This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File:                     1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier:          HUpJWTPCIS/HLju/ede60Z5mWnUGURg7E2AaD7FHofc=
Subject key identifier:   9C:98:04:62:C7:42:F3:D0:D6:8A:BA:56:B6:11:50:95:4C:8D:28:52
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer:       /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial:       04E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number:          04D9
Signing time:             Thu 18 Dec 2025 23:08:55 +0000
Manifest this update:     Thu 18 Dec 2025 23:08:55 +0000
Manifest next update:     Thu 25 Dec 2025 23:08:55 +0000
Files and hashes:         1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: 6G5NWLpzkqXbFM/JeIZdmiPdaAmiVtI+hJAihHcnBNw=)
                          2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
                          rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1248 (0x4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
        Validity
            Not Before: Dec 18 23:08:55 2025 GMT
            Not After : Dec 25 23:08:55 2025 GMT
        Subject: CN=69448987-0f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:b9:c5:63:54:ed:96:fd:e6:db:9e:d9:e4:
                    bb:6c:70:49:5e:dd:aa:17:7a:cb:40:2a:e1:33:e3:
                    f0:4d:05:8a:ab:d3:68:76:a6:59:07:df:fb:48:20:
                    0f:7b:32:5b:04:22:33:95:38:20:26:c1:e1:f2:9b:
                    8c:1c:fe:bb:9e:14:51:85:b6:f9:b6:eb:50:cd:33:
                    4e:12:5f:d2:7a:5e:89:fe:9e:0d:64:7d:0f:95:e8:
                    03:f5:c1:7d:18:3f:c3:01:fa:e0:a1:f4:c0:14:09:
                    a5:6c:17:5b:c6:6b:1e:92:34:74:b3:ca:75:58:0d:
                    f3:f8:90:0f:69:e0:c5:5a:61:0b:0e:eb:77:5e:64:
                    76:fc:99:1c:9a:96:08:80:47:bc:5d:43:db:cf:ed:
                    ea:f8:5e:25:b8:f2:f8:f9:0b:4b:aa:5f:7c:24:80:
                    db:f2:1f:16:04:18:a0:60:47:b9:00:09:85:c8:26:
                    47:0a:2b:39:c3:c8:55:ba:52:3c:8b:00:ee:2f:04:
                    9a:6b:6d:df:ee:1d:55:ae:cb:fd:43:70:3a:70:f1:
                    d6:e5:81:2e:68:a2:b1:e3:5a:e2:31:87:18:f8:de:
                    90:fc:b3:74:79:28:78:6c:80:6f:2f:a4:ba:7d:cd:
                    49:7a:d8:83:9b:a0:7f:59:98:51:14:d1:3a:94:ab:
                    c8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:98:04:62:C7:42:F3:D0:D6:8A:BA:56:B6:11:50:95:4C:8D:28:52
            X509v3 Authority Key Identifier:
                keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:40:a5:c5:1b:0f:32:90:a9:48:35:1d:9a:b1:64:ba:a5:81:
         af:61:5c:11:71:3d:26:6e:ca:3e:0a:45:65:fa:ec:34:5e:80:
         ac:2e:c2:b2:e3:01:7f:b6:2d:dc:82:3d:68:d9:40:b7:18:54:
         1e:71:b5:78:4c:7f:d1:84:d6:09:a2:38:48:aa:bc:c1:46:73:
         58:d7:49:d9:dd:f5:41:81:9a:ac:6d:76:85:50:43:5f:4f:a0:
         49:0c:e2:a9:47:40:c1:bd:19:67:d4:de:2a:53:91:83:86:1c:
         55:e3:f8:f6:d1:0c:15:e5:01:33:12:2e:86:b1:91:a5:50:b5:
         be:ec:04:0e:8f:13:a6:10:5d:bf:8c:53:df:9a:6f:40:78:23:
         41:0a:78:bc:0a:c2:d7:3c:a3:32:33:17:3a:d5:59:be:ff:a4:
         88:66:d5:17:cb:dc:47:d9:58:8f:5a:61:c3:3e:7c:a9:80:47:
         53:ca:59:85:05:78:d2:24:6d:47:68:d8:0b:10:d7:af:01:4c:
         5d:f4:96:91:94:b2:a1:db:16:a2:5e:36:42:f4:4e:7d:b4:53:
         df:d0:52:f4:c4:28:a1:e0:54:a4:f1:1c:28:4a:d1:ba:48:26:
         5c:1a:86:dc:ee:a7:0b:5f:74:4a:37:8e:56:df:79:15:ec:4f:
         b6:94:e8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:38:43 2025 by rpki-client