This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
File:                     1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json)
Hash identifier:          CsQTNp+aHhAir7uhb+DFdDHV/75B4oyrnKFXwT1dTgo=
Subject key identifier:   37:86:D7:EA:1B:3E:7E:54:03:81:77:87:70:0A:6E:A0:3E:AA:C6:A6
Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA
Certificate issuer:       /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
Certificate serial:       0F4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
Manifest number:          0F36
Signing time:             Thu 18 Dec 2025 17:24:26 +0000
Manifest this update:     Thu 18 Dec 2025 17:24:25 +0000
Manifest next update:     Thu 25 Dec 2025 17:24:25 +0000
Files and hashes:         1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: pxG9nc5LoRT75mEvuzaRIgq8Jyc3rONWTPsz2Tv1D4Y=)
                          2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: w9f85Y+KRBnRa0YJSmsDyyhylh1UfaYw453pU7HjF1A=)
                          3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: OKUbU8IYBtUlB8hYEhyLNWGvkxYq3YMYoLZU29fzMeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl
                          rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3918 (0xf4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
        Validity
            Not Before: Dec 18 17:24:25 2025 GMT
            Not After : Dec 25 17:24:25 2025 GMT
        Subject: CN=694438c9-6d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:75:56:d0:3e:1d:8d:5b:8c:81:aa:86:9a:
                    42:bf:a7:6b:2b:9b:6d:6d:10:e0:5b:0f:13:ff:3f:
                    9f:8c:b5:3a:a7:29:20:b4:8b:54:2c:e6:f8:1a:c7:
                    b0:77:93:c7:f1:12:f5:df:29:ef:29:8a:60:bc:8b:
                    12:6d:8b:0d:84:ef:e7:72:3b:ee:e6:a9:e3:de:92:
                    06:7d:16:11:43:5d:e2:4d:9d:d4:bc:42:2a:e9:77:
                    64:09:1d:b6:0e:46:89:32:f5:a4:84:01:a7:c1:89:
                    fd:c6:0c:dc:17:42:ec:0d:d6:20:7f:4e:16:78:c1:
                    54:9b:75:e3:36:7e:3a:0f:ba:ca:85:9c:62:60:e0:
                    7f:bc:b7:ff:77:a9:47:df:03:3b:5b:49:c4:20:7f:
                    d7:ce:35:c2:23:20:26:58:b6:2d:0f:6e:48:8f:5a:
                    5c:65:58:64:ba:95:6a:f7:dd:38:57:d3:66:08:e2:
                    e2:7b:20:31:cb:0f:f0:ad:76:7a:ae:7c:a4:99:43:
                    40:72:10:53:36:78:8c:2e:0e:e0:83:ff:83:4a:93:
                    0d:26:0c:a8:a7:9f:6b:e0:e0:b8:76:88:fb:a8:97:
                    cd:29:b2:79:9c:6c:b8:52:f8:f1:34:a1:2f:53:84:
                    21:66:67:e3:91:82:78:4f:98:ef:4a:0e:3f:6e:b1:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:86:D7:EA:1B:3E:7E:54:03:81:77:87:70:0A:6E:A0:3E:AA:C6:A6
            X509v3 Authority Key Identifier:
                keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:23:03:c1:15:2e:41:b6:c3:ea:a3:a9:ef:a3:99:78:3a:f0:
         c2:22:39:37:c0:5a:bb:f1:f0:f5:f0:b0:3a:bb:65:1d:ef:c3:
         f1:9d:cd:c5:9d:e0:b9:6a:1e:29:17:58:3d:c1:d0:10:46:72:
         72:f8:f9:14:a7:94:c4:78:e4:35:a0:3a:ea:d8:dd:10:65:a2:
         04:d2:da:4d:6b:37:c3:02:f6:1a:60:c2:3a:91:eb:03:aa:a3:
         a4:f2:2e:86:bf:26:10:d6:88:ff:45:ab:44:40:e9:37:19:5b:
         3d:69:65:0c:11:74:f5:0e:b5:00:dc:c0:b6:57:3f:38:f0:ad:
         5b:a4:67:c1:37:f2:c7:dc:e1:37:51:d8:39:30:8a:14:2d:e7:
         e0:ec:ad:81:87:70:e9:53:39:af:38:3c:00:cd:13:d2:1e:04:
         07:7d:cc:e0:4d:1d:a9:9b:6d:08:8d:75:41:dc:69:23:e7:d4:
         31:b3:86:02:89:fa:1e:0d:cb:50:ed:d0:98:dd:4d:c3:77:90:
         df:79:70:31:30:71:b8:c6:9c:b9:8f:97:a4:1b:f5:b0:ef:a2:
         15:9c:12:97:db:0d:6f:f9:4f:7f:ae:66:29:ee:37:eb:a8:be:
         da:d4:9d:3a:44:63:e1:12:2b:5f:1f:f2:4d:9b:d8:e5:b6:03:
         5c:67:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:19:40 2025 by rpki-client