This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
File:                     i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json)
Hash identifier:          tOTi1uQXSEtZ/NfYqnk7yRDXUStuqm1+XwFZTQc4+BM=
Subject key identifier:   0A:6D:12:F4:34:5C:80:04:3F:FF:F8:9F:FF:70:F1:CC:FB:43:20:A2
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Certificate issuer:       /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
Manifest number:          E7
Signing time:             Tue 23 Dec 2025 04:24:27 +0000
Manifest this update:     Tue 23 Dec 2025 04:24:26 +0000
Manifest next update:     Tue 30 Dec 2025 04:24:26 +0000
Files and hashes:         1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: QOSJf33q19yRHD6kP6sMP07DlTUFFQxKsBNVySrWYno=)
                          2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: sJiJ1naY/4cR2Pgo/DEru8iJf9KG6T1eb6PbQmIPhNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
                          rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
        Validity
            Not Before: Dec 23 04:24:26 2025 GMT
            Not After : Dec 30 04:24:26 2025 GMT
        Subject: CN=694a197b-b048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:ca:da:f6:32:06:b0:e9:23:58:c7:a3:0e:
                    44:61:29:11:70:c1:da:6b:65:45:95:a6:fe:9a:99:
                    46:8d:8e:02:36:07:c4:0d:7c:d5:20:47:dd:fc:e1:
                    86:17:ca:e0:30:03:f2:35:b0:37:92:1b:92:7c:97:
                    14:b8:30:f0:b5:96:13:23:b9:4d:e4:b0:eb:ee:b5:
                    99:d5:ee:57:9d:78:a4:00:ef:1c:6b:2b:45:3f:54:
                    29:8c:0a:95:b0:f6:c0:8f:84:cd:fb:85:0b:b2:40:
                    6c:29:2c:a7:ce:ae:75:3b:2a:e9:b5:4d:9c:43:38:
                    e1:76:e8:f8:7d:fc:c4:ed:2f:ca:d6:15:73:30:51:
                    b4:60:0d:9f:eb:01:0b:bc:4c:06:01:ab:3d:4e:d8:
                    51:d8:82:1f:11:a8:31:2b:b3:2f:4f:1a:67:8d:45:
                    d1:9c:46:22:72:ce:81:d7:33:36:78:71:73:5e:48:
                    d2:05:fd:cf:c6:9b:bb:35:71:9c:cf:ee:9b:c3:c9:
                    58:6e:e2:ff:d0:44:c0:a6:3a:8d:50:db:03:77:71:
                    a6:b1:00:2c:26:4d:fa:2f:0a:d8:28:07:02:80:5e:
                    41:cd:2e:8d:ec:ca:fa:2f:1c:ed:0c:da:6f:b4:f5:
                    25:34:04:72:7f:0f:22:db:4c:59:5b:f4:0b:72:0e:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:12:F4:34:5C:80:04:3F:FF:F8:9F:FF:70:F1:CC:FB:43:20:A2
            X509v3 Authority Key Identifier:
                keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:44:e0:fd:f8:4c:48:3e:b5:c8:1a:bd:12:c8:d1:2f:81:28:
         4f:23:de:74:a9:ad:07:42:49:bc:15:47:8c:a1:84:2f:40:79:
         fa:4a:09:e3:91:6e:1d:fe:0d:79:9f:6a:3b:cc:7b:e7:ba:32:
         a8:72:fc:e1:64:43:2c:04:ec:7b:b2:9c:ab:e7:8f:f1:87:da:
         d3:6b:61:8e:29:4b:cb:bf:43:1b:a2:80:95:bd:60:a9:a4:ea:
         e1:a1:ca:86:cd:a9:01:0d:c9:46:c0:66:42:c5:61:e2:1a:77:
         aa:66:c1:35:0b:b2:af:01:35:fe:a3:3d:f1:fa:53:e5:25:77:
         88:04:7b:3b:46:7b:9c:9a:30:c8:f7:f9:9b:26:89:5c:09:05:
         c0:2e:0f:a0:52:6d:9c:00:c1:a5:64:eb:b4:25:a0:95:be:f5:
         fc:f8:33:c5:e2:b7:ee:7e:f0:8c:3c:c1:e4:bc:11:07:9a:96:
         a7:e1:59:46:b6:84:3c:ca:d4:06:29:61:fd:d0:ba:66:60:28:
         b8:91:3a:55:42:f1:84:d3:2e:51:a1:de:f2:23:0f:d6:a4:59:
         a2:40:f2:a6:40:96:c2:46:eb:48:db:d9:b0:e7:91:66:98:6f:
         69:12:29:2b:50:9e:85:ab:5f:4c:8a:fc:44:87:8d:ea:47:a1:
         d9:d3:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:52:12 2025 by rpki-client