This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
File:                     j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json)
Hash identifier:          eIRPe9sXMA8h4jkE9g2UumbuHjXNOnMrDvbaV3ZrVKg=
Subject key identifier:   05:40:41:3B:DD:BE:FD:A8:58:32:88:AD:7E:87:E7:E0:12:31:6D:8A
Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F
Certificate issuer:       /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
Certificate serial:       030F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
Manifest number:          030A
Signing time:             Fri 19 Dec 2025 00:23:13 +0000
Manifest this update:     Fri 19 Dec 2025 00:23:13 +0000
Manifest next update:     Fri 26 Dec 2025 00:23:13 +0000
Files and hashes:         1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: Br0ybNjsC9KOdGwQZTVftHw+ui6F309lsDUvilO8GWY=)
                          2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: vsUIy1tbHWL8V/egiXCJ22jgmvrNd5Q4mwZ6W3OeA1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl
                          rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
        Validity
            Not Before: Dec 19 00:23:13 2025 GMT
            Not After : Dec 26 00:23:13 2025 GMT
        Subject: CN=69449af1-906a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:89:e5:47:ea:2d:36:b6:42:cd:1b:65:82:33:
                    4c:bb:13:f1:ad:6a:7f:1b:6b:c2:bc:86:d7:cf:c0:
                    f4:84:63:3f:de:a5:84:28:86:31:2e:17:2d:47:2b:
                    89:d9:cb:b1:67:7b:81:e9:f9:66:07:ef:a8:09:ca:
                    ee:ba:ce:5f:0f:83:02:93:51:d3:cd:17:0e:92:fa:
                    0d:f6:4b:27:7c:df:84:1b:45:f8:86:95:fa:aa:d5:
                    b0:af:3a:f6:b3:78:6e:f3:1d:7f:dc:6c:42:24:73:
                    45:70:18:0d:ce:e1:2d:11:0e:35:cb:58:f0:b7:7d:
                    af:3e:a4:69:af:7a:59:3b:e2:0f:a6:e8:c6:c7:bf:
                    e4:b5:a6:87:e5:c7:54:33:02:af:c6:c2:1f:a5:8f:
                    9a:25:60:eb:02:f9:60:45:ee:00:31:d9:6f:83:5d:
                    94:87:24:03:2f:c7:86:28:dc:3f:bd:e1:0e:f5:5e:
                    2b:72:1f:e1:0c:76:e6:11:d3:67:eb:83:d6:ba:46:
                    97:bf:10:ab:a3:e0:93:b3:34:40:7d:4e:67:46:68:
                    60:05:ad:c8:d7:58:7a:e8:05:96:5d:fa:39:f4:02:
                    df:9d:7c:cc:62:57:41:e4:3c:70:9b:89:b1:62:e6:
                    b9:b5:15:e1:a5:f7:1f:b5:0c:14:26:41:7b:3e:ac:
                    1d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:40:41:3B:DD:BE:FD:A8:58:32:88:AD:7E:87:E7:E0:12:31:6D:8A
            X509v3 Authority Key Identifier:
                keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:fc:cd:fd:d2:bb:57:19:30:5d:86:e7:a6:c6:9b:a6:e0:8b:
         44:0a:15:63:de:7e:10:ee:85:f6:6a:58:6d:a8:ed:56:25:1a:
         51:32:e5:49:07:6d:83:2a:4d:43:be:b7:7a:28:32:36:27:b1:
         d7:b2:2f:81:27:e9:d7:aa:a2:73:d9:5d:ab:4a:b7:bb:13:a2:
         ad:35:dd:b5:b1:5c:31:19:92:8e:bf:d2:97:94:1a:6c:37:0e:
         2e:ff:c1:86:8b:24:ed:70:08:72:ce:31:b5:5c:a7:b2:07:c6:
         57:a2:12:a6:a3:0e:bf:ec:9b:68:8d:53:fb:2f:47:6c:26:21:
         da:8a:fa:b9:c7:52:29:e3:65:39:7b:b0:a9:b4:0b:63:68:ad:
         40:32:53:bf:6c:40:a0:6d:d5:7e:6f:24:f7:ac:e0:f2:ea:d0:
         1a:ad:b4:71:fb:7a:8c:53:da:7e:d4:1b:e1:38:0f:0c:1f:d9:
         dc:83:95:b6:91:7e:23:de:14:d1:1b:7e:6b:f5:fb:97:c9:6c:
         5a:5b:85:c2:43:26:80:d6:69:86:5d:f3:67:d0:65:7c:c3:64:
         eb:b8:80:76:c4:54:3e:12:27:46:cf:8e:d3:80:bf:35:2b:41:
         0c:54:9f:f5:d9:94:2a:2c:70:5d:53:64:54:26:1d:da:48:cb:
         05:c4:59:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:22 2025 by rpki-client