51:d8:dd:bf:2c:
         21:14:b1:94:95:0d:40:c8:58:3e:b5:e6:09:fc:62:a8:eb:c6:
         cf:1f:f9:39:6f:77:b2:e6:14:40:de:f9:6f:a5:21:3c:de:a4:
         1c:c8:36:dc:7a:b7:f8:18:a7:3d:b8:b5:7c:af:ce:76:a0:32:
         c4:83:1d:0e:c9:ef:9c:43:dd:41:85:9b:eb:cf:53:3d:47:59:
         bc:bc:0a:e5:85:57:ed:1d:dd:97:ed:05:32:cd:2d:3a:62:a5:
         c8:9c:19:c2:55:0a:bf:28:86:f7:67:25:e5:11:fe:cc:28:c0:
         35:06:32:7b:7f:07:83:e3:e5:de:7c:45:a7:d0:6c:01:1b:90:
         f7:29:58:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:39 2025 by rpki-client