This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
File:                     b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json)
Hash identifier:          NG2iqG36+x9DQdISaPRrLBiaBxhcuh5VjvkX7yiW8cM=
Subject key identifier:   38:29:43:4B:CF:0F:E9:A5:51:96:3D:42:C9:92:17:E7:12:95:96:CC
Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
Certificate issuer:       /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Certificate serial:       0BA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
Manifest number:          0B9E
Signing time:             Tue 30 Dec 2025 18:33:55 +0000
Manifest this update:     Tue 30 Dec 2025 18:33:54 +0000
Manifest next update:     Tue 06 Jan 2026 18:33:54 +0000
Files and hashes:         1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: nJmi+6nwzDpEdFtpO9xg8Rq3oiRWEqRsbI3wTenDN/w=)
                          2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: aPhIlaax2BlOuwZfkwHVyHDwMsLRzjqBCMCDNEm2/F8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
                          rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 18:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2984 (0xba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
        Validity
            Not Before: Dec 30 18:33:54 2025 GMT
            Not After : Jan  6 18:33:54 2026 GMT
        Subject: CN=69541b13-c760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:61:69:da:3d:1d:9f:e8:3c:6e:e2:20:0d:2d:
                    f3:45:39:88:03:be:bf:28:7b:94:80:5c:1d:da:0d:
                    a4:30:da:68:9d:3e:3c:48:52:7d:31:b9:d4:8d:16:
                    07:11:a4:38:2f:f0:fa:23:47:43:fe:0c:ed:e0:04:
                    bb:56:59:e0:a7:ac:33:0e:10:3c:79:dd:2c:40:58:
                    c0:89:91:0d:4a:89:ff:cc:c0:0e:d3:7a:50:29:44:
                    68:40:5a:63:56:7e:80:48:9e:58:75:88:e6:c9:eb:
                    1b:f9:e0:aa:0b:05:df:2f:14:ca:0d:24:1d:a5:cc:
                    51:46:57:ff:13:a4:95:16:38:be:da:0e:f1:51:51:
                    a5:76:58:a3:b1:df:8a:75:ea:eb:02:e7:87:90:39:
                    71:bf:3d:d5:00:f8:e4:2e:61:2a:00:06:d9:f2:bb:
                    ae:d0:b0:05:19:11:e6:ca:45:aa:47:c6:57:27:8b:
                    92:51:6f:e1:4f:56:4d:37:5f:f9:82:f3:61:64:e7:
                    c9:b2:f7:49:ca:8f:85:00:4d:ce:55:cd:6a:f1:e2:
                    81:d7:43:05:0b:94:e9:12:07:61:93:ee:c2:61:9e:
                    0b:00:f9:cc:13:47:9d:09:35:72:71:0f:2c:8c:14:
                    94:e4:fe:66:ff:72:bc:21:92:68:3c:bf:b4:8f:d7:
                    41:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:29:43:4B:CF:0F:E9:A5:51:96:3D:42:C9:92:17:E7:12:95:96:CC
            X509v3 Authority Key Identifier:
                keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6f:07:79:54:9c:92:3a:36:d7:1f:06:de:50:dd:0d:a4:c9:
         69:c1:76:12:d8:77:23:c2:ce:8a:67:1f:0c:88:91:90:92:74:
         f4:8a:c8:e8:7e:15:12:6f:b6:62:3a:57:d8:43:bf:fc:e5:b5:
         30:ef:eb:87:e0:0e:74:e0:8c:15:40:e0:16:2b:fe:26:0f:8e:
         42:17:c1:fd:84:4d:58:17:9e:48:e1:52:41:29:5b:e1:01:62:
         df:31:5c:66:e8:35:e1:a0:03:1f:36:12:45:22:18:63:1c:dc:
         f5:95:db:e2:3e:b6:17:a5:1d:ab:f3:a7:bc:31:80:6b:fa:9f:
         d0:94:10:9a:d8:52:92:0e:77:62:9f:4d:f2:6d:d6:8f:e8:72:
         73:b7:25:d2:f9:95:7f:20:f8:d1:07:49:9f:59:b7:53:28:ab:
         00:a8:75:d9:59:0a:39:98:c4:55:89:7e:c4:44:32:8c:35:0f:
         47:4a:73:1f:21:1f:f9:b4:63:75:49:c1:f9:f8:44:26:01:ea:
         73:60:ba:76:27:1b:95:20:bf:26:73:b8:2e:95:66:cf:8b:ed:
         66:01:d5:8d:ce:da:59:5c:fa:0d:a6:51:66:9e:1a:23:95:a1:
         51:69:bf:c6:ee:92:03:44:9d:ea:c1:04:3e:47:2f:77:24:c8:
         bd:f6:19:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 19:34:13 2025 by rpki-client