This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
File:                     MJoqNkM0qd26Sm1EBB15pdMrr6s.mft (raw, json)
Hash identifier:          jxwm6I6KLM6flNBeXENYphIofwy4XB2cZAGZZC98+is=
Subject key identifier:   4D:6C:BF:17:C0:29:3F:B4:79:8F:4C:94:FB:3D:75:10:96:C7:A2:AC
Authority key identifier: 30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB
Certificate issuer:       /CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
Certificate serial:       0329
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
Manifest number:          0324
Signing time:             Fri 19 Dec 2025 00:19:32 +0000
Manifest this update:     Fri 19 Dec 2025 00:19:31 +0000
Manifest next update:     Fri 26 Dec 2025 00:19:31 +0000
Files and hashes:         1: MJoqNkM0qd26Sm1EBB15pdMrr6s.crl (hash: nIeqHM5lFSczpjz4z/K7ly5U6RXZmzCRtkwTeKeaCdI=)
                          2: 29B6EA80F2C411EC97A42B73C4F9AE02.roa (hash: MIhJBQ/IYNcOuozmSACr2/1KtqYw3Vi4E6eq3oh42As=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl
                          rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC100, serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
        Validity
            Not Before: Dec 19 00:19:31 2025 GMT
            Not After : Dec 26 00:19:31 2025 GMT
        Subject: CN=69449a14-4232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:97:6d:53:34:dc:d9:0c:74:e0:63:f9:f7:d8:
                    ab:c4:0b:19:78:4f:25:1f:62:1c:4f:79:70:08:82:
                    61:35:6b:16:a1:84:32:3a:03:5c:b9:77:27:61:99:
                    fb:47:28:50:c4:af:c8:a5:6b:d0:5e:86:41:5c:d2:
                    58:a6:9f:0a:dc:60:1d:3e:86:6f:46:30:d8:c0:9c:
                    6f:d9:21:c1:1b:2d:75:26:98:56:cc:f1:b7:e9:e0:
                    0f:ff:e8:0a:d7:13:d5:1b:ec:78:65:6b:85:5b:0f:
                    b7:12:73:26:51:40:ca:65:ea:cc:b7:e5:96:e9:29:
                    a3:b0:28:c8:51:cf:c9:e2:59:75:20:4e:25:08:62:
                    6d:40:f1:53:c5:77:89:4c:b7:c9:ef:b9:af:a7:94:
                    9a:78:2d:56:72:6d:31:c5:0b:3e:3a:e3:e9:63:3c:
                    ce:7c:f7:84:af:3a:db:01:50:32:01:ed:4b:58:d5:
                    e4:97:e7:44:a2:da:9a:d4:ae:68:a5:9f:5c:11:10:
                    b8:6d:42:26:5a:52:61:8e:cb:98:54:27:8a:1b:8b:
                    bb:8e:d4:4c:fd:9e:2c:42:29:10:73:cf:ca:f0:d3:
                    a2:ae:7d:c7:df:41:d9:6c:2e:25:e7:a1:33:37:49:
                    cc:92:96:f5:4a:8d:f5:34:cd:61:90:39:58:e3:ff:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6C:BF:17:C0:29:3F:B4:79:8F:4C:94:FB:3D:75:10:96:C7:A2:AC
            X509v3 Authority Key Identifier:
                keyid:30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:23:2f:29:51:b9:44:80:b4:9b:2f:4e:35:b6:84:03:44:a3:
         2d:9e:ff:b1:9b:f3:ab:8c:3b:c4:8e:c8:74:2f:b9:68:4f:72:
         1c:90:f4:c8:9a:63:a9:12:92:c2:aa:0d:2b:31:63:bb:83:ad:
         90:4d:57:72:e7:8a:46:9f:b4:11:c8:4b:b3:50:7a:7d:c1:50:
         1c:2d:79:6b:63:2e:98:d1:d2:93:ba:e6:f8:da:dc:67:aa:18:
         3b:35:c4:15:69:82:10:70:ed:d9:a2:bb:fc:32:2a:42:a0:cb:
         c3:c8:7e:e4:af:6d:16:e9:a5:4b:d4:66:34:cc:5c:c7:e4:21:
         e4:15:db:d4:49:35:21:3a:f2:8c:7f:74:24:72:37:9d:a5:73:
         cb:e1:71:92:5e:f2:29:b3:e4:34:5e:b8:14:1f:c8:57:04:9c:
         e7:59:c0:f7:f1:89:f6:f1:8d:7f:cc:6c:17:41:ac:ca:13:4c:
         71:0a:27:da:88:e9:47:ce:70:9e:48:69:4d:6b:43:00:71:15:
         de:b0:64:5c:f7:79:5e:aa:9e:ca:4d:02:20:ab:d8:5c:c8:e2:
         63:28:a1:47:33:bd:63:cd:5f:3a:7e:55:9d:03:ef:df:c5:9e:
         67:20:bb:14:30:88:fa:08:61:69:0f:eb:94:37:fb:ba:3b:bb:
         68:8d:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:11 2025 by rpki-client