This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
File:                     91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json)
Hash identifier:          pl+N25a8+rdX+Vb+cZnPI+XGNr15Ruxb852G8tKpC40=
Subject key identifier:   77:35:70:D3:22:60:40:32:77:AD:9A:88:AB:D5:BF:39:FA:8B:63:B0
Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33
Certificate issuer:       /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
Manifest number:          0202
Signing time:             Fri 19 Dec 2025 01:37:16 +0000
Manifest this update:     Fri 19 Dec 2025 01:37:16 +0000
Manifest next update:     Fri 26 Dec 2025 01:37:16 +0000
Files and hashes:         1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: PmEWN3wSbZK++rHOzEzjBJ6KVVK9ukudHsEMUyNvj4w=)
                          2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: sO+2+/cvQ7fG/IUMq+A+e08x9da5+jbIe5T9qmjARBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl
                          rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CDE4, serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033
        Validity
            Not Before: Dec 19 01:37:16 2025 GMT
            Not After : Dec 26 01:37:16 2025 GMT
        Subject: CN=6944ac4c-b1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a1:33:c4:d3:70:b8:94:ff:f5:49:43:49:1c:
                    5e:84:fc:47:46:a9:3f:ac:c6:14:f8:5e:88:8c:8e:
                    10:d6:73:eb:48:18:47:aa:54:5d:4d:53:6d:3b:20:
                    4b:3a:a8:0b:01:99:df:6c:88:46:b1:cb:db:c3:c2:
                    18:db:1e:4c:a2:21:2b:9b:c0:78:fd:b7:9c:e8:82:
                    be:67:da:75:13:97:f5:82:79:83:1d:d9:86:19:b5:
                    44:5f:37:bb:97:a5:7e:14:31:19:14:33:27:74:e0:
                    43:39:6c:25:f8:7f:e6:ad:6c:26:81:96:db:b3:65:
                    28:c0:93:f2:86:75:3a:7c:15:86:be:dd:55:e6:d8:
                    10:8e:67:fe:81:68:75:0f:59:78:cf:04:fd:fb:77:
                    5a:4a:ae:87:26:f9:c1:23:1c:40:e8:75:e0:75:bd:
                    58:7b:31:1f:b9:8a:81:83:89:ed:db:15:7c:22:63:
                    e8:ff:a0:29:3c:80:74:e4:ab:a0:68:42:d4:58:03:
                    c1:db:f6:1d:9d:f3:93:af:c4:9c:66:0d:4e:33:e2:
                    bc:b2:1e:cc:03:a5:8b:d9:ed:56:22:ae:12:82:68:
                    7a:98:b7:c9:67:26:4a:f7:3c:3c:3b:9d:85:93:bb:
                    73:83:f4:e0:9b:07:c3:ae:34:83:6f:bb:2f:a1:fd:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:35:70:D3:22:60:40:32:77:AD:9A:88:AB:D5:BF:39:FA:8B:63:B0
            X509v3 Authority Key Identifier:
                keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fc:05:ae:1c:e4:e6:ee:f5:2d:bb:81:35:e3:86:af:f3:c4:
         77:79:19:0c:21:16:e6:a3:37:f3:61:71:b5:4c:7a:f4:e7:68:
         37:73:95:80:96:6f:f6:b4:a8:56:4e:21:9d:e6:cf:b7:00:50:
         a2:a7:65:fe:82:12:e4:c1:dd:ca:ba:06:54:67:29:83:53:6f:
         88:6e:3c:de:f8:31:32:e9:59:dc:cb:17:6c:0b:51:8a:b1:83:
         d6:4e:a3:b2:f2:42:e7:3e:01:83:cc:a9:85:6c:30:fd:a4:9b:
         e1:f1:6c:81:38:cd:93:1c:c3:a8:a5:8e:ec:98:19:54:4b:7b:
         b3:27:d2:51:47:56:56:37:67:c3:3c:f6:d3:aa:a2:b2:ef:9d:
         d7:59:d8:5c:93:3f:7c:fa:16:26:ba:04:80:14:d3:ad:4c:82:
         02:c9:a7:63:31:ed:c1:a7:32:a6:7c:33:e3:df:70:5b:fb:5d:
         bf:af:be:8f:3b:aa:26:5b:a3:86:4a:0f:94:f7:4f:64:cc:0a:
         92:c4:6d:c2:ad:f0:1f:ef:24:9e:a2:f1:7d:9c:6e:ac:77:3c:
         3d:1c:9e:a9:42:a9:b8:37:01:45:eb:d8:f8:73:f4:ee:98:f3:
         2d:4e:9b:46:62:5e:12:8c:00:f0:ca:76:21:d0:f8:75:24:13:
         7e:92:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:45 2025 by rpki-client