This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
File:                     xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json)
Hash identifier:          X3SJEf5inQpoafrvFlS03eVcI52I452uulaVcgQpFgQ=
Subject key identifier:   B7:72:64:5E:0B:C3:DF:A1:F1:A9:C6:1F:AF:19:BB:4B:1A:D3:A0:EF
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Certificate issuer:       /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial:       080F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
Manifest number:          0802
Signing time:             Thu 18 Dec 2025 20:31:43 +0000
Manifest this update:     Thu 18 Dec 2025 20:31:42 +0000
Manifest next update:     Thu 25 Dec 2025 20:31:42 +0000
Files and hashes:         1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: 4P3Wad8kpFdXqIlh2xLXTAJdO3leV9sk8FPen7+G7KE=)
                          2: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: odhqLjFi/gNl1kTD0Ic54V4mME2y8CTdKUAbvxdHwi4=)
                          3: 21EE9510083211EB81509633C4F9AE02.roa (hash: ZfvnXdczblwrDF4Ejj/73M+zlN7DQoj1HAdYgFet7TY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
                          rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
        Validity
            Not Before: Dec 18 20:31:42 2025 GMT
            Not After : Dec 25 20:31:42 2025 GMT
        Subject: CN=694464af-99c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:fe:a8:79:97:8c:04:40:96:02:ef:12:a2:
                    bb:17:f8:f0:eb:03:17:5b:1b:de:0a:70:a1:b2:3b:
                    67:63:74:94:a0:7d:fb:23:f8:76:13:60:7e:2d:c2:
                    52:9f:5a:d6:15:db:2b:20:aa:2a:38:e8:1b:69:cd:
                    05:0e:3b:a6:af:0e:a7:0d:24:21:12:70:ea:3d:61:
                    ce:91:74:8a:b8:06:d1:5f:3e:ea:81:48:e8:eb:6a:
                    fc:9b:0c:fe:8f:d3:ae:1a:9e:65:59:03:db:4b:5b:
                    46:be:46:44:43:7c:ee:95:55:b4:3e:c6:a3:19:31:
                    2e:4c:9a:60:21:55:f9:a2:93:33:88:f7:25:b0:db:
                    39:ec:7c:96:bd:29:33:f5:1a:a6:fc:73:d4:00:30:
                    33:7b:08:30:10:04:0f:c4:86:4a:14:22:75:6b:20:
                    d8:b8:13:e5:bf:5b:cd:3d:b9:9a:24:84:04:10:3a:
                    71:51:c9:aa:1f:fd:fb:3f:6d:1b:32:1a:b8:85:f5:
                    4b:b0:bf:fe:cc:be:b8:4c:cf:31:b9:68:61:1a:81:
                    bc:31:7c:c4:93:04:51:d1:bb:81:29:23:69:35:74:
                    d5:d4:9c:9f:38:99:9a:48:f4:82:58:00:44:a0:7c:
                    2a:39:8d:68:7c:ae:54:2c:74:21:24:f8:c9:7b:1c:
                    98:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:72:64:5E:0B:C3:DF:A1:F1:A9:C6:1F:AF:19:BB:4B:1A:D3:A0:EF
            X509v3 Authority Key Identifier:
                keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5c:34:71:21:5a:44:cb:4e:95:d8:ae:5f:6a:6f:5e:80:f3:
         47:b4:d3:53:37:20:6c:18:8b:31:89:89:d2:e8:0b:eb:09:0c:
         50:09:10:e3:95:88:62:4b:ec:e2:f4:b1:11:fe:5d:1a:15:f1:
         88:ed:16:e1:d5:ba:4d:4b:d1:48:d6:a5:f7:06:78:ea:67:58:
         7c:98:08:78:81:a2:fe:c7:df:c0:8c:41:17:0f:84:b1:59:32:
         e7:60:90:29:29:c7:e9:a9:5e:79:24:68:b4:b0:ab:ac:84:34:
         4f:1d:d7:2f:64:12:76:de:e4:c8:fd:f1:a7:3f:48:a5:98:17:
         9c:b1:d8:24:f3:a0:e3:66:f8:16:d5:82:19:fe:b4:f3:21:d4:
         6c:ff:e1:c6:37:ca:e4:52:d6:10:d7:64:23:b5:1f:5b:19:35:
         11:ce:6c:57:98:17:a8:e7:69:e2:ae:0e:50:89:a2:63:8c:b4:
         6b:db:c5:8f:a9:0f:77:42:4b:5a:18:20:8e:3f:3d:69:54:79:
         68:ba:0a:2f:70:6d:0e:f8:74:79:c4:3e:84:b4:79:5e:5f:3f:
         ff:a4:cc:c5:87:9d:c1:76:b0:51:19:81:80:6d:f3:05:92:9f:
         06:64:1d:87:f7:12:aa:c5:30:af:7f:e2:40:98:b9:81:65:82:
         2d:9b:44:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:58:27 2025 by rpki-client