This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
File:                     _utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft (raw, json)
Hash identifier:          oB8tY5wtOnePiT9OPU6WYjC2DWAsyZqdA6JW59WuTVg=
Subject key identifier:   26:57:71:83:62:FD:3F:23:79:03:3B:37:4D:9D:BE:0C:98:EB:3E:61
Authority key identifier: FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4
Certificate issuer:       /CN=A9128F1E/serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
Manifest number:          91
Signing time:             Tue 23 Dec 2025 05:26:17 +0000
Manifest this update:     Tue 23 Dec 2025 05:26:16 +0000
Manifest next update:     Tue 30 Dec 2025 05:26:16 +0000
Files and hashes:         1: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl (hash: gzrYVB7zGLc9oyiO77W8+Ub+/K0eQXc1BOUsDCPp17U=)
                          2: FC25E548019411F0A44E3285C4F9AE02.roa (hash: OOiuBnmO2r+s7R41Nu9crqcm0POtH9RoB3Tt79fatwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl
                          rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128F1E, serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4
        Validity
            Not Before: Dec 23 05:26:16 2025 GMT
            Not After : Dec 30 05:26:16 2025 GMT
        Subject: CN=694a27f9-d500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:23:3c:f2:45:7f:47:2f:33:2a:42:ae:f2:
                    fa:16:6b:9f:ef:87:57:71:5f:69:cc:d0:57:a6:fb:
                    51:b6:47:42:6f:df:98:68:f7:b4:ba:8c:4e:86:ca:
                    79:ac:d8:43:36:a9:c1:2a:33:ee:14:91:7c:45:72:
                    55:77:f0:9b:68:b6:37:44:d1:0d:92:06:65:67:0e:
                    fa:3c:36:62:43:61:1b:93:26:dc:6b:5d:05:4c:ba:
                    57:97:3d:ba:5f:58:51:ed:ca:85:dc:67:84:22:2d:
                    18:82:e9:ad:60:7d:b1:e4:cc:5b:d6:3b:60:5f:4c:
                    30:6a:ee:fc:71:94:9e:a2:3b:8f:75:c2:8c:cb:e7:
                    3c:73:ad:fc:25:03:f2:2d:0d:84:d8:64:21:cf:48:
                    78:00:dd:62:ba:c9:82:7f:8d:93:a3:a2:b3:6e:da:
                    e7:c7:39:32:e5:6f:b0:d2:ff:6a:cb:f4:08:db:b2:
                    6e:c8:f1:1f:e3:f7:34:7d:51:49:bf:fe:9d:dd:91:
                    76:0c:2d:24:b9:5e:a2:d2:a9:fe:25:db:db:37:9a:
                    18:99:41:bd:e6:3f:59:54:9a:7d:4e:3c:ec:51:a3:
                    bd:85:2f:a5:2b:9d:be:0e:2d:7e:44:6c:2c:8f:95:
                    cc:3e:83:3c:be:93:2b:26:b0:f9:ea:a4:69:82:d1:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:57:71:83:62:FD:3F:23:79:03:3B:37:4D:9D:BE:0C:98:EB:3E:61
            X509v3 Authority Key Identifier:
                keyid:FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:11:49:01:f1:94:97:7e:57:9a:31:ef:c4:bf:b3:9a:68:31:
         9c:29:9a:2a:e2:33:16:81:24:26:42:7a:2e:00:87:57:fd:4c:
         bc:71:57:13:d1:d7:67:9e:23:44:36:64:87:0e:b4:7b:88:f3:
         8a:42:68:36:8b:5b:98:88:ce:ab:5f:15:63:6f:85:b3:b9:55:
         6f:0f:34:d7:7b:b7:c2:44:21:c1:da:cc:c4:c7:d3:21:bd:52:
         ea:37:27:93:df:e9:79:5b:35:2c:95:53:01:d1:89:a3:14:3a:
         1a:4f:28:49:c6:ff:82:28:0d:50:c0:c0:e9:85:1c:1b:ba:91:
         af:e4:ce:36:b5:f0:32:52:d6:ee:4b:e4:e4:19:be:7c:e7:c0:
         76:fb:6a:ce:a4:2b:d7:c5:65:58:6f:64:fb:35:9f:36:0f:24:
         cc:b4:f3:3c:17:2c:05:98:89:b7:14:9f:a0:1c:77:2a:04:2b:
         0e:14:fe:74:82:d3:c8:e1:97:8a:ce:c7:83:fe:54:60:d9:c7:
         14:35:cb:ea:41:85:e0:77:a0:cb:06:0c:9f:f4:34:31:7d:16:
         a0:f2:9c:a5:1f:c0:65:7f:f2:3e:cf:38:b1:31:f3:b4:a3:d1:
         b4:17:27:69:77:e9:e8:e8:bb:ff:1b:13:82:05:22:6c:43:c1:
         07:39:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:56:28 2025 by rpki-client