This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft
File:                     57mHJeEOcOr07UTLjZz8LtAndII.mft (raw, json)
Hash identifier:          p7tVFej+RKaNkAPlf8hQO23TjbeVY7tFsJPHiKHnObI=
Subject key identifier:   8F:46:27:91:11:D7:3E:3F:4B:32:5F:D0:F0:34:3B:2E:0C:51:D2:BA
Authority key identifier: E7:B9:87:25:E1:0E:70:EA:F4:ED:44:CB:8D:9C:FC:2E:D0:27:74:82
Certificate issuer:       /CN=A91764C1/serialNumber=E7B98725E10E70EAF4ED44CB8D9CFC2ED0277482
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft
Manifest number:          3C
Signing time:             Sun 21 Dec 2025 06:27:47 +0000
Manifest this update:     Sun 21 Dec 2025 06:27:46 +0000
Manifest next update:     Sun 28 Dec 2025 06:27:46 +0000
Files and hashes:         1: 57mHJeEOcOr07UTLjZz8LtAndII.crl (hash: cWrlg6asB9BvQBwRfNcxPjqNjMgDLPd2m4pxk6Dyt6Y=)
                          2: 23A61F1A817011F08F821330C4F9AE02.roa (hash: U4f2TL1Nw6yGEyt2KKgu1w2UDLlsV+V95Sx4GlFACCI=)
                          3: 23278196817011F08F821330C4F9AE02.roa (hash: btm1G8nH7QUpRKAM7Nxi0i1txeAyqNXfCuUm0WkFHdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.crl
                          rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 06:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764C1, serialNumber=E7B98725E10E70EAF4ED44CB8D9CFC2ED0277482
        Validity
            Not Before: Dec 21 06:27:46 2025 GMT
            Not After : Dec 28 06:27:46 2025 GMT
        Subject: CN=69479362-0f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:bf:39:bf:f2:92:39:c2:16:8a:83:ca:1a:
                    34:31:ff:8a:8a:84:d0:c2:7d:ab:2f:91:03:7f:af:
                    e5:91:bc:34:51:fe:bb:13:52:b0:2f:04:20:e7:fc:
                    b5:61:f5:0f:d9:8c:40:fa:56:03:ca:43:04:35:04:
                    63:c8:8c:b8:5e:07:51:04:7f:6c:e6:83:20:c8:9c:
                    c8:49:e5:98:e9:fb:32:4b:1a:54:4a:18:e5:08:8f:
                    08:d4:f4:df:2e:f0:92:7c:28:4e:4b:7a:17:8c:2d:
                    a2:6c:07:53:e4:61:44:ee:90:75:22:9a:03:3e:b8:
                    4d:6c:9d:31:2f:c8:44:e7:33:9a:ae:2c:f5:36:06:
                    1f:a8:8c:d1:89:6c:57:3a:78:11:32:8e:4e:b7:77:
                    61:99:6a:a5:1e:89:02:56:89:6e:70:0e:1b:b9:c8:
                    15:6d:db:8c:1f:5c:08:0f:5d:8c:5c:24:f0:46:ad:
                    8e:43:37:90:7f:60:08:99:2c:0b:f6:b9:5e:0e:93:
                    3a:91:e9:28:36:15:df:fd:57:7d:5f:c3:2f:29:34:
                    69:31:44:a1:83:2e:ea:6e:9d:f2:67:ce:fb:dd:4b:
                    da:b7:60:4a:61:9c:80:2b:c6:8f:0a:d9:40:b1:7a:
                    8f:de:e6:36:56:0c:c5:27:99:cd:5f:0f:32:5e:23:
                    8d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:46:27:91:11:D7:3E:3F:4B:32:5F:D0:F0:34:3B:2E:0C:51:D2:BA
            X509v3 Authority Key Identifier:
                keyid:E7:B9:87:25:E1:0E:70:EA:F4:ED:44:CB:8D:9C:FC:2E:D0:27:74:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:7e:90:eb:3a:e3:9b:4b:02:9c:51:0c:36:88:53:10:4d:
         20:cc:f0:7e:09:cd:1a:23:b8:2a:69:ea:ef:c2:5d:9b:2c:2e:
         33:53:c1:79:a6:cb:43:ce:9f:83:9e:87:9a:7d:80:fa:d0:10:
         c8:26:7c:4e:52:d6:1d:c1:6c:b4:9f:5b:70:a6:52:ba:39:26:
         16:29:a5:1b:35:eb:62:47:6c:f0:46:13:38:17:1c:48:5c:c8:
         17:aa:6b:6c:8c:2c:2d:c6:f6:bf:9e:9c:8a:b6:5e:1e:81:f7:
         03:e6:aa:e3:8b:d2:94:94:19:62:45:cf:18:a8:43:7d:7a:85:
         5e:13:78:57:09:94:6b:8b:d2:4f:9b:4a:21:a6:0c:60:39:2d:
         71:39:30:d7:a0:5d:50:43:c6:32:4e:b3:bb:3f:4e:47:af:b1:
         4c:90:4d:c7:d8:91:0a:2b:d6:7f:f0:22:5b:65:d8:f5:cf:44:
         6a:a2:65:f0:8d:e9:a7:6f:bb:c0:0d:10:18:61:2d:65:e0:ff:
         2c:e1:f8:cf:9f:8c:b8:51:77:b3:72:d9:62:89:18:a8:86:36:
         9d:07:9c:70:98:bf:b6:b6:13:29:8d:ef:04:88:b3:0d:5f:5f:
         7c:d3:49:b6:03:9a:0e:64:a6:11:5d:2b:c9:09:77:10:a1:43:
         2c:46:90:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:14:26 2025 by rpki-client