This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
File:                     EDki63fZQHF8gZ4oyWZGKUgLvOU.mft (raw, json)
Hash identifier:          l8IW9i5b9sIS6w4uSVSrSkjHIx/PwD9EUgRC0rVfzds=
Subject key identifier:   33:F2:1A:DE:21:0C:9F:A2:72:7C:56:D1:B8:0D:55:0B:93:AF:C9:A1
Authority key identifier: 10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5
Certificate issuer:       /CN=A91A030C/serialNumber=103922EB77D940717C819E28C9664629480BBCE5
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
Manifest number:          99
Signing time:             Wed 17 Dec 2025 05:59:04 +0000
Manifest this update:     Wed 17 Dec 2025 05:59:03 +0000
Manifest next update:     Wed 24 Dec 2025 05:59:03 +0000
Files and hashes:         1: EDki63fZQHF8gZ4oyWZGKUgLvOU.crl (hash: ZG3Tpqw9iztX+TD+BvRofLQ9155f6AOJcOZjpaUXQjc=)
                          2: 17D98518FD6911EFA889E84DC4F9AE02.roa (hash: TAYiLVNUfBDudM++NA0KlcXDtTA+39+D4En0/M5r2I8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl
                          rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 05:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A030C, serialNumber=103922EB77D940717C819E28C9664629480BBCE5
        Validity
            Not Before: Dec 17 05:59:03 2025 GMT
            Not After : Dec 24 05:59:03 2025 GMT
        Subject: CN=694246a8-a663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:10:a6:9d:4f:90:de:e5:9c:db:e4:18:01:
                    72:5a:62:db:3f:fb:e9:9a:cc:6d:a6:fa:d3:70:09:
                    74:d2:5a:98:b5:c3:44:2e:5f:0a:15:b9:da:83:e9:
                    85:26:94:3a:4a:13:37:04:9d:e6:9c:70:85:b6:c4:
                    94:33:83:38:c5:86:c3:b3:5b:45:76:d0:ba:bf:ca:
                    97:d8:46:04:f0:74:b9:95:8a:fa:ba:e0:c9:5d:27:
                    fd:84:4b:a1:19:db:56:90:0f:63:2a:a7:d8:30:38:
                    23:73:fc:0c:f0:0f:b9:dd:82:95:80:c4:25:13:78:
                    0b:54:33:e8:da:93:d2:25:39:c6:53:f1:af:91:f9:
                    4d:bc:47:8c:03:2b:d4:de:bf:08:7d:29:25:bf:9e:
                    c8:12:48:5e:5e:67:f8:45:ad:01:ae:91:f2:5c:79:
                    dd:d5:78:e0:ae:bd:b4:0d:b7:2a:f2:a4:12:95:31:
                    c0:3b:6b:68:d9:bb:6d:d5:f5:71:bc:5e:39:b8:1e:
                    fe:5d:1a:90:79:ad:07:8e:17:3c:e6:25:1b:90:a3:
                    19:58:af:fc:45:13:d9:50:eb:39:d7:89:c7:ea:f5:
                    69:73:dc:c2:77:2a:22:3f:d1:cc:81:b7:13:43:15:
                    40:eb:57:33:9c:9c:a1:99:c7:9c:c3:00:41:56:17:
                    d7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:1A:DE:21:0C:9F:A2:72:7C:56:D1:B8:0D:55:0B:93:AF:C9:A1
            X509v3 Authority Key Identifier:
                keyid:10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ff:97:13:ad:2c:18:24:81:e4:61:24:68:8c:a5:54:de:28:
         29:8b:0a:a3:20:9e:e9:ea:85:5c:4a:a9:cd:de:78:c2:80:a9:
         00:e0:a3:f5:75:32:d6:64:e3:5d:d7:ce:93:6e:95:07:ba:c6:
         8e:9a:b5:b5:61:63:69:cd:80:ec:cb:8c:79:83:b3:24:44:f5:
         d7:78:21:64:51:fe:4c:02:ed:c3:06:3e:d7:4a:2d:83:19:16:
         9f:2d:fd:ee:3f:d1:e0:39:f9:c5:56:4d:ef:ed:4c:f9:e6:2f:
         36:00:2d:78:f8:6e:ad:d0:3e:7a:9b:4a:62:51:b6:76:63:ce:
         6c:9f:52:46:8a:06:89:ac:37:d2:ac:ce:53:34:05:07:43:35:
         8c:55:6b:eb:01:c3:7b:5e:3d:21:21:c2:49:a6:f6:43:bb:41:
         89:b3:36:75:9d:b1:76:81:4f:46:33:43:e0:ed:bf:03:5a:23:
         2d:55:03:61:56:3f:1c:92:88:ed:43:d9:59:49:c5:34:0d:6f:
         7f:0b:0e:84:d0:78:0b:23:c5:29:ae:16:68:24:bd:9d:1c:f7:
         a2:df:8b:85:7c:07:a5:4a:50:c8:dc:d1:67:77:3d:6f:3d:d5:
         d7:6d:49:9e:30:0c:6a:c0:99:1e:47:1c:59:65:14:33:4d:e9:
         68:0b:d9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:14:41 2025 by rpki-client