This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
File:                     tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json)
Hash identifier:          rrKD4lHBkeA1n8To0ndBd6RlqZc/f8tmuk746xCLKVU=
Subject key identifier:   63:A9:86:77:5D:D8:81:54:97:AD:FB:1B:E4:37:FE:03:A7:9E:07:9B
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Certificate issuer:       /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
Manifest number:          0138
Signing time:             Fri 19 Dec 2025 03:41:20 +0000
Manifest this update:     Fri 19 Dec 2025 03:41:20 +0000
Manifest next update:     Fri 26 Dec 2025 03:41:20 +0000
Files and hashes:         1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: uVBGQIZCIjSYG/lvq98dfEl+DkHuA/8cl63E+ImMOwc=)
                          2: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: 81XCmtMAkz8d5MFKkbARa3r3fmwCBxTjGKLV+BXxDFc=)
                          3: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: ZSCw86aRTNxpcp5h59Ua7FuiYhnQ7JZYo+fxXzI0qEo=)
                          4: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: SSYQhoePXSEZdBWsz2dSUFdjtoPBSwBZmvZLvzmRmE0=)
                          5: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: P3/wZ7DQvbJJfKWvdajqCfHfPIC9vT8MvrKGyjWYukc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
                          rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
        Validity
            Not Before: Dec 19 03:41:20 2025 GMT
            Not After : Dec 26 03:41:20 2025 GMT
        Subject: CN=6944c960-0c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:00:11:fc:72:50:f5:8d:dc:2f:c4:9d:6e:
                    77:62:f0:02:6e:ca:0a:41:3b:a2:f8:6e:1a:dc:fd:
                    22:a2:dd:b4:a5:1a:6b:b5:04:2c:36:e5:7d:67:3f:
                    5f:83:17:b0:5d:b6:8f:c3:a7:d9:b8:8c:55:2a:b0:
                    8b:b9:18:04:0b:81:f1:0e:97:60:c6:3a:e1:45:b1:
                    f9:7f:38:60:a2:c4:1e:c7:7b:80:ec:e0:10:af:68:
                    d2:1b:2a:2b:88:0b:7e:c4:c5:07:11:14:00:4d:4d:
                    af:f1:64:17:fd:f3:d0:1e:ad:3d:59:64:39:cd:98:
                    07:07:08:ee:99:6a:bf:46:d9:a3:a6:4f:23:25:66:
                    9f:f2:40:64:de:f8:28:3a:2a:87:a8:91:95:24:b3:
                    0e:71:5e:c6:8c:80:4d:18:75:35:8c:6e:09:f6:b7:
                    68:73:2e:f0:05:75:a7:2b:70:ea:db:66:72:34:63:
                    81:ae:98:2d:0c:3d:37:c1:0e:74:cf:15:9c:d0:f6:
                    2d:35:db:6a:26:f1:a6:cd:d1:c7:5d:f3:be:1f:d3:
                    ea:d9:a5:0f:c1:31:a7:72:58:a7:3f:90:13:7f:d8:
                    50:b9:80:27:82:ba:64:fb:c9:1e:db:ee:7a:b7:c5:
                    12:f4:4e:bc:24:b2:3b:9d:ad:cd:2d:e0:9a:fd:b2:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A9:86:77:5D:D8:81:54:97:AD:FB:1B:E4:37:FE:03:A7:9E:07:9B
            X509v3 Authority Key Identifier:
                keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8a:18:a4:07:bf:e3:77:44:a2:af:47:5c:a3:ea:f3:7f:e6:
         cf:34:ed:b8:0d:42:ec:76:63:cd:a0:8f:19:6f:d4:48:2d:c6:
         5d:2a:58:2d:27:11:d6:59:dc:cb:85:36:b5:6f:8c:21:9b:b8:
         95:0c:14:82:1f:79:da:a6:45:b4:6d:68:de:29:c5:10:4f:95:
         e3:a7:9b:c8:5e:57:cf:66:bb:bc:9b:20:fd:84:96:2d:a1:00:
         ef:13:ea:6b:ce:b9:72:f3:c1:94:15:cc:fa:1d:af:19:1e:33:
         19:35:11:20:59:e5:24:4f:7b:13:eb:11:d6:5e:9d:10:7f:81:
         2d:65:e0:26:db:f0:43:15:ab:2f:31:0b:3a:31:cd:9f:68:ab:
         6f:47:ad:7b:df:ef:21:c3:48:ec:42:de:5c:9c:ac:57:6e:58:
         ca:d0:4b:d3:46:ca:8c:03:8a:6e:31:af:e5:10:17:7c:2a:be:
         6e:de:57:82:10:68:1a:a2:f2:80:86:d0:4e:80:df:19:f5:6b:
         21:f3:f5:6e:b1:9a:d6:3a:27:d3:da:7b:9c:21:9d:d2:4b:c1:
         da:d5:d4:a5:8a:fb:c5:ec:60:b5:7e:fc:7d:5c:f2:62:d3:27:
         e9:d6:31:f4:89:e8:f7:96:0d:a0:ba:fe:8b:f2:3f:0e:f9:4a:
         b2:af:47:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:34:27 2025 by rpki-client