This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft
File:                     V09tVmTqm98xXPZMjl5n0mODwgU.mft (raw, json)
Hash identifier:          NqULG+Rvlj/qEJmSxuK2qsr2GMlV4UBI8bvHADn6omk=
Subject key identifier:   9A:44:AE:84:4D:34:F3:C1:F1:8E:9B:79:BE:56:9A:61:37:71:69:18
Authority key identifier: 57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05
Certificate issuer:       /CN=A91B85FC/serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205
Certificate serial:       0B51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft
Manifest number:          0B4A
Signing time:             Thu 18 Dec 2025 18:53:01 +0000
Manifest this update:     Thu 18 Dec 2025 18:53:00 +0000
Manifest next update:     Thu 25 Dec 2025 18:53:00 +0000
Files and hashes:         1: V09tVmTqm98xXPZMjl5n0mODwgU.crl (hash: 4QYmi0wH/ETip0ig7AMv22y5l6pCt3FRBLa1wTVRg3g=)
                          2: 52216250493611EAA0968624C4F9AE02.roa (hash: y5jVPDMadEy/JM6FxqloNmeP9XdJ1KdXIhF/JvMZygo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl
                          rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2897 (0xb51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B85FC, serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205
        Validity
            Not Before: Dec 18 18:53:00 2025 GMT
            Not After : Dec 25 18:53:00 2025 GMT
        Subject: CN=69444d8d-dc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:0b:f1:70:23:8d:ab:46:8b:92:e0:57:3c:
                    e4:3a:f3:99:36:81:d6:64:29:97:67:71:17:a5:58:
                    f7:97:94:30:cf:a8:e5:86:d8:e5:99:a5:26:7f:6a:
                    1b:3d:57:0d:09:fb:cc:a5:13:5c:f3:08:3e:c7:35:
                    ab:dd:4f:b0:fd:77:d0:21:53:4b:f5:58:e3:17:56:
                    4b:ba:e4:71:c0:68:c0:4a:ee:2a:fb:46:39:41:00:
                    51:95:12:46:a1:c5:45:8c:49:38:7d:44:74:f2:59:
                    45:37:f6:1d:62:23:4f:33:06:c7:ca:c2:1d:ad:88:
                    cd:84:84:76:3c:88:3e:03:a7:db:f2:42:94:eb:c7:
                    6f:41:4d:e7:88:ec:ed:29:79:6c:37:25:bb:dd:5d:
                    c7:8a:26:1b:37:be:f9:f7:40:29:0b:47:4c:a0:c8:
                    39:1e:e4:d1:88:20:74:a9:20:02:82:35:7a:a2:fc:
                    b7:88:3e:38:37:e9:63:89:de:63:48:2a:4a:81:6a:
                    b3:65:82:d2:30:18:67:9e:07:c9:ae:5e:ed:7e:04:
                    fc:bb:d1:2b:2d:b3:00:3d:8b:f1:0b:71:8c:c2:19:
                    e5:68:46:bc:db:b7:e9:2d:db:ba:6b:ab:f7:c2:4e:
                    40:fe:80:ac:d9:38:36:f2:6f:69:81:6d:a3:d5:2c:
                    92:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:44:AE:84:4D:34:F3:C1:F1:8E:9B:79:BE:56:9A:61:37:71:69:18
            X509v3 Authority Key Identifier:
                keyid:57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:14:d4:af:e4:4e:d0:31:ff:b8:77:1e:1b:88:7f:f5:19:06:
         e0:ea:94:06:2d:e4:bc:63:14:aa:68:54:4c:2f:f7:dd:6a:cf:
         73:1f:9e:f8:b9:fd:6e:bf:22:9d:e4:eb:94:c9:1e:e4:53:65:
         df:8a:97:f8:a4:93:ae:05:57:12:6d:45:d6:8c:54:aa:2d:80:
         9f:94:73:e4:61:59:10:fe:47:70:8b:f2:d8:4e:10:68:48:ac:
         16:36:36:2c:59:c7:25:11:b2:a2:cc:66:93:fd:f2:35:59:c6:
         d8:02:c3:35:dd:bf:ce:dc:80:0a:82:61:6f:5d:2d:3d:91:f5:
         05:ad:43:0b:10:90:c9:4a:c2:3d:cb:c1:c9:96:d2:12:5d:61:
         f4:35:c3:fc:99:e1:24:43:ff:7f:ea:fa:e8:dc:c5:cb:18:76:
         22:be:9d:a5:66:97:31:9c:e4:4f:d3:8e:5b:a8:22:96:80:94:
         fb:d6:fa:29:e4:4c:d7:31:8d:b5:37:c9:23:df:11:64:40:8b:
         32:87:2c:40:e2:e0:bc:2f:36:6b:0f:15:c8:2e:e9:93:b5:86:
         97:5e:a2:3d:60:59:9b:28:bf:37:ab:8b:aa:e6:7e:7a:61:1a:
         c2:13:5f:8d:2b:0d:47:ca:23:62:f7:cf:4f:1f:74:73:8c:0f:
         5e:a4:05:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:51 2025 by rpki-client