This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
File:                     AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json)
Hash identifier:          SqxhhJ0KeZozri57+rayfkE37U2n+mSDHYgcAJM1hS8=
Subject key identifier:   F2:A6:D7:B4:CD:EB:0E:87:0E:73:1F:5A:60:3B:B0:8E:52:A7:53:E8
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Certificate issuer:       /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial:       057C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
Manifest number:          0569
Signing time:             Thu 18 Dec 2025 23:19:22 +0000
Manifest this update:     Thu 18 Dec 2025 23:19:21 +0000
Manifest next update:     Thu 25 Dec 2025 23:19:21 +0000
Files and hashes:         1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: 1jQeSymtBpSVg7fV5xfPNeFbs98I/GEkFTVEL/RkUBQ=)
                          2: C1CDEDC6950711F0AFD0F30BC4F9AE02.roa (hash: FoFgJ52gigvatl9XWLd8n5vp/LlZbDCQ2ZgQjZFRqxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
                          rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
        Validity
            Not Before: Dec 18 23:19:21 2025 GMT
            Not After : Dec 25 23:19:21 2025 GMT
        Subject: CN=69448bfa-e069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:74:6d:26:ca:ad:6f:c1:a6:96:44:bf:18:
                    f7:97:99:d2:51:9e:11:86:08:26:4a:17:e0:a7:6c:
                    1d:95:ee:a3:ed:f3:cc:13:7f:83:f5:6c:15:14:d2:
                    5e:d0:5d:36:de:a1:b8:e5:40:a0:42:2c:28:c0:f9:
                    0c:1c:3f:ba:04:ac:88:41:dc:68:f0:80:9c:e9:3d:
                    86:e1:01:91:60:d9:e0:ff:e5:58:86:76:a2:e2:5b:
                    10:f8:06:f2:eb:5c:bf:12:f3:70:c0:dc:8f:3a:9d:
                    b8:2d:1e:d6:f1:ce:02:a4:67:aa:8e:5c:d1:11:f0:
                    66:b2:97:19:4f:3a:ab:fe:84:33:c5:15:d0:d9:98:
                    d2:84:2c:1d:eb:02:d4:95:a2:a4:08:ee:8e:9a:95:
                    71:ba:85:49:ab:ee:fd:6d:ee:a4:fa:12:15:b0:5e:
                    ad:2d:cd:93:b6:26:5c:5f:57:14:cf:c1:2b:b2:7b:
                    ce:00:2b:2b:92:4c:85:af:d4:05:72:19:9c:68:48:
                    54:b0:6f:f5:6f:8c:ce:5f:4f:44:25:48:d2:9a:87:
                    5a:59:c9:45:f5:a9:e6:13:ae:76:d2:62:be:21:fd:
                    d7:c0:e3:d8:c5:9c:bf:93:2d:9e:1e:4e:eb:c2:a6:
                    aa:32:d6:3a:c6:83:7e:61:0c:da:12:fa:2c:58:dd:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A6:D7:B4:CD:EB:0E:87:0E:73:1F:5A:60:3B:B0:8E:52:A7:53:E8
            X509v3 Authority Key Identifier:
                keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c6:96:c6:fd:c2:2c:c3:92:6b:ae:40:8d:e2:93:58:5f:c7:
         c8:dc:0e:d8:ae:d2:88:64:21:a1:69:ee:56:a2:19:bd:be:9a:
         9a:57:9d:29:1e:f3:5d:9a:41:fb:02:f5:47:3c:e7:7d:4d:ba:
         1d:7e:8e:63:1d:3c:3d:53:09:a5:82:e7:12:ac:bd:24:e4:5c:
         22:f2:6c:19:e5:63:77:2c:4e:cb:89:bb:eb:9b:4b:68:37:ac:
         44:e7:93:1f:ba:79:37:67:8d:38:e2:af:c6:66:84:23:d9:31:
         f8:55:eb:d2:45:b9:9c:e9:77:ca:fd:61:09:24:62:47:4b:9b:
         de:9a:86:6c:7a:6c:f2:52:8a:41:69:48:e6:de:ba:eb:f1:a4:
         81:fd:ed:70:87:ce:26:26:79:94:43:44:bf:8f:7a:f6:2a:f4:
         8a:b3:ce:16:e6:91:d9:45:3e:c5:42:6b:9f:f3:bd:f9:be:f3:
         e1:41:b0:f3:17:64:a3:fc:63:80:48:40:9e:29:fa:08:df:53:
         ba:ed:b7:07:ff:d6:90:bc:30:2b:2f:fc:28:bd:98:af:58:36:
         07:05:10:31:2a:33:cf:df:e5:ed:24:74:4f:41:aa:ca:7c:f8:
         d0:81:6b:72:ae:73:16:d5:62:db:6b:3e:40:d7:23:e5:0e:fa:
         fb:02:04:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:45:40 2025 by rpki-client