This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File:                     e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier:          Tuwg9O0+QvIx3PCgMaznlvwPLCUDToYJnYDvt4jbBpg=
Subject key identifier:   59:4D:B7:CD:6D:1C:C1:6B:B7:DD:51:14:9B:84:35:A1:18:7B:96:F3
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer:       /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial:       0D33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number:          0D16
Signing time:             Thu 18 Dec 2025 17:51:43 +0000
Manifest this update:     Thu 18 Dec 2025 17:51:42 +0000
Manifest next update:     Thu 25 Dec 2025 17:51:42 +0000
Files and hashes:         1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: msy9taTrz1z9xvZE7qlJzoVH/yk0uE6l14SZk4RQZFA=)
                          2: CD5B717E8AB811EDA3D4ED68C4F9AE02.roa (hash: XLP4ULkxYx27srGDokdT1/3ibgVd5Ja0S3t9A21I8Bo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3379 (0xd33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
        Validity
            Not Before: Dec 18 17:51:42 2025 GMT
            Not After : Dec 25 17:51:42 2025 GMT
        Subject: CN=69443f2f-4eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:f1:d4:97:cd:96:e3:7e:39:db:20:26:ab:
                    51:5c:01:36:db:16:d2:f7:cd:de:2b:d2:e4:33:f5:
                    3a:10:f5:ad:1d:9b:43:de:88:90:c9:71:76:ed:ec:
                    85:64:17:e6:11:9f:2b:e3:5f:92:52:47:0d:c9:94:
                    4a:6a:57:21:5d:44:82:99:07:f8:b0:03:35:3f:46:
                    b3:89:e3:51:2d:04:69:0b:ac:32:80:f5:02:9b:8d:
                    9e:09:cb:25:32:88:43:63:7f:ae:44:7b:64:85:8d:
                    53:c3:82:72:04:66:62:da:67:22:f4:98:98:d6:75:
                    dd:76:d3:83:30:5e:ff:17:56:23:01:68:14:47:80:
                    49:a4:b3:51:b5:2d:84:e9:53:25:82:6e:67:af:9b:
                    56:49:7f:9f:05:f9:30:f4:9a:44:b3:f8:17:6b:33:
                    1f:a5:5e:0d:2e:1b:3c:6b:3a:de:84:2f:60:57:88:
                    39:25:5d:21:0b:4a:30:36:88:ff:e0:65:07:e8:3f:
                    32:93:b5:61:f0:14:07:2d:23:b4:72:96:e3:b6:b4:
                    52:19:5c:d0:b9:cc:a8:4c:c8:13:0b:4c:00:95:a4:
                    57:ca:51:72:6d:8d:83:7a:44:fd:b1:e4:ed:e4:f3:
                    9a:82:44:31:fd:d9:0b:53:a4:fa:cd:d5:0c:9c:84:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:B7:CD:6D:1C:C1:6B:B7:DD:51:14:9B:84:35:A1:18:7B:96:F3
            X509v3 Authority Key Identifier:
                keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e9:e1:a6:db:f6:1a:21:24:e6:81:da:70:47:a7:53:93:0d:
         3f:90:fb:fe:8b:6a:ac:4f:de:20:82:4f:88:d1:0e:2c:73:16:
         e3:98:99:22:9f:29:27:17:9a:3e:bf:f4:a5:2a:59:0f:2e:0b:
         42:4f:f0:d7:32:ec:95:28:8a:b1:81:a7:31:26:97:e4:85:bf:
         51:19:26:6e:31:89:7f:79:a3:59:dd:d7:4b:55:6d:cd:3e:15:
         0a:98:78:6c:9e:49:27:33:01:be:0f:f4:ca:cc:e4:c6:b9:e9:
         06:76:e8:49:dd:f8:35:ba:e1:6e:f6:a9:ba:6c:d7:89:87:70:
         25:d6:f7:45:97:bf:75:aa:59:17:80:78:78:1e:43:d2:69:80:
         07:8f:99:1b:46:a0:61:a6:c4:b8:0b:4a:ce:fb:ac:ab:1c:f2:
         22:40:07:cd:a1:ae:28:68:8f:c7:64:43:03:4a:ce:7a:f6:25:
         15:48:39:01:11:be:97:21:17:c5:bc:0c:7b:7f:28:5d:92:88:
         27:58:9a:1c:e0:4f:32:52:ae:68:e1:d7:b6:2a:2e:ea:04:da:
         0d:65:01:59:05:e2:5b:c1:ba:6f:f6:dd:6e:5c:8a:37:1c:e0:
         31:bb:b7:08:2e:fd:f3:75:80:b4:a8:2a:b5:8b:51:e9:19:d2:
         ba:db:89:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:03:58 2025 by rpki-client