This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
File:                     eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json)
Hash identifier:          Nnl8G+RKyZ3GQfnlgyD5GY8G6zY1P4SxAhbHOR9mBac=
Subject key identifier:   01:BA:21:7D:42:2D:ED:2E:7E:0C:B6:08:1E:53:CE:EC:D2:9C:B7:98
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Certificate issuer:       /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial:       0DB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
Manifest number:          0D89
Signing time:             Wed 24 Dec 2025 17:39:54 +0000
Manifest this update:     Wed 24 Dec 2025 17:39:54 +0000
Manifest next update:     Wed 31 Dec 2025 17:39:54 +0000
Files and hashes:         1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: e85Qc/VVO8AFMZhbbsz4gxvGkwzFG3aQk6L6EXFkae4=)
                          2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: Y+E2Zw8cSibO88OVDC2atGI8LaONXqL9mkfjf3pS0hw=)
                          3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: J4Hv1naBopBVbkvmkR77VLmGUJiYmVXkbO9FW9SSP/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
                          rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3504 (0xdb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
        Validity
            Not Before: Dec 24 17:39:54 2025 GMT
            Not After : Dec 31 17:39:54 2025 GMT
        Subject: CN=694c256a-4687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:95:bb:8d:79:a1:b0:06:51:38:e9:bf:2d:
                    45:23:70:59:69:60:48:a0:a3:9a:0c:c5:1d:cf:fd:
                    85:10:c2:2a:d5:05:b0:12:3e:fe:51:87:6d:ca:cf:
                    eb:27:91:42:d8:0d:66:26:1c:68:0f:cc:a7:f1:13:
                    8a:91:f9:54:84:7e:c2:eb:f4:83:1c:ac:eb:df:3a:
                    72:3d:ae:4d:4d:3c:70:58:89:94:e7:78:e6:ae:ba:
                    0b:ed:0a:cb:a8:92:f2:e2:d3:84:46:5d:9d:1b:0d:
                    85:00:1a:43:02:4c:53:14:23:06:83:a8:47:e9:a5:
                    ed:b7:ec:d5:a3:a3:22:e3:e2:ce:11:9d:b0:a4:0c:
                    a1:88:fe:ea:6e:0d:d4:e7:cc:75:8b:65:3a:ae:09:
                    b2:7a:13:47:b7:2d:c2:41:52:bc:6c:d9:c4:b0:2a:
                    10:3c:63:6b:4d:d4:2b:89:7b:99:c0:d9:5d:49:d6:
                    4a:59:37:a3:bb:f4:a2:e3:4f:10:42:6f:ad:24:55:
                    16:71:54:fa:c8:42:67:cb:d5:82:45:a9:be:dc:ce:
                    8a:4c:bc:91:fa:52:4e:bf:ea:d5:a8:ae:5c:46:be:
                    58:ae:d5:dd:09:ff:88:1e:f4:dd:de:59:d1:a4:51:
                    3c:79:cd:dc:43:6e:0e:81:fd:c7:38:7f:9e:22:68:
                    0b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BA:21:7D:42:2D:ED:2E:7E:0C:B6:08:1E:53:CE:EC:D2:9C:B7:98
            X509v3 Authority Key Identifier:
                keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:69:f7:91:5b:e6:17:82:f2:85:21:72:56:51:bf:d5:35:b0:
         e4:57:dd:ae:2c:01:68:6b:54:cd:63:5d:5a:a2:b9:f8:44:b1:
         78:aa:5d:92:30:c2:55:76:d0:ce:28:2f:ab:89:9f:91:e8:46:
         fb:db:ed:6f:46:9b:1d:8a:8e:66:e3:0e:fd:87:62:74:c4:de:
         2a:fe:5c:08:4e:db:49:b2:82:78:ce:1b:a2:64:6e:9a:82:95:
         4e:10:77:da:04:34:99:12:cc:1a:59:22:c2:af:d2:44:45:19:
         2a:60:5e:b8:c4:89:99:46:f9:fb:50:a7:70:51:b9:1a:a1:4c:
         16:b3:a5:5c:fd:c5:bb:90:de:59:44:f3:8a:22:90:cc:13:2f:
         34:8f:af:9d:bf:25:86:be:cf:59:c9:f0:6a:df:a0:c9:4f:21:
         2a:cb:c0:4f:ab:8b:9d:20:aa:bd:5e:fb:e9:6c:fb:a6:91:cf:
         4f:9c:22:cf:37:f2:4e:33:eb:f8:82:44:27:76:fd:d4:4e:6a:
         b1:55:74:49:3d:16:8b:7e:8d:da:a7:71:65:80:19:54:31:a4:
         8a:82:88:9a:4a:cb:83:7d:6d:5c:89:86:57:f0:6f:ca:4d:86:
         54:73:d5:2d:8b:97:e8:0a:82:25:47:17:be:17:6a:23:cd:5c:
         48:aa:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 19:38:59 2025 by rpki-client