This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
File:                     _3wGiSUYZz7M4Ea2pxfzU85TxQk.mft (raw, json)
Hash identifier:          6R9Cr+VNsHxPOCpuBVAf8cbNtMpqL2cPlf7wXe9QwiE=
Subject key identifier:   AC:0D:FE:86:61:1C:AF:BE:80:07:B2:70:3C:19:B3:9F:14:D9:30:B7
Authority key identifier: FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09
Certificate issuer:       /CN=A91476FE/serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
Manifest number:          8E
Signing time:             Fri 19 Dec 2025 05:37:36 +0000
Manifest this update:     Fri 19 Dec 2025 05:37:36 +0000
Manifest next update:     Fri 26 Dec 2025 05:37:36 +0000
Files and hashes:         1: _3wGiSUYZz7M4Ea2pxfzU85TxQk.crl (hash: t+94F3xErSixYEbTVILRvqyk8NBB6o/rC26v0Yl1p9g=)
                          2: CC704C6639B711F09D08292CC4F9AE02.roa (hash: M1ecwuMzW/hIMvSj6913M6NZRe+PJV/YKqOHZ/y8oF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl
                          rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91476FE, serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
        Validity
            Not Before: Dec 19 05:37:36 2025 GMT
            Not After : Dec 26 05:37:36 2025 GMT
        Subject: CN=6944e4a0-1696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:c5:3b:0d:8d:d4:a6:b1:14:3d:4f:0c:4f:
                    b4:72:2f:33:8f:3a:96:67:48:3d:22:0c:57:63:1c:
                    1e:bd:be:81:76:68:8d:7e:1b:ef:6b:86:d3:b6:12:
                    f2:d3:fe:e6:50:11:e2:8f:92:ad:e3:dd:fb:d2:20:
                    c8:e2:49:cc:01:ca:6b:eb:07:02:bf:e9:28:34:9c:
                    1e:7f:71:98:7a:ed:a0:0b:2a:49:e8:a9:9c:59:ca:
                    fa:0a:78:a9:ae:a7:44:83:51:2a:53:63:f6:a6:c2:
                    c1:6a:6d:13:bc:82:87:0b:48:17:00:83:fb:56:ca:
                    5b:0d:53:10:07:87:8f:7a:2e:40:9a:c4:bd:c0:17:
                    ec:94:d7:7d:f5:53:21:ad:51:a6:e9:10:5b:df:a4:
                    36:6d:74:44:4f:98:52:55:db:0a:62:ed:9d:a1:81:
                    7d:5c:84:f5:13:53:ea:9d:4e:64:36:a3:61:ba:b0:
                    7d:62:49:9e:2d:77:de:78:a1:c9:dc:1c:c1:9b:ca:
                    0c:d9:bd:0a:0f:cb:6c:a5:bf:3d:98:08:dd:3e:18:
                    54:e7:70:e6:fd:41:0d:a7:27:37:a5:13:52:df:94:
                    8f:da:21:a9:28:f4:e3:4d:fb:9e:d9:e2:eb:f5:54:
                    99:a9:96:ab:2a:5d:04:1a:f7:90:c7:80:15:72:e9:
                    2d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0D:FE:86:61:1C:AF:BE:80:07:B2:70:3C:19:B3:9F:14:D9:30:B7
            X509v3 Authority Key Identifier:
                keyid:FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f3:32:7c:1f:52:39:83:9e:4b:77:4c:82:69:ab:77:86:0f:
         d7:25:af:dc:3f:0c:cc:c0:f5:98:71:c0:c6:90:6d:3e:ac:14:
         7c:96:16:29:b1:1d:18:61:ac:0c:30:b5:8f:c6:5b:81:80:7b:
         1d:90:a6:89:9e:99:2b:df:30:dd:bb:f0:48:77:df:2a:1d:1b:
         43:60:a3:cd:b7:1b:aa:e0:f0:f4:b0:7c:6b:d6:8c:e3:3f:5c:
         ce:4c:47:ed:bc:02:ef:cc:02:63:07:73:36:97:46:aa:c7:20:
         75:7e:70:24:a2:6f:db:1f:87:2c:d3:24:21:53:71:6e:cd:c2:
         22:ba:6f:94:3d:fc:c1:84:b8:ec:e5:6d:33:74:bb:70:bd:1b:
         d0:ef:dc:fc:73:19:ed:ec:b4:7f:4f:51:7d:57:f1:a1:ca:bb:
         d4:37:09:ed:e6:2f:7f:c2:ba:32:3f:1a:57:f2:26:e1:e8:8e:
         b5:5d:aa:fd:f9:51:44:08:15:6c:6e:d8:76:b5:f2:35:62:5d:
         82:77:a5:74:ea:f9:a8:82:97:de:b3:f7:7c:7c:04:ba:87:6c:
         70:16:d0:1a:83:f1:bd:3a:64:67:df:3f:e2:17:f1:d5:77:94:
         b2:37:72:a0:7e:4c:c9:f2:7b:81:b3:33:ad:9f:e9:e1:65:c8:
         63:b3:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:48 2025 by rpki-client