This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
File:                     RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft (raw, json)
Hash identifier:          n5teWGSzvgGoWi5IBCjhHsY74ZgRk04a3/rhJ/WhBGQ=
Subject key identifier:   70:AD:A4:5D:A5:34:EB:95:F4:5A:3F:D1:A6:AC:25:BC:76:55:C5:66
Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
Certificate issuer:       /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Certificate serial:       01F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
Manifest number:          01EE
Signing time:             Sat 27 Dec 2025 01:35:48 +0000
Manifest this update:     Sat 27 Dec 2025 01:35:48 +0000
Manifest next update:     Sat 03 Jan 2026 01:35:48 +0000
Files and hashes:         1: RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl (hash: qDDrcsntu208qQ3UkuCtC1IeCvrTiS3OaRBK4u6KPgw=)
                          2: 68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa (hash: BCIBhB1yRhPPINtU+Jvj6+AcCagEYHcs0oGO7PLSo3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
                          rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 01:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1938, serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
        Validity
            Not Before: Dec 27 01:35:48 2025 GMT
            Not After : Jan  3 01:35:48 2026 GMT
        Subject: CN=694f37f4-36f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:01:d6:f7:d4:23:1e:b5:2d:72:60:18:b3:
                    b5:de:39:0d:10:63:02:2a:59:37:5c:fa:ab:62:24:
                    75:bc:96:df:48:69:45:71:8f:c7:f8:c4:6a:d9:6c:
                    fa:3e:65:38:13:25:a8:87:65:66:62:3d:fe:bd:7e:
                    03:43:a3:c1:b9:e8:35:81:44:b5:ff:d4:ed:28:7b:
                    4d:31:25:40:2a:85:d6:8e:a7:35:45:63:99:dc:d0:
                    a2:85:ef:16:26:c5:e6:a1:55:44:ec:c7:ad:95:90:
                    03:65:c3:1e:b7:fd:ec:cf:49:28:93:6d:3f:19:8e:
                    d0:8c:33:b6:a7:e3:bf:5b:83:3e:78:26:9f:5e:9d:
                    9c:a7:b3:5d:ba:34:e6:ff:56:9a:b9:a7:22:3d:c2:
                    74:ed:97:45:42:5e:a0:ef:6c:e7:30:18:30:c0:7b:
                    6f:ce:cf:ee:5a:4a:7e:34:d6:4c:6d:e9:ed:73:e8:
                    fe:46:ee:0b:da:c6:02:d9:31:21:52:38:a5:ca:7f:
                    1e:8a:00:e5:d7:b1:2c:6e:9a:80:90:6a:f7:43:8b:
                    4c:02:4a:cd:18:1a:98:e7:d9:46:93:5e:c7:f7:6c:
                    b9:71:2e:d1:04:84:21:f7:32:90:ef:4b:e6:4a:48:
                    c9:1d:ba:b3:05:59:fa:3f:c9:b6:d6:a6:6f:b6:1d:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AD:A4:5D:A5:34:EB:95:F4:5A:3F:D1:A6:AC:25:BC:76:55:C5:66
            X509v3 Authority Key Identifier:
                keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:13:7e:db:50:a7:63:a7:62:62:64:34:9c:81:8e:63:48:28:
         a6:7e:39:77:de:c2:c4:0f:01:13:35:14:b0:79:12:63:02:81:
         1b:f0:2c:a3:df:1a:be:54:d2:3a:91:cf:73:1e:27:21:8c:9f:
         22:f7:b5:b4:de:36:07:53:8d:7e:95:33:56:57:1c:a2:07:7b:
         66:4d:15:06:05:1a:d4:47:4f:df:75:ab:fe:99:b0:2a:13:0b:
         00:0a:71:8a:2b:4d:ce:59:3c:7e:11:30:46:5b:2f:6e:8d:c1:
         62:12:be:31:d2:80:55:e3:8e:e6:d3:57:76:e2:11:ea:18:04:
         d1:fc:ff:9f:a2:69:4a:49:ac:9b:ba:95:30:44:4b:b1:f3:c0:
         b8:66:96:f4:2e:5f:ac:b6:ec:57:7c:97:9f:f2:23:e6:0b:7f:
         89:2d:c3:05:f6:a9:80:94:05:d7:14:d4:f6:9e:88:78:0f:a6:
         d1:a1:e0:91:87:f5:db:8a:16:1c:be:6e:29:f7:d2:61:a6:2f:
         c0:ba:d0:a1:30:b0:7c:dc:0a:06:a8:ca:e5:fd:61:33:f5:d5:
         95:de:23:26:4c:2e:ed:45:8d:0e:48:60:1b:52:68:43:d9:be:
         b7:91:f4:ea:a6:75:fc:34:52:be:98:e8:fd:15:85:ca:13:21:
         09:4a:9a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 06:14:45 2025 by rpki-client