This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
File:                     40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json)
Hash identifier:          4FPJFUiOCow+5IpC+BLmLPmJVl85noC5x/JwNCPKrjU=
Subject key identifier:   AD:B1:A5:F6:B9:5F:88:A8:5D:E6:21:65:9D:D9:78:41:88:90:11:B5
Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
Certificate issuer:       /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Certificate serial:       0C26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
Manifest number:          0C16
Signing time:             Thu 18 Dec 2025 18:30:06 +0000
Manifest this update:     Thu 18 Dec 2025 18:30:05 +0000
Manifest next update:     Thu 25 Dec 2025 18:30:05 +0000
Files and hashes:         1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: 8Gy7tfpcIXm6fSiGL4ON3uc0/fFPxvIEBq9PKwG0ftI=)
                          2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: Myi9k4IrBdVLRWD9OtQqLIwtmIphhX+YDXYJBcNy/bw=)
                          3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: MyUFtJY4lLof0Zwtdhx7AIg2aYopA1OEBl/K6VizYaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
                          rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3110 (0xc26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
        Validity
            Not Before: Dec 18 18:30:05 2025 GMT
            Not After : Dec 25 18:30:05 2025 GMT
        Subject: CN=6944482e-7c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:2b:1f:ac:6a:fc:f0:7b:fc:60:49:e7:72:
                    df:92:32:9c:5a:83:1f:43:dc:60:19:23:e1:ef:14:
                    26:c9:eb:b7:76:b8:a6:de:8f:d7:63:a1:a5:21:33:
                    11:b3:0d:97:23:5e:c8:d6:00:ed:40:98:ce:1a:33:
                    f7:cb:49:f5:b2:a6:4e:63:a1:05:50:19:c3:00:9b:
                    a0:3f:6a:4d:db:99:48:e4:f4:12:8e:88:a5:a8:39:
                    ff:d7:51:d5:81:37:2e:e5:94:68:ff:05:6d:3c:e1:
                    c8:5e:bd:2e:bc:ba:1a:4d:05:c3:92:0c:b9:b9:8c:
                    e3:d0:f0:ba:e9:f1:89:ad:e7:ff:0f:6a:53:ef:5f:
                    04:a2:ab:36:93:23:87:28:23:bb:8a:30:ec:29:5a:
                    7f:27:63:b0:92:b0:59:1a:7f:fd:61:1a:6a:74:c4:
                    8e:07:84:4e:e7:3b:6f:72:cf:ea:5c:ed:9b:7a:72:
                    22:76:31:c6:50:84:de:68:5c:15:ef:9a:d8:d2:75:
                    c9:f7:50:5f:2e:ec:e1:8f:91:28:6d:67:a1:eb:02:
                    2c:03:27:9c:44:08:a3:ee:00:7e:42:e1:43:d1:47:
                    f5:2c:91:38:11:27:14:5a:3d:d6:2c:f7:e8:a2:37:
                    5a:46:6f:4c:57:ed:48:e4:5f:db:a4:6b:df:a2:23:
                    f7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B1:A5:F6:B9:5F:88:A8:5D:E6:21:65:9D:D9:78:41:88:90:11:B5
            X509v3 Authority Key Identifier:
                keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:88:93:f8:1b:3b:3c:04:85:a6:b7:9a:7d:3a:9b:ba:e9:18:
         b7:db:c7:d5:48:25:13:9b:19:ce:d6:07:f3:3e:09:02:98:fb:
         a4:5d:f2:2b:29:2d:2f:1f:75:6b:ed:47:5c:de:c0:84:7f:e2:
         8b:87:4e:4c:f3:01:73:56:7a:60:1c:a1:71:c8:cc:77:5e:8c:
         5a:e0:57:f1:63:59:63:34:2c:5a:d5:c5:1b:ad:8f:2f:f2:7d:
         c9:25:2e:d5:88:2a:c5:eb:7e:a5:df:6a:0b:c3:f0:ca:ce:d4:
         20:10:88:72:71:6e:50:78:7e:29:c9:3b:c3:44:44:3b:ba:37:
         1a:72:f7:1b:74:64:51:6a:cb:20:ca:6e:66:d1:ed:d6:1a:bc:
         3b:ef:93:dd:40:32:da:12:3f:77:06:37:aa:2c:28:24:d8:94:
         af:a7:4b:58:d5:09:e1:e4:d7:83:c9:a0:6d:fe:41:50:72:e0:
         4e:68:a9:e7:40:40:02:d0:50:64:33:f0:d2:6d:c8:ba:02:9d:
         6f:cf:02:04:64:cc:e2:3a:f9:7b:c4:cf:2f:a8:fe:37:a1:a8:
         c2:93:c9:96:0b:87:4b:26:62:c9:dc:47:0d:b9:7b:34:d3:59:
         5b:31:e7:20:36:2a:64:64:69:33:f5:c2:b4:06:99:6d:18:88:
         0a:e9:64:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:30 2025 by rpki-client