This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft
File:                     rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft (raw, json)
Hash identifier:          ue9Arbc6jnumOtagjnnk0UNiOgUh1q6q8wd8l3rswlc=
Subject key identifier:   06:69:70:A4:DA:95:9D:F1:84:B8:CF:49:CC:04:9A:C1:12:69:DF:2B
Authority key identifier: AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38
Certificate issuer:       /CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038
Certificate serial:       0BB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft
Manifest number:          1411
Signing time:             Wed 24 Dec 2025 18:33:21 +0000
Manifest this update:     Wed 24 Dec 2025 18:33:21 +0000
Manifest next update:     Wed 31 Dec 2025 18:33:21 +0000
Files and hashes:         1: rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl (hash: 7/VF7YVsY3T84053WwVERit+I0MQJKxMJgGXoEPi+6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl
                          rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 18:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2993 (0xbb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91580A1, serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038
        Validity
            Not Before: Dec 24 18:33:21 2025 GMT
            Not After : Dec 31 18:33:21 2025 GMT
        Subject: CN=694c31f1-7175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:64:bc:95:9d:30:74:e9:c6:4d:58:1d:c1:79:
                    8d:d2:3a:7c:f4:7e:16:60:ac:88:1a:13:ba:f4:3f:
                    02:04:de:89:32:39:53:bb:e9:b6:70:26:bd:f0:51:
                    f5:ef:04:b4:39:e5:50:8b:3b:cd:7b:64:80:92:90:
                    64:0e:89:9b:62:fa:a0:81:07:2a:12:09:4a:9e:74:
                    d0:be:11:39:77:72:f6:b4:d0:1f:fb:11:73:fa:84:
                    b5:d7:f0:e1:00:e9:a4:49:59:4c:bc:c7:ea:53:b6:
                    92:b7:fc:20:14:85:90:7a:d7:32:38:ea:6d:fe:33:
                    7d:8e:97:60:94:e9:3e:4d:54:1c:62:6b:6b:19:6c:
                    96:48:d7:91:2d:77:a8:67:28:d1:93:21:89:b3:40:
                    84:dc:d6:f2:5f:74:05:31:a6:0d:b8:22:88:9e:af:
                    64:9c:48:b7:9d:8f:4e:c8:73:f4:8c:4f:03:f1:81:
                    34:47:10:48:0e:f8:92:21:ad:6a:70:eb:40:76:93:
                    36:78:e0:61:d6:7c:f5:c5:80:d0:0d:05:17:08:a9:
                    59:97:09:3a:98:e8:b9:99:43:79:7f:53:20:c9:ad:
                    0b:2b:ce:7a:d3:86:d0:b1:03:1d:4c:fb:1a:23:14:
                    53:1d:28:16:17:9f:65:56:82:7b:98:15:2e:91:db:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:69:70:A4:DA:95:9D:F1:84:B8:CF:49:CC:04:9A:C1:12:69:DF:2B
            X509v3 Authority Key Identifier:
                keyid:AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:16:05:00:7f:7a:7c:d3:23:ff:76:9d:82:a6:db:7c:97:ba:
         d7:ec:9f:39:98:23:ee:36:19:b6:e7:29:b4:f6:43:a6:ab:23:
         3d:a7:84:5c:25:c7:45:4a:50:66:f6:f0:15:52:43:7e:c9:1b:
         5d:7d:c0:f2:79:76:b6:a3:2e:8b:14:db:5b:2f:6e:ab:9c:fa:
         cc:a0:79:2c:d7:dd:f0:12:8c:68:7e:29:af:90:a8:3c:b3:0e:
         38:2f:27:71:24:8d:b9:71:59:90:7f:14:b7:1f:94:70:b5:d8:
         94:ef:11:9b:99:43:6c:af:73:37:45:3c:89:f1:c4:0b:68:d2:
         b7:44:21:46:b8:b0:8a:6b:19:2a:8b:9b:34:f8:e6:ef:03:15:
         ef:30:64:b2:e9:9a:af:b3:5f:d5:48:81:5f:56:8e:1d:03:52:
         77:ae:a7:a9:3f:5a:1c:86:27:5f:c3:0d:ad:3c:36:ae:73:33:
         5a:e9:f4:80:05:76:92:2b:41:8a:7a:62:4e:d5:3a:86:8d:4d:
         19:20:60:9b:78:04:a5:4e:dd:cd:66:f1:d7:5c:62:fc:68:d9:
         0a:b6:3a:a5:4c:43:46:7c:60:3a:5a:13:80:fa:8f:49:4b:5f:
         b8:af:f3:04:a4:86:69:81:d7:8e:a8:0e:2f:b7:5d:23:d5:f7:
         e2:45:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:28:53 2025 by rpki-client