This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
File:                     aTn8BA2lwwt2bceU-cpML0Gsruo.mft (raw, json)
Hash identifier:          iqK73DN+4TnSVY7RK1beWiqdxXpyoxgek1UGaj69Ei8=
Subject key identifier:   F8:D9:64:CF:22:8D:B4:04:FF:2F:E1:F9:18:7D:B1:F5:45:9F:E3:C1
Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA
Certificate issuer:       /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
Certificate serial:       04CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
Manifest number:          04AB
Signing time:             Wed 24 Dec 2025 23:11:51 +0000
Manifest this update:     Wed 24 Dec 2025 23:11:51 +0000
Manifest next update:     Wed 31 Dec 2025 23:11:51 +0000
Files and hashes:         1: aTn8BA2lwwt2bceU-cpML0Gsruo.crl (hash: Irl6Ufue5YQzCjcvqaILX1KJ4Zv5Ib5mNu2+03y/vPY=)
                          2: 27E42824621B11ECB96F443FC4F9AE02.roa (hash: +odywDquwxeF6SYI69k239OrBCZD98jk7qEP7myd7ZI=)
                          3: 63E8739003C111EEB2272068C4F9AE02.roa (hash: Lee2Usqd9hsodQDlh02wVnCx8PbKZpN8M7lZu7WoioY=)
                          4: 17ABE41ACAF611EE894A2D50C4F9AE02.roa (hash: QEkMEVTQBayFx2m7EivW7eRMOejHOK5Ic4vwhvxB81A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl
                          rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 23:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2A1F, serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
        Validity
            Not Before: Dec 24 23:11:51 2025 GMT
            Not After : Dec 31 23:11:51 2025 GMT
        Subject: CN=694c7337-9716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:65:9a:41:79:67:ed:33:65:d5:24:d5:0c:
                    1e:63:0c:83:5a:c7:6e:83:59:61:3c:31:87:86:ee:
                    3e:e5:c5:b1:3d:e3:d4:09:31:3e:5f:cc:4e:cf:ef:
                    ca:c7:70:7f:d7:e0:d1:60:7a:28:48:2a:3e:0c:da:
                    71:b5:00:fa:d9:22:29:09:7e:cf:f7:8d:46:86:b4:
                    2d:90:a9:25:65:d4:85:6e:d3:4c:e3:ec:34:69:04:
                    83:35:fa:47:f0:e9:ea:02:0f:e6:d4:72:aa:c8:c3:
                    42:cd:a3:d9:a5:2f:b9:d9:97:5d:8c:f8:11:82:91:
                    e9:3d:29:d4:b6:7e:31:f3:20:28:7c:b4:db:f5:10:
                    b3:11:0b:1a:47:36:3d:ce:0d:de:f7:b0:ac:42:d5:
                    02:9e:e6:e1:ab:14:48:e5:ae:c2:d7:f9:e3:be:43:
                    90:7e:60:1d:02:d7:fc:93:7d:0d:a6:10:f7:7e:c4:
                    e6:c7:47:98:3e:97:da:b9:aa:7a:62:6a:6d:76:04:
                    84:44:b2:4d:77:31:df:e4:4e:ef:89:e2:0a:0a:45:
                    1e:8a:a1:86:05:4a:d3:34:10:82:83:bc:cd:4e:0e:
                    ea:a7:ef:dc:6d:79:59:06:64:dd:ba:a5:e7:71:c0:
                    a6:22:6b:65:dc:27:cf:5f:4d:a2:d3:64:57:24:65:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D9:64:CF:22:8D:B4:04:FF:2F:E1:F9:18:7D:B1:F5:45:9F:E3:C1
            X509v3 Authority Key Identifier:
                keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:4b:3e:32:66:a9:68:35:3a:b0:5e:d5:dc:24:66:f7:45:
         b3:93:52:34:9d:47:23:e0:5e:91:0c:ef:1b:a7:60:40:ab:c8:
         2a:14:1b:38:a5:b6:14:c3:03:f6:22:55:a5:e5:fc:9e:fa:d7:
         26:bb:ed:c8:81:64:1b:7d:c3:72:a5:81:7f:b2:c8:49:e5:96:
         bb:4c:2b:1a:0b:33:97:ab:b2:e9:fc:35:b4:00:51:a6:57:ee:
         29:b1:e2:be:89:c6:3f:bf:5d:4c:f8:18:5d:ee:d6:2a:57:a2:
         a4:8a:a5:16:bc:aa:64:9e:73:24:c6:80:30:76:1a:8c:93:62:
         60:6d:8f:db:59:c1:23:eb:d7:a6:8b:29:ec:ae:1e:af:1f:ba:
         7d:bd:36:37:a8:46:b7:91:b5:db:ca:d0:68:75:ee:c3:c7:f6:
         35:c4:3a:5f:49:92:a7:bc:d0:e8:22:f7:87:0f:91:e4:79:22:
         25:6f:fc:47:f3:d7:2b:30:7d:14:71:6e:3e:63:0b:6b:cc:70:
         65:7a:c1:6b:6d:d3:20:df:99:a6:48:87:1f:c7:94:e6:3a:c4:
         f0:ca:9e:75:ba:76:46:4f:ac:28:e3:37:4f:c2:e1:c2:00:ab:
         ea:89:54:c3:cb:da:6d:c0:42:16:1c:b6:b3:b7:c7:c2:bd:fc:
         91:21:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 03:29:34 2025 by rpki-client