This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
File:                     b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json)
Hash identifier:          rrQ6XgT6DrDEOSS7vevdFBWiA3ptnN9APe8S7q65PCI=
Subject key identifier:   E4:3B:2A:EF:B6:04:62:C1:E5:52:3E:80:66:DD:FD:CC:10:77:A1:37
Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
Certificate issuer:       /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
Manifest number:          018F
Signing time:             Fri 19 Dec 2025 02:41:38 +0000
Manifest this update:     Fri 19 Dec 2025 02:41:37 +0000
Manifest next update:     Fri 26 Dec 2025 02:41:37 +0000
Files and hashes:         1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: AF6DdbPTCyZQKE2jNsXHXR1Vj7RJeR+HiWRkzj1l4XM=)
                          2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: 2U1GUUuHz/HspZCAbX8MNYKTWmtmGMuAJscXPNynpMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
                          rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
        Validity
            Not Before: Dec 19 02:41:37 2025 GMT
            Not After : Dec 26 02:41:37 2025 GMT
        Subject: CN=6944bb62-000a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:8d:b3:df:74:e4:3b:37:ba:2c:80:03:6d:
                    1e:35:24:42:4f:78:30:d4:2c:09:06:13:1f:25:14:
                    ac:ee:07:ba:98:5e:0a:c4:9a:03:c8:d0:0a:5e:c1:
                    74:37:12:fe:85:b3:7d:e2:cb:a9:e8:19:54:0d:af:
                    e5:38:d8:9b:d0:8e:b6:ec:c1:1d:80:cb:d6:0d:4a:
                    8e:eb:92:43:70:5b:fc:c6:7c:bc:7c:1c:13:1f:7d:
                    f2:d4:a1:06:ed:44:35:9d:ac:90:dc:27:a8:5b:da:
                    b7:52:14:dc:27:a5:dc:36:00:9c:06:3b:e3:2e:5d:
                    81:6c:18:b9:e4:39:07:67:40:5c:14:9e:07:6e:97:
                    42:e2:12:d8:2c:c6:e0:c1:b3:53:d1:0a:ca:87:9b:
                    ad:59:7c:95:f5:5c:eb:b1:71:d6:50:fb:27:06:bf:
                    a3:6b:24:3e:31:30:de:95:78:2a:95:b3:15:3a:6b:
                    c4:55:36:1f:e4:67:b5:2e:4a:27:f8:b5:7a:2b:14:
                    0a:8e:47:37:93:aa:e8:90:d4:1b:a1:49:37:3a:09:
                    d6:76:0d:2c:db:0b:21:f5:b6:8b:e7:a7:40:a8:a3:
                    6b:66:5a:08:45:5f:69:64:66:1f:10:21:ba:01:72:
                    c8:22:32:45:72:e2:c1:28:c4:3b:d4:2f:24:9a:39:
                    e0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3B:2A:EF:B6:04:62:C1:E5:52:3E:80:66:DD:FD:CC:10:77:A1:37
            X509v3 Authority Key Identifier:
                keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:94:02:dd:d2:ce:08:a5:c3:43:8d:be:23:20:69:8b:b5:e5:
         75:d9:3d:9c:a1:b6:72:72:04:19:f5:e3:3a:db:91:2a:0d:9d:
         b7:1c:12:a4:eb:e5:c6:8a:34:1a:70:bf:05:c5:56:19:b9:5d:
         e2:80:4c:bd:d3:d8:ad:a5:7e:87:92:6e:84:60:a0:dc:0f:2f:
         46:32:db:b2:5f:57:3b:a3:1a:e1:5a:9b:f5:69:4b:66:a2:10:
         aa:b8:d5:5b:94:4d:d6:e9:f5:27:33:77:89:d4:02:05:35:46:
         2c:e5:e6:b1:0b:fa:e5:a2:62:aa:71:9c:0b:a6:85:4f:9a:52:
         c2:12:d1:cb:be:4e:ec:ac:af:a8:ee:f0:06:8b:de:a4:d2:63:
         96:b3:f4:49:7d:83:f8:d9:3d:09:45:d6:3e:4e:4d:46:b2:c3:
         5c:a2:ac:e5:f3:69:f1:3a:89:10:6c:d3:42:d5:cb:cd:f9:cc:
         cb:d6:88:6c:b0:01:42:bf:f3:06:1d:bc:fd:07:2a:20:3c:06:
         fa:68:25:51:9c:1e:c4:4b:c4:d5:8c:15:17:c6:7d:00:d8:b0:
         da:88:53:cd:6d:77:34:8c:fc:f0:cd:b8:43:ab:6f:09:8f:35:
         99:62:ab:c7:29:f1:07:48:6c:e7:db:e8:63:a9:c1:d8:7c:17:
         93:03:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:53 2025 by rpki-client