This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
File:                     MRUQtiC24M1CLhwrbpUrYEil8eI.mft (raw, json)
Hash identifier:          UX67tCWNwAcj/FuCzSqg3Xt8xETF9zYys9V6D5hLJ1M=
Subject key identifier:   AD:76:AF:42:56:4A:46:3C:F6:CE:29:E0:2B:DF:34:5E:21:E3:92:8C
Authority key identifier: 31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2
Certificate issuer:       /CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2
Certificate serial:       03FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
Manifest number:          03FB
Signing time:             Fri 26 Dec 2025 23:31:39 +0000
Manifest this update:     Fri 26 Dec 2025 23:31:39 +0000
Manifest next update:     Fri 02 Jan 2026 23:31:39 +0000
Files and hashes:         1: MRUQtiC24M1CLhwrbpUrYEil8eI.crl (hash: NT3ExBLKodo2xHnLvjIazOPogM+u/AgPj7ksud8sycQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl
                          rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 23:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1020 (0x3fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF979, serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2
        Validity
            Not Before: Dec 26 23:31:39 2025 GMT
            Not After : Jan  2 23:31:39 2026 GMT
        Subject: CN=694f1adb-2aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:16:e2:5e:96:b8:ad:ed:bf:74:14:ff:3f:
                    cf:bb:68:b4:f5:79:03:c2:62:f7:4a:34:b6:82:e5:
                    d5:fc:b4:eb:66:7b:74:fd:7c:2b:6d:e7:68:ff:0a:
                    80:be:ab:48:0e:d0:53:27:bf:47:8f:b5:ab:2f:8e:
                    ef:53:ca:60:d9:4a:a9:0b:5c:78:ea:9b:0d:67:1f:
                    e1:d9:19:fa:0b:a2:a7:a6:6d:73:7c:1e:a3:ee:1a:
                    54:58:fd:56:46:1a:92:db:33:ff:f3:d4:27:13:89:
                    ad:54:83:5c:26:19:77:ad:bb:fd:16:58:c4:27:ed:
                    5a:55:72:36:1f:d7:aa:cd:66:1b:5f:14:96:34:ee:
                    5d:a0:7a:1d:d1:3b:d3:87:09:2d:c2:15:ac:97:8b:
                    24:e9:fc:cd:91:c7:53:94:32:c1:34:a5:7f:ed:07:
                    bb:52:4e:af:eb:b5:be:1d:4d:a7:37:8c:6e:b6:41:
                    7e:93:17:dd:a0:5b:0f:4b:0d:3c:94:eb:0d:f8:03:
                    98:f0:dd:d1:1c:5a:b9:e3:2d:a4:b0:45:d7:6a:6e:
                    17:02:98:dc:5c:50:02:cf:5c:70:de:fa:fc:ef:3c:
                    1d:6c:69:4f:08:66:7e:f2:7d:48:f4:9d:fe:7a:e5:
                    d2:0f:ac:f4:39:5d:94:6e:50:61:7c:35:53:93:64:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:76:AF:42:56:4A:46:3C:F6:CE:29:E0:2B:DF:34:5E:21:E3:92:8C
            X509v3 Authority Key Identifier:
                keyid:31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:42:0c:25:b3:1e:b8:29:67:bf:48:fb:d0:3c:db:b7:a7:fb:
         8e:58:0f:7a:ef:ec:b9:0e:b4:43:41:e0:be:29:df:d3:ac:c0:
         b7:9f:72:d3:a7:14:5f:be:a3:4f:bc:ef:92:e8:9a:4e:90:1c:
         62:c0:28:61:da:6f:12:d0:d8:47:fe:6b:2d:37:bf:3b:6c:bc:
         e4:c0:76:1a:27:96:51:7a:7d:b0:ae:94:7f:26:dd:01:00:93:
         b1:f0:61:60:00:d3:87:8c:b8:89:62:7f:35:94:e4:4d:8e:72:
         99:a9:7e:51:02:c7:57:3e:57:5e:f9:bb:b3:f6:04:57:43:e3:
         98:13:b3:79:83:fe:75:65:a9:76:cd:83:c5:2f:83:84:12:1a:
         43:eb:90:77:a9:49:98:4b:4d:0b:0b:18:14:b5:d0:5f:96:5f:
         5b:8a:9a:6f:ad:29:bb:84:a5:30:66:77:21:a3:4e:2e:1f:95:
         7d:72:f2:f2:f5:ee:fe:b5:23:5a:65:af:48:56:78:2f:58:13:
         d3:14:59:e7:ec:f7:ce:af:92:0a:58:6c:7c:d1:ea:fc:64:c3:
         93:29:83:b5:4b:c0:e8:b7:bd:dd:34:37:47:8e:bd:c8:db:18:
         e3:9e:15:d0:d5:6c:fb:19:ce:c4:f2:9b:24:f5:3a:11:07:19:
         32:1f:c4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 08:02:20 2025 by rpki-client