This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
File:                     S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft (raw, json)
Hash identifier:          p61gohB9meN9vWw8LVx0WgMvmMZ6USYBMcY3JNg7olA=
Subject key identifier:   31:FC:E9:9E:16:2C:B2:2D:7C:87:C4:B6:CE:F4:1E:28:D9:7B:22:CD
Authority key identifier: 4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35
Certificate issuer:       /CN=A91A40AE/serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
Certificate serial:       030E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
Manifest number:          030A
Signing time:             Fri 19 Dec 2025 00:23:00 +0000
Manifest this update:     Fri 19 Dec 2025 00:23:00 +0000
Manifest next update:     Fri 26 Dec 2025 00:23:00 +0000
Files and hashes:         1: S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl (hash: kbz6d4OuGFDPMI6jCivq1zvPt5umpq+hyQndN554DnI=)
                          2: 0C2902B4FC3D11ECAD619C35C4F9AE02.roa (hash: MBRZFEnGY9HD1b044iv1jg/gd/S5QUVqB7co270dkzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl
                          rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A40AE, serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
        Validity
            Not Before: Dec 19 00:23:00 2025 GMT
            Not After : Dec 26 00:23:00 2025 GMT
        Subject: CN=69449ae4-0c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:10:8f:3d:50:cc:cb:b2:79:97:b1:97:90:b5:
                    09:ed:db:87:33:ef:41:60:31:d2:a8:a6:9b:54:34:
                    24:ff:57:6e:af:fc:4a:38:b4:9f:e2:e0:10:1a:ee:
                    81:25:be:51:7e:1f:b4:9a:4b:47:f5:56:2e:89:c1:
                    40:ec:52:0a:2e:a4:02:cc:a6:69:07:09:2d:2f:91:
                    de:c4:8c:5d:32:bc:bb:0a:3a:85:2c:8e:ec:de:f0:
                    c2:0a:f8:04:91:34:83:5d:b8:64:2a:5d:c9:f2:a6:
                    28:a4:13:95:76:d3:9e:73:91:f5:27:88:6f:8f:de:
                    e5:77:ac:92:70:d0:c5:9c:8c:6a:56:f2:68:79:21:
                    48:f5:b5:db:10:06:0a:b2:d4:20:09:7f:d8:0c:e7:
                    22:d0:af:40:eb:bd:c8:de:43:a2:bf:43:f9:ed:ff:
                    08:39:bb:61:d7:69:16:a1:8c:54:66:88:d5:8f:7b:
                    07:77:e0:17:ee:b4:50:64:f0:fb:18:69:c1:60:a0:
                    ad:ea:24:54:2f:41:b4:fa:1b:86:1e:72:64:07:47:
                    73:19:d6:d9:51:b5:a3:b5:ec:6a:9a:e7:ec:69:33:
                    3e:c8:9d:8e:18:e8:ca:71:ab:a3:c6:5d:de:88:e8:
                    bb:16:74:54:86:19:61:43:00:1c:ad:44:19:97:68:
                    1c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FC:E9:9E:16:2C:B2:2D:7C:87:C4:B6:CE:F4:1E:28:D9:7B:22:CD
            X509v3 Authority Key Identifier:
                keyid:4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4a:35:fc:1c:c2:d5:14:b6:8e:d4:ca:be:2e:e4:84:fa:4c:
         11:ce:b9:a4:b3:86:c1:16:91:4c:e9:b1:72:81:d4:9f:e9:db:
         a0:ca:15:b2:26:ef:79:5c:d2:4c:96:38:20:4d:bb:3c:e4:cc:
         b0:b5:7b:88:42:68:47:e7:56:a4:36:6b:b2:6d:cd:bc:df:e3:
         07:d0:e1:72:8a:33:81:f9:a5:c2:e6:99:6e:80:22:98:93:94:
         4f:97:69:f3:e7:a1:af:53:18:3e:1e:39:dc:f0:5f:fa:96:00:
         78:3e:07:c0:10:4b:2d:d8:db:b2:2d:8a:2b:eb:6e:eb:6c:16:
         69:36:83:28:c8:fa:e1:3b:b2:30:ec:3b:d2:37:3b:92:91:8f:
         0f:88:de:c2:b7:a7:20:38:f4:d1:48:33:0e:ba:c4:ab:a4:cd:
         75:f6:88:7a:97:28:09:8c:e0:2c:e4:9f:6f:c2:01:58:e7:b1:
         b5:0a:ac:f6:c3:bc:a4:80:ac:da:0c:a1:fa:36:9b:0f:5e:3d:
         35:8e:f2:a2:85:c4:c5:aa:d1:e3:6a:6d:ad:82:1d:7b:64:7b:
         3c:28:89:f0:33:04:d6:31:0e:3f:e1:a6:21:90:71:17:27:c3:
         f6:89:ae:bc:56:3d:c3:36:08:63:4b:67:f0:f5:aa:73:39:cc:
         f4:48:74:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:06:14 2025 by rpki-client