This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
File:                     mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json)
Hash identifier:          SGilv1bX6QKC0Sa7jzRRFD3yWVJThYqDy/7TIDsTnS0=
Subject key identifier:   69:40:9C:8C:FD:DF:54:72:40:2A:B0:B7:94:46:7A:3D:C4:94:B7:21
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Certificate issuer:       /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial:       074C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
Manifest number:          073E
Signing time:             Sat 20 Dec 2025 21:04:17 +0000
Manifest this update:     Sat 20 Dec 2025 21:04:17 +0000
Manifest next update:     Sat 27 Dec 2025 21:04:17 +0000
Files and hashes:         1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: 7RF4QkhQQRQ62cgcFj6ujTYt52Dxo4DmOvUS3oENXSI=)
                          2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: d7N6f6yC80H+bBisy6d0uZFPMZkPZ4+tK8vPcg2RMI4=)
                          3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: XqZL53ufCEPPnAj9K+Mz0fhXU33hy00eQ9KaFrfBZL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1868 (0x74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
        Validity
            Not Before: Dec 20 21:04:17 2025 GMT
            Not After : Dec 27 21:04:17 2025 GMT
        Subject: CN=69470f51-a661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:02:29:61:d8:a6:3f:e0:ac:6e:e3:30:49:
                    58:3b:29:c4:09:e6:7a:d6:e4:4c:a2:50:68:07:56:
                    14:e9:f8:3d:de:1d:1c:1a:33:ac:0a:cd:00:dc:67:
                    35:e5:aa:86:8d:18:69:f9:e8:a4:9f:16:3c:47:b3:
                    c2:28:b6:5b:bc:ce:81:50:f0:67:a5:2f:b1:1b:fc:
                    69:80:d6:a6:b1:cb:6e:cd:61:eb:33:8c:81:0f:7d:
                    a1:7d:02:ff:b0:40:db:5c:ed:8f:0c:9f:d6:60:94:
                    58:12:13:7d:6a:fd:44:99:a4:da:72:e5:62:a2:8e:
                    68:cd:d9:12:cb:65:81:26:66:fd:43:14:00:45:50:
                    3f:d6:81:89:a2:e6:d2:6f:5b:53:75:3a:4f:58:6f:
                    fd:7d:2e:e8:62:c7:1b:ee:40:68:e5:de:ea:64:ca:
                    98:c1:01:3f:4b:dc:9d:5c:63:88:9d:4f:f5:42:96:
                    19:25:49:a3:3d:b4:08:90:f0:11:33:ca:c6:31:dc:
                    bc:96:98:85:28:0f:31:a1:50:c4:a5:d1:a1:43:20:
                    98:48:70:d4:59:32:fb:4a:35:2d:5a:ce:a5:8e:2a:
                    c9:12:b6:9b:9c:05:14:8e:ee:4b:ff:36:8e:32:b0:
                    54:6b:91:b3:0b:1f:b9:b6:ce:07:2c:18:51:90:99:
                    6c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:40:9C:8C:FD:DF:54:72:40:2A:B0:B7:94:46:7A:3D:C4:94:B7:21
            X509v3 Authority Key Identifier:
                keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9e:4d:89:a4:84:10:7c:1c:fd:ee:7b:99:00:28:ce:90:34:
         b9:7d:90:24:65:1c:14:ee:bc:8a:e7:16:75:45:37:10:28:70:
         9e:29:1a:08:02:27:ce:cd:d4:08:20:fe:99:74:40:e7:2c:bb:
         33:87:e1:46:ae:c4:1d:b3:fd:72:99:b4:19:da:5b:20:bc:e3:
         91:53:8d:77:cc:6a:9a:c4:74:70:44:f6:df:48:3b:26:4c:9d:
         c4:27:9e:d7:ff:23:fb:1c:75:52:0a:d6:62:db:21:58:e4:b4:
         7d:44:2f:36:01:cb:74:84:31:6e:4a:cc:14:60:3d:4b:a3:73:
         82:53:b7:0a:d3:e6:52:12:93:fa:57:15:d9:83:31:df:41:f1:
         02:d0:a9:d1:cc:b2:ce:9a:d0:0a:16:8a:41:e4:1b:a7:53:54:
         af:f2:3e:49:3b:a4:54:6c:75:fd:63:e3:2a:17:a5:2e:03:2e:
         36:a2:b2:d9:a9:74:fa:03:bf:e2:13:42:60:36:2b:c8:be:bc:
         00:9f:94:5a:ad:b5:ea:86:56:82:3b:42:a5:8b:73:8e:58:f1:
         32:f3:b3:b4:af:ea:96:a8:dd:13:96:eb:a1:e1:bc:52:b2:f2:
         24:fd:bf:05:0d:52:06:bf:a5:90:f1:bb:f9:44:67:f8:9c:ec:
         9e:d0:35:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:38:51 2025 by rpki-client