This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
File:                     sejBHBQOD6dR6L-mWlnHFd1-HFM.mft (raw, json)
Hash identifier:          YM+oNTb6VnmYrQM7WwXpo8xluXofUk44yHmkgznh5lI=
Subject key identifier:   9C:85:A4:89:35:32:0B:E8:2C:E4:0C:BC:D7:F4:67:08:9A:09:6E:01
Authority key identifier: B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53
Certificate issuer:       /CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
Manifest number:          0127
Signing time:             Sun 21 Dec 2025 03:50:10 +0000
Manifest this update:     Sun 21 Dec 2025 03:50:09 +0000
Manifest next update:     Sun 28 Dec 2025 03:50:09 +0000
Files and hashes:         1: sejBHBQOD6dR6L-mWlnHFd1-HFM.crl (hash: oCShijbb0g2wje0K0RoLkuLtL2Zc2QRByqmrBh0sOOc=)
                          2: 4D45F08C1E3B11EFB02B0184C4F9AE02.roa (hash: JpA4nCXirPXTeRWZSt2R1IEE7eOI01kXe4irrzUxZv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 03:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9F6, serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
        Validity
            Not Before: Dec 21 03:50:09 2025 GMT
            Not After : Dec 28 03:50:09 2025 GMT
        Subject: CN=69476e72-e223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:9e:5b:1a:8e:a2:b8:f5:8a:ab:2e:c1:a6:
                    f5:a9:d0:ff:71:b9:1c:68:20:0c:38:cc:0a:bf:73:
                    34:05:28:45:99:c3:7a:21:65:ae:90:20:44:d5:45:
                    56:c0:b4:21:d0:85:cf:bb:15:7c:49:30:67:d2:06:
                    aa:f0:17:b3:d8:f4:14:05:48:bd:71:bb:73:46:a4:
                    70:85:84:f4:2c:9c:43:52:7c:84:88:46:49:20:4a:
                    14:8b:9b:4f:e4:e9:df:f1:9d:bb:55:04:e8:70:75:
                    47:f5:1c:bf:1d:c7:a4:c3:a3:0c:c5:c0:32:cb:25:
                    da:61:ca:4e:c2:6a:ee:ca:7a:fc:92:ce:c1:97:82:
                    9b:b4:52:96:3e:86:44:6c:67:18:17:05:96:d5:27:
                    fb:fc:f4:fc:35:da:14:23:9c:d4:93:21:70:d8:1d:
                    ae:83:a0:e3:5f:84:74:b5:5c:2a:d0:c1:0b:c2:8d:
                    c9:82:36:29:94:dd:ca:fa:8a:8b:08:f9:24:8b:e7:
                    66:97:ea:c7:0a:b0:21:41:a6:80:bd:52:8d:0e:34:
                    ab:22:54:55:a8:c9:a6:4b:dd:04:2c:ad:0b:00:30:
                    1d:b9:45:9f:f6:00:b8:99:5b:10:6f:38:ec:81:10:
                    29:3e:a9:a2:07:fd:f0:79:c1:1f:88:42:04:6f:17:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:85:A4:89:35:32:0B:E8:2C:E4:0C:BC:D7:F4:67:08:9A:09:6E:01
            X509v3 Authority Key Identifier:
                keyid:B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6e:9f:cf:0f:3e:a0:2a:0a:89:9d:d4:44:05:11:bc:88:99:
         82:e4:b0:ba:be:06:3a:ff:98:59:d9:1a:6e:79:75:05:6e:e7:
         5e:31:59:21:0f:e2:e9:7c:fb:de:b9:18:d7:eb:fd:00:fe:64:
         f0:e4:c4:0e:9f:5b:39:03:15:eb:e6:3d:3e:b3:9b:5b:49:41:
         4d:f2:c1:ff:b3:d4:84:00:64:0c:0d:96:b8:c7:ae:0f:1c:1c:
         cc:c7:64:ec:13:ac:d0:9a:49:5f:d0:c9:8a:fb:45:18:94:3e:
         05:e3:19:23:a3:c8:5c:04:a9:1e:c3:31:99:79:44:46:2f:16:
         ab:e1:f7:51:f0:64:c9:f1:0c:b0:11:17:a8:cb:c5:e5:41:42:
         ee:dd:3f:24:1b:a3:d9:73:73:44:42:8d:b5:3e:d8:39:62:ab:
         06:06:48:4b:09:7d:cf:14:a7:a5:88:e9:c3:45:28:cb:d6:77:
         38:38:6c:23:97:87:b4:d7:7d:b7:df:3c:d4:c3:2e:55:ef:c1:
         be:bd:c5:f7:36:70:d6:93:c2:1d:84:41:71:d3:eb:a1:01:79:
         81:35:36:a4:f9:37:09:c5:d6:db:61:3a:d5:d4:b1:87:59:81:
         6b:46:0b:6e:f6:3b:0b:58:38:22:88:78:5c:9d:82:c4:f1:66:
         18:1a:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:27:00 2025 by rpki-client