This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
File:                     tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json)
Hash identifier:          FkcymLODhWyXw04WQS7hIlbiZPC8X9ijHqID05aGRNM=
Subject key identifier:   D2:49:C7:D3:18:C6:A0:CD:86:FA:FB:D2:49:A3:35:F6:1F:2F:48:9E
Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F
Certificate issuer:       /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
Manifest number:          90
Signing time:             Mon 29 Dec 2025 05:37:23 +0000
Manifest this update:     Mon 29 Dec 2025 05:37:22 +0000
Manifest next update:     Mon 05 Jan 2026 05:37:22 +0000
Files and hashes:         1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: N7p9FIr3fbGb3EHGkqc8qdj7X1NH833rxgm48GwE8Ww=)
                          2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: 9xmGjx6/ygbzmZES5SPZTo7PpjmH7n67UZFSuthwcDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl
                          rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 05:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
        Validity
            Not Before: Dec 29 05:37:22 2025 GMT
            Not After : Jan  5 05:37:22 2026 GMT
        Subject: CN=69521393-7618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:3f:81:c6:92:b8:de:eb:3d:c0:9d:3e:5d:
                    0b:22:e0:5e:92:04:a2:ed:ec:51:b9:61:e6:52:cb:
                    09:e4:7d:ea:21:af:2e:84:5b:0a:5a:1d:5e:ac:21:
                    ea:7d:e9:fc:c4:83:23:76:86:15:ec:a1:cf:a4:d1:
                    53:d5:63:98:ce:f2:57:09:89:99:8f:37:d3:c5:68:
                    5c:e1:96:18:a8:65:a8:b2:92:e9:d3:c8:d7:03:1e:
                    c6:0e:e6:ed:7c:f9:a6:fc:a9:c7:f2:a4:fa:e3:56:
                    eb:4c:d0:34:e3:12:bc:1a:b3:85:6b:94:72:45:70:
                    22:b4:6a:93:ed:a0:49:3e:56:2f:8a:c5:5f:32:d1:
                    35:75:fc:a8:97:89:db:2b:93:1e:8e:d7:1a:7f:69:
                    c0:62:b1:c5:69:a7:af:37:b3:0f:5c:dc:db:29:de:
                    fd:8d:71:45:23:8d:cd:bd:cc:cf:7d:ab:0e:c1:f4:
                    b3:7c:8e:b4:80:04:df:90:8a:a8:c8:83:3f:41:29:
                    cf:c8:aa:40:db:4c:bc:4f:03:8d:3f:19:af:1f:a5:
                    7e:b1:11:95:0a:2e:ec:cf:1f:4e:f3:04:f4:36:59:
                    eb:a5:a2:af:ee:7b:ac:6d:f0:b2:e0:a4:29:02:d1:
                    7d:d2:3a:19:4c:b8:9d:a5:27:0a:0b:5a:4e:d6:08:
                    50:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:49:C7:D3:18:C6:A0:CD:86:FA:FB:D2:49:A3:35:F6:1F:2F:48:9E
            X509v3 Authority Key Identifier:
                keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3f:15:9f:34:58:1d:a9:75:d9:a8:36:03:0c:c0:66:09:aa:
         12:ff:3b:9e:89:f2:db:59:27:6f:74:86:a0:d2:83:dc:f1:ca:
         aa:0f:72:94:11:31:a3:32:ae:a9:eb:b8:44:1a:62:34:42:28:
         da:4b:ee:45:c9:e8:40:45:23:02:bc:6b:7f:a4:80:ca:00:b4:
         2b:05:cf:db:77:ff:20:0f:15:42:fa:90:f5:10:95:cb:a1:55:
         40:04:cd:68:fc:e2:f4:b6:f9:a0:c3:4b:9d:4e:cc:74:f1:c4:
         a8:2b:88:8d:94:52:60:3e:cd:c4:87:b4:8d:25:75:3c:a7:48:
         3e:27:97:77:29:b9:38:29:73:2e:49:9a:80:ce:c5:81:68:2a:
         e6:f5:33:e4:45:b6:1c:fd:0b:25:de:51:8a:f8:fe:ea:83:19:
         b2:3c:5c:f8:a8:54:a5:55:7a:da:90:d0:48:db:c8:df:3d:50:
         d6:b8:f1:f6:8a:4d:ea:28:45:d1:dd:39:77:12:3f:14:61:6b:
         d6:95:ab:7a:6a:4a:5d:92:1d:14:e8:2b:d7:18:23:14:a9:cb:
         c0:38:3f:94:7e:d2:f8:48:e4:e5:1f:6b:87:20:0f:e9:8b:70:
         ae:cf:2a:18:dd:dd:7d:67:3b:ad:a5:f5:f3:1b:ab:75:23:ea:
         2d:d1:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 04:55:02 2025 by rpki-client