This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
File:                     51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft (raw, json)
Hash identifier:          jVyM3Fsd/ynAzoSNNIzROfrd0pDVwg6X2FWOKTGFBJg=
Subject key identifier:   AC:CD:08:13:11:5E:92:E1:2F:4F:5D:C1:22:8F:EB:00:FA:44:B2:CD
Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D
Certificate issuer:       /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D
Certificate serial:       1BEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
Manifest number:          1BE1
Signing time:             Thu 18 Dec 2025 16:08:15 +0000
Manifest this update:     Thu 18 Dec 2025 16:08:14 +0000
Manifest next update:     Thu 25 Dec 2025 16:08:14 +0000
Files and hashes:         1: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl (hash: 1q8Z0qGlVug+yzYptRbr2tuKGtiU10cYCgjJ52s07po=)
                          2: B6FD84CE54F611E79DF7E643C4F9AE02.roa (hash: ZjgD8PMkf3vUCSjewa6ZRQ93PcHYL3xnQiPgdUCYUGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl
                          rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7150 (0x1bee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB063, serialNumber=E7584F959A081A4DD94809353051D235939C391D
        Validity
            Not Before: Dec 18 16:08:14 2025 GMT
            Not After : Dec 25 16:08:14 2025 GMT
        Subject: CN=694426ee-ce3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:3d:51:4f:90:11:fe:40:13:97:29:07:7c:
                    32:73:4d:c4:be:5b:8e:94:79:d1:d9:c9:82:b9:58:
                    16:d1:c1:1f:19:58:58:f4:30:36:88:5b:f0:9d:60:
                    0e:71:04:67:9c:6f:86:98:eb:bd:e7:33:51:e6:98:
                    54:9e:ec:d7:dc:de:c3:00:fd:fa:89:63:1c:32:9a:
                    79:ae:f1:ff:99:a0:c1:91:d8:b1:1f:1d:07:ba:08:
                    19:30:c5:1c:35:27:30:7c:6a:22:8c:9c:bf:6f:02:
                    53:9c:71:d8:3e:db:9d:f6:77:0d:6e:0d:0c:7a:f0:
                    a1:3c:47:af:0d:2c:e8:b6:7d:f1:b4:c7:58:a1:aa:
                    a3:e3:17:40:c8:8d:5b:a2:5b:7d:f7:6f:16:67:88:
                    58:ad:de:db:7c:61:df:6e:64:96:1a:88:d2:0f:96:
                    30:d2:66:10:a4:9e:9a:5e:65:aa:27:6a:90:dc:74:
                    a4:48:5a:3d:89:7b:db:52:ca:0d:44:89:7d:89:d4:
                    fa:09:75:19:07:96:48:60:23:76:75:2a:1d:74:cd:
                    d1:02:84:01:c6:c7:1b:62:76:5d:92:21:0b:9c:4e:
                    4d:3a:17:bb:d5:7e:f4:57:17:aa:3c:c2:8c:1e:53:
                    0c:6b:49:b6:b0:58:a8:23:e4:34:c0:7e:37:51:71:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CD:08:13:11:5E:92:E1:2F:4F:5D:C1:22:8F:EB:00:FA:44:B2:CD
            X509v3 Authority Key Identifier:
                keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:81:26:b9:9a:c9:18:94:97:2c:67:ab:a1:84:cd:71:60:91:
         8f:56:cb:1e:f2:5c:ec:7f:a9:da:69:d1:96:7d:dc:c0:c2:51:
         58:9c:5c:40:3c:6e:33:16:e7:b9:6e:c8:31:b1:62:ac:69:af:
         bb:dd:d5:d6:a9:94:38:0e:1f:50:02:e2:a8:63:27:8c:ef:d3:
         f9:ea:d9:e5:a3:51:f1:15:09:97:bc:35:f5:9c:4d:8e:c4:e1:
         7c:39:0b:6d:81:ef:0a:ed:8c:f9:2b:76:36:2e:f9:96:cb:db:
         83:4b:12:b6:8e:a8:e1:fd:2b:7f:ed:f5:96:12:51:a1:f3:a9:
         54:84:76:95:45:10:4e:0a:08:68:5c:3c:d6:39:d0:b9:f8:e5:
         8d:dc:0e:d2:06:eb:79:01:95:6b:e6:f6:e3:4c:67:9a:71:5d:
         10:f6:3a:e6:b4:59:d7:d0:9d:83:04:0a:94:d1:cb:72:c9:b1:
         d4:77:8b:2c:87:ed:10:55:be:b7:12:60:a2:44:5a:05:95:33:
         58:85:41:93:b6:77:0b:63:34:0d:a9:f7:9c:3b:32:bb:3e:89:
         6d:62:6f:dc:f2:c5:7f:a8:91:63:5d:3f:73:6b:37:e1:23:e1:
         55:58:1f:d0:fe:8e:32:cb:44:1c:bb:3d:3e:d1:51:5c:7d:c4:
         3a:ec:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:26 2025 by rpki-client